last executing test programs:

42.397511713s ago: executing program 0 (id=638):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create1(0x80000)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x2, 0x9, 0x0, 0x7}, {0xab, 0x4, 0xf, 0x8}, {0x1, 0x1, 0x10, 0x8}, {0xe, 0x84, 0x4, 0xfffffff8}, {0x2, 0x0, 0x7f, 0x4}, {0x6, 0x8, 0x1, 0x9}]})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000600))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x8c}]})
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"})
close_range(r1, r0, 0x2)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x6, 0x59, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0)

42.279327775s ago: executing program 0 (id=639):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @empty, 0x4e23, 0x2, 'sed\x00', 0xe, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f00006e4000/0x12000)=nil, 0x12000, 0x11)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000000)={[{@max={'max', 0x3d, 0x2}}]})

39.225471611s ago: executing program 0 (id=678):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
r2 = socket$inet(0x2, 0x1, 0x7)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='pim6reg0\x00', 0x10)
pipe(0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x1}, @acquire, @register_looper, @acquire_done={0x40106309, 0x1}], 0x6b, 0x0, &(0x7f0000000140)="d17db10ce3785de4b82fe4a7fbf3e77553900f27b7819c28f5aca6dcf3f0fa641c54cadcd0b120006dedf639bcdc9a5c52255e08d2625b1e40bc4fdc2ab26f1da43e8c86303578455021c923c0338180f7f5c23aed860d6bc3af3ba082a0a1889de665f9ca4bcc60ae4213"})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

39.079047163s ago: executing program 0 (id=679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmmsg$sock(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)="671d81c9c6e456bc3070af754d43b7730c2e515babe041", 0x17}, {&(0x7f00000003c0)="58112a43c9abdc2d2b1db557acc23ea5334442ff42c2c3b29a50f2b3dc247878d180c2b7fc859df460ccab5d781dcdd589d57cc590879ca74f1aa24aac3b396826799e4fadefee96ec5a2c843993450e277ce5f30242a48b641aba1700bc3ce202204acdc86094a3cec8bed912053beee758c1fdbc7382d706e31623c063a6d406b42dc008c47a", 0x87}, {&(0x7f00000004c0)="cacf74a58809abfb3282e73b222eceadd668467b5d64cae6209ba8c00526237d239c5e3d8ef1f8ddccb0a85e17c45fe07ad23c240a25f67d72044ef056a5f3d80222c9a96811908fe21c6d1ac69ae4502f8e25aac6d299c13908cdaa66415b0a68e7bec5d865ad8183aeceea40b84e0d71e2eb19a80e3aed28458853a64cea7708ed9aeffa0734444fcc7d", 0x8b}, {&(0x7f0000000280)='$P', 0x2}, {&(0x7f0000000680)="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", 0x1000}], 0x5, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc00}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}}, {{&(0x7f00000017c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001840)="175d66c85a6462a23d84c8ed80647a30cc5076def981dcd5b9fa49ac53d9bc4ccd2620e8db63e0d4755f11fafa7159b70df0075f73b9820a5aaa3314738535583584df9771eaf1f9af2140c850df760d3a01381c0fc65a689e7398cef508936d4653e98134880806cf693cfaf6", 0x6d}, {&(0x7f0000000300)="f8f095fff64ca124", 0x8}, {&(0x7f00000018c0)="ed6c243032f1320a9ff6496fa4cabb4106eae6eacc09962cfcbed7f6764b24ee837c3cc85fa5011299e829381155b398bde3a04bb3dd680e0c6944db817d795c46d192df2a87edbdcbb0974dcb2faa678a095dcf00a6723feaa4e7d337ad6860d08c2df29f0ff2bf0141924887764265fd2f3fad8a74a221c61562f6e4d332a66f77b02032bd8603c381a3e0e773fb", 0x8f}, {&(0x7f0000000580)="517f9f629476ce40", 0x8}, {&(0x7f0000001980)="8b93d2b8f67dea388513dc5fd82647aad8f8f5e054e0b1460babf56b0a2ae97eccd671812078253b746edabf31ab1f382281664997a994023e7086ced5c36103fbf2903085ddb3ff0a03583a", 0x4c}, {&(0x7f0000000600)="e892bc493efeb771834d", 0xa}], 0x6, &(0x7f0000001a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000001ac0)=@in={0x2, 0x4e20, @empty}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)="642813f5ef5f965818db8a10bb6f9c3cfd26f08d2de3417065f82648c628b5e96e0fe919fbd3ed1dec0b459189be693927520cc40fe0f0251370f1f1461b20dbb9339bc90fb8b3d59bd148cfe3b078a4a9541f", 0x53}], 0x1, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="a3d5a6a4ef0702dbed481fd0332dbab597d2a5ede63a755b0b626f83c7beca0399085df5f3cf2c7cf241ef1df1217eda0e154931e96fb242a8619db2b518dea6afabbdaa708223b08211c3ab3691a33b22a9d9e4794140a068bd8f9bb718153abfda0b7ebec2770e9da162f242416598f58eee9b36802fd291b83ddf00366375b901", 0x82}, {&(0x7f0000002d00)="3d1f3a87db987ec39d9e77dd7c74e29924adc104ded1dd431a7fca566e6ecc671b3eb6b75e91aa60b7d99e440309cffb62bb1ec9af3fd995908d4fd8a867b0988b9514722cd54a077d475aae270a0cc7a494059ef670e8e8ed583e2009a7b5d2a7e6186bcfd3788ac67ce7b08038ec0aeb349d086c6f74673b27c0ef051442ec3249aa7f81ef2bf10a850fa89cc7d12448a08622f67928ea66975ea15b62f01d0c26fce10018cf729045d231b4c8db", 0xaf}, {&(0x7f0000002dc0)="5d706d8659b367c49839bfa50c6d140970175e12edc6b2c19464fb728e9ce2fba0", 0x21}, {&(0x7f0000002e00)="dcf2d4aca9c1b7d07f5540f5c409a37c1ad5ff173ce8b9c7b0d312b4c6a457b577fdb78a7f6b8f6bc84972b38599fe0053879dc80a6ea7f3c87362ddc9608ae1", 0x40}, {&(0x7f0000002e40)="99213b17c54cc880c52ea20bfd1facde40d26460e2f04bbe3020e707829c9309d0", 0x21}], 0x6, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14}}], 0xa8}}, {{&(0x7f0000002fc0)=@ethernet={0x6}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003040)="3598ef73dd67f80085b06b06d008121f1caf867d433d980eb44ab81fa05f17f915e7a30a8ac0b8f1d9fb019f5e27501fab90f042aae8a516", 0x38}, {&(0x7f0000003080)="8cd20d9bf59eec29474415b04d5dd435be244f077bd26070286c9ed445ad3c738d656d0dfa179db0a3b170b635656a0a9f61959fbde8e9", 0x37}], 0x2, &(0x7f0000003100)=[@txtime={{0x18, 0x1, 0x3d, 0x5000000000}}], 0x18}}], 0x5, 0x8000)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

39.026251214s ago: executing program 0 (id=680):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x22)
ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x2)

39.003647864s ago: executing program 0 (id=681):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x646b40, 0x0)
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'macsec0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}})
userfaultfd(0x1)
socket$unix(0x1, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x209, 0x0, 0x1, 0x400}, 0x7, [0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x3fb, 0x7fff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9f1, 0x0, 0xffffffff, 0x4, 0x2, 0x0, 0xef, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x20000, 0x0, 0xffffff81, 0x687, 0x4033, 0xfffffffe, 0x0, 0x3, 0x0, 0x6, 0x7, 0x0, 0x0, 0x2, 0x51, 0xfffffffb, 0xfffffff8, 0x2, 0x200, 0x1, 0x1, 0x80, 0x0, 0x6, 0x8000005, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9], [0x2, 0x7, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff7a, 0x0, 0x2006, 0x9, 0x0, 0x3, 0x800, 0x88e, 0x0, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x2, 0x0, 0x1, 0x2000000, 0x40, 0x1, 0xfffffffc, 0x1000, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8000, 0x0, 0x3, 0xfffffffd, 0xfffffffd, 0x1, 0x100, 0xb9b, 0x40, 0x0, 0x2, 0x1000], [0x0, 0x0, 0x0, 0x6, 0x81, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf30b, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0xfffffffc, 0xd2, 0x40000, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc, 0x0, 0x80000000, 0x5, 0xa9, 0x0, 0x7ff, 0x0, 0x80000000, 0x4, 0x5, 0x0, 0x4], [0x4, 0x0, 0x7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x9, 0x1, 0x0, 0x40, 0xb5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb1, 0x2, 0x5, 0x8, 0x0, 0x0, 0x1000, 0xffffffff, 0x68, 0x80, 0x0, 0x1, 0x7f, 0xe, 0x0, 0x3, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5]}, 0x45c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000000500))
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000ff0f76010000000000000200000000100000"])
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'vlan0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)

38.935701055s ago: executing program 32 (id=681):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x646b40, 0x0)
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'macsec0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}})
userfaultfd(0x1)
socket$unix(0x1, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x209, 0x0, 0x1, 0x400}, 0x7, [0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x3fb, 0x7fff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9f1, 0x0, 0xffffffff, 0x4, 0x2, 0x0, 0xef, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x20000, 0x0, 0xffffff81, 0x687, 0x4033, 0xfffffffe, 0x0, 0x3, 0x0, 0x6, 0x7, 0x0, 0x0, 0x2, 0x51, 0xfffffffb, 0xfffffff8, 0x2, 0x200, 0x1, 0x1, 0x80, 0x0, 0x6, 0x8000005, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9], [0x2, 0x7, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff7a, 0x0, 0x2006, 0x9, 0x0, 0x3, 0x800, 0x88e, 0x0, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x2, 0x0, 0x1, 0x2000000, 0x40, 0x1, 0xfffffffc, 0x1000, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8000, 0x0, 0x3, 0xfffffffd, 0xfffffffd, 0x1, 0x100, 0xb9b, 0x40, 0x0, 0x2, 0x1000], [0x0, 0x0, 0x0, 0x6, 0x81, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf30b, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0xfffffffc, 0xd2, 0x40000, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc, 0x0, 0x80000000, 0x5, 0xa9, 0x0, 0x7ff, 0x0, 0x80000000, 0x4, 0x5, 0x0, 0x4], [0x4, 0x0, 0x7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x9, 0x1, 0x0, 0x40, 0xb5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb1, 0x2, 0x5, 0x8, 0x0, 0x0, 0x1000, 0xffffffff, 0x68, 0x80, 0x0, 0x1, 0x7f, 0xe, 0x0, 0x3, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5]}, 0x45c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000000500))
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000ff0f76010000000000000200000000100000"])
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'vlan0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)

1.837183393s ago: executing program 2 (id=1483):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private1, @in=@private=0xa010101, 0x4e21, 0x8, 0x4e20, 0x2, 0xa, 0x80, 0xa0, 0x1}, {0x0, 0x10000, 0x7, 0xfffffffffffffff9, 0xffffffffffffa98f, 0x2, 0x76, 0x9b}, {0x9, 0x100000001, 0x9b5, 0x9}, 0x1, 0x6e6bc0, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d3}, 0xa, @in6=@mcast1, 0x3503, 0x3, 0x0, 0x95, 0x10000, 0x4, 0x800}}, 0xe8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fchdir(r0) (async)
fchdir(r0)
fcntl$lock(r3, 0x26, &(0x7f0000000380)) (async)
fcntl$lock(r3, 0x26, &(0x7f0000000380))
read$eventfd(r1, &(0x7f00000000c0), 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10})
dup3(r5, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x900, 0x2}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x900, 0x2})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r6, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg$unix(r10, 0x0, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)

1.740164884s ago: executing program 2 (id=1484):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2e, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304"})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
setuid(0xee00)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x8, 0x7fff, 0x1d)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r5, &(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14)
r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.224409372s ago: executing program 2 (id=1485):
r0 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xa7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x4, 0xfa63, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x2, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1f, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x640, 0x10, 0xff, 0xbb}}}}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x81, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
add_key$user(0x0, 0x0, &(0x7f00000000c0)="9b216cf52304fdcaa48cf735d1ca721dd40644c7ec5769c666d220eb87111019131a78ee65c150cb12", 0x29, 0xfffffffffffffffc)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d"], 0x0)
ioctl$sock_bt_hci(r1, 0x400448e2, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

1.041042384s ago: executing program 3 (id=1487):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x2d, 0x6, 0x0, {0x1, 0x0, 0x4, 0x0, 'GPL\x00'}}, 0x2d)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

1.039613824s ago: executing program 3 (id=1488):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"})

1.038635544s ago: executing program 3 (id=1489):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
r1 = syz_clone(0x4000000, &(0x7f0000000000)="917fbe8387037334b73d97a015b6830a5e885cc1aff2da96dc5bbe35168b5dcc82d6b5f1c729dcdb253ab2c811cecfe5ddc2718d135a9c7507b3f84e5d5b065b69e2da53a2b51f35bf94c879f9de5cdb0cdf92ae33acba66e9ad6ea59f0375b4c5ad097044160ab591e3efa5203658224bb5a8141f96a42a264e47bfe48331a06d7fe800e735be3b6bf0df56d3c797a4174e1f0c268bf2da1dd73197ef22034d7698adabbd0a1b1a4e9ab9a9e46ed5ebfad78ad4294c8e6b64d5b3731c83", 0xbe, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="94f601e2459d0b054e18a7e61eb144a5510702f9325c664d9a24825b34fe98dece47fbd33681a4779aff5a0f5bd6b53ca84982956e240dfb019aa781b0ae478bd4354f02827e409872a9f1205ebdd7eecf86c223b45cf066838c988abb0a9dc5193e7ce83e8d4169f4ff8be8b16a38a31f6616d8d49cfee863381a19f2d2e519aef396ab815660179ad81e95dac7085b72ef6ebbe0bd")
capset(&(0x7f0000000200)={0x399f1316, r1}, &(0x7f0000000240)={0x1000, 0x8, 0x0, 0x8, 0x5, 0x414})

1.004511925s ago: executing program 3 (id=1490):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002"], 0x44}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]})
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="08000efb000000007e", 0x9}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0)
read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020)

677.77043ms ago: executing program 1 (id=1492):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
r1 = socket$inet(0x2, 0x1, 0x7)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='pim6reg0\x00', 0x10)
pipe(0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x1}, @acquire, @register_looper, @acquire_done={0x40106309, 0x1}], 0x6b, 0x0, &(0x7f0000000140)="d17db10ce3785de4b82fe4a7fbf3e77553900f27b7819c28f5aca6dcf3f0fa641c54cadcd0b120006dedf639bcdc9a5c52255e08d2625b1e40bc4fdc2ab26f1da43e8c86303578455021c923c0338180f7f5c23aed860d6bc3af3ba082a0a1889de665f9ca4bcc60ae4213"})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x100000007, 0x3e, 0x6, 0x2, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

675.93136ms ago: executing program 2 (id=1493):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fstat(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x3, 0xd, 0x1, {0x22, 0x9d1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x0, 0xff}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xfc, 0x4, 0x57, 0x0, 0x1}, 0x7a, &(0x7f0000000180)={0x5, 0xf, 0x7a, 0x6, [@generic={0x43, 0x10, 0x1, "33f0f77dcec5ecb55000ebb0eeca55bf48fab3b9359d6cb7e37d91f9adc29f7bb3ee0043de6b6fab8c08a69029af479b6b117ea16517f405b3b0e4e30e5c173a"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5a, 0x5, 0x1, 0x1004, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x71, 0xff00, 0x81, [0xc0]}, @wireless={0xb, 0x10, 0x1, 0xe, 0x80, 0x2, 0x9, 0x4}, @generic={0x5, 0x10, 0xa, "1cf6"}]}, 0xa, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x1b, &(0x7f0000000380)=@string={0x1b, 0x3, "d2939b5b370bb0a2373d97ae9a996160b8b8b10627672e862e"}}, {0xe7, &(0x7f00000003c0)=@string={0xe7, 0x3, "4c9b935bb9686864149651730918ae940a193efad1362f6ec5935ae20f203a2c109267323ac549182b0136352d212975a6f2229c4cd9e9dcfcb4f960d25658f45af9d8634d31a9b4fa8fdaf04a91d1a6390adebedf5841d3cea7cb79f270ce6e7c79c6725a53f3aef0ef3f3400b77e4a7ddfa9a922227b3f635119e4db86e57981387a08d066e53fab2e3b0e162b8463397489d83ced7e6a50278cd22e9d206c3f941db57fa56065c57ebb698b902101b4e9c90fa9a29a321e94975154a38450effe9b1a78510c9975f9fa32dc744a0b6a11cd3a79e5d8b1a4c9dc05e327d2c27447ac71fb"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xa4, &(0x7f0000000500)=@string={0xa4, 0x3, "27eeb94d7344d04eee13faa3f4bf1e073ed22b9b08ec993669a25d25069b111b29a1f207b1c31ce11382381c0794c10fd128c40728a0565d892224dfa9da8f193918fc7d9c889790e23f48aa3e7b6ba2c8c1e30ffd883ac7b6e29a1aaac304d54858ec3fb540697da9bdba40446ff65cc4793f25487c71db867ce941ca779141e4088d4a49d440ad8abff2fdc750c00e9fc5dbec1c3e76d0fe704eceeb2937740216"}}, {0x89, &(0x7f00000005c0)=@string={0x89, 0x3, "c70aea5212e9b6bccf057a6be0a9bd7c015258372e96290524ce55ad7d61ee85f93fcbfae4b084bf2fa16f93f37a8e5a913b434dd04f811cf2eeba4d1f6bc55b6f8e4ef43a18fea715d996ca8e8e9ed6d5d5d9e8037622c132cca7d75d16cd24399bb99c72dfb4eff90b0b9d94b94bcb21dffd23289e9fe69f5972b912ae37712372ec3b19eb0f"}}, {0xa7, &(0x7f0000000680)=@string={0xa7, 0x3, "8f82794a4c2f566c3782d1aac78fb1c965fd46246e9882cc2b7cf12e86e82d6ba696fe502f23f3c8edf0eae27b131a3d622344c8b53a41ef1e112048e54327c194f3809b6fa9d2e1be530bb44e87a5f0cf927e201ab2a1494b0f4424da97cb6ef59af47d849a89c5b6c02932f471ea8446b7fe8968185facfb25472ebe808f695d10f645a4b171bfe4e1edda004da0abb376be679cd4422627dff90f1c75f33cd22743d349"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x84f}}, {0x8b, &(0x7f0000000780)=@string={0x8b, 0x3, "7aa79fea345da2d7673c85997396c255cdf922762715d29a3cd03e1766dbc4533f29109049515e5239e76c7acc4cc999007e1b2d493f7f1a0cc0875dc8f56ebb121bb8bfeff38a24aa62b7adc9afc3300b6134131deb07ac9c36a150b4c432080710015ed78def62733dada9b7202e5b1402045e5527e8101c25f30942207e1206c291e4aa008251ec"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000000c00)={0x24, &(0x7f00000009c0)={0x20, 0x4, 0xee, {0xee, 0x3, "a543b751bd551ada5b9f755e59cdb5d6bb1e76783cc46e2bb91eb3f4d1e36a72377c14157dc90d60fea49d973aab6756b587c330cf424615cf0a3393c8e8559dc637ae225a2e7925265cd05c1219ebd9bf3ad8785bbf0f69aa71a15e5afcca1d711814f663abe1b9b174a5921773c8d990dc9a817c7dc8758b146bd1a4ee851ddd193ba1ada7e0e3d932f71b4d051d79fc94682d1d8b6dbf39956e20b400b7495affc58c9594e52f9fed78e0eeae003a16b85930b109e26b39dbe2e24571c9cd7d09383d1124457a33ba32c59e772bc53f2789990bf00b872420095a973ad0547bcdf1bbe7f886e2b84d4e32"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "d563007c362f6031cb4a5af50bfe17349d54d3d8defd3753ab1deccdfc4b2de6f2730ebdf5d8eb84232f2627becbfbfa29b6f94467415f5a3f06e05f787a69c266a008dd6bb9f84379b7b8d49cceac1e6ac1051fed54675eb44e5b545ddcd63835e08104188285d975e4754de1ac6af9daed79c2a7ce538d84096ccc4f96bf9af5b29dbb196c0aeca6e68f165d2bc762f8f4f92d77a20fa44994fb3b02ff7b6282cbac619289cebdda8097c7017cdce09869ab53456a67cf560b625c8627fb1ca3d8b17b517d0914246526cddb229e5ec73666aa58a8cda0967eba4a81f7624114cc8e0b0b47bca1498dcc026eb5432c1aecddd935009c"}}, &(0x7f0000000840)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0xa, "e79a"}, @global=@item_012={0x1, 0x1, 0x2, 'P'}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0xe0}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c40)={0x0, 0xb, 0x3d, "12929a656c74b21a57120d476c9fb4812817fd846c84abe3e5b20f9ffc9ea343fc09a43d9afadd7f5664e96c316b23b9b6bb2407f9811af0879dd61ef3"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000e80)={0x20, 0x3, 0x1, 0x2}})
r5 = syz_usb_connect$cdc_ecm(0x3, 0x10a, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0x7f, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "878272"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x39f, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x8, 0x40, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @mdlm_detail={0x7c, 0x24, 0x13, 0xe, "7cefe1568f585406bff7f7f5f8ae481d656dbd2790d627002873b6d9b0d92e91a61e49551eb96df4d0fabc09de9c2ff6f9d62d5053bf5ba24ad75035b3f7b5326956f6f8c3c90b2e87550c16899709141289e6cc8a14e7105f6982b1cdea5176defd1e44aef08f1f5dbe4f4b681a8fc68797be6400e170e7"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0xc, 0x24, 0x7, 0x0, 0x4, [0x800, 0x9, 0x800]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x218, 0xf, 0x9, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x3, 0x96}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0x7}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x8, 0x2, 0x9, 0x20}, 0x50, &(0x7f0000001080)={0x5, 0xf, 0x50, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf, 0x78, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xce, "9158ebfcfef7835b5b3b706f17064ed5"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xf4, 0x5, 0x4, 0xff00, 0xca68, [0x140ff, 0xc0, 0xffffff, 0xf, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0xd, 0x0, 0x8}]}, 0x8, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x418}}, {0x31, &(0x7f0000001140)=@string={0x31, 0x3, "c6a320067d898eab9c9d6a91a6a3ac64525596f63eb67841fc899f17b32f70e2b539826912c657f6009baa1fe593b4"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4}}, {0x12, &(0x7f00000011c0)=@string={0x12, 0x3, "5c28986498c836d4dad2038d811bb7cb"}}, {0xec, &(0x7f0000001200)=@string={0xec, 0x3, "03f30c20079dd6180a40201f0f76226ef40fc8dc0884121f392b091ac40791d4182655d585eadce5aaf3c39e0cc1120b59817051de29aea0bd4070ad7813a0d56c88f503e64e38742c1ad5ceda44d9462b7ecaea2de4f38f3414c1f8e52732f2009e8435d07b535c41c5b557dc4f89c948458a42754e31d819e7ad411d5ddadada94efd53a0ef2522bdc4b77e733d5831c4d19dbd94dff9d3553c16653b3d837ad433621dcbd0ed81a7831be48ce48a465138d6a082814458cf9eeab769b927fae922e80d4c8bbc547fd2bd5c141ec1d65ecc2106adea1d7358f44853ea509a2cc07452533afa3deb695"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x140c}}]})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001500)={0x14, &(0x7f0000001440)={0x60, 0x22, 0x78, {0x78, 0x5, "bd523c4302ffc50035ef501472db056d9a547ece0a342223eaea56854a0110b70549387627da59ae6b50b631bbd2f92e5350e5ac06ce35bf4db87684d31e515e0964214efcf581eda9d06b377b4e888ce2f65a1e4443d59b34b005a4d2680b4d3f55393a3b8b9b950cd38bd7e22d724d295c7443e9b1"}}, &(0x7f00000014c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001680)={0x1c, &(0x7f0000001540)={0x40, 0x0, 0x9b, "985a3866a405e9158f1141f13d362c1075e26c039c8c516e932be4e01a217d85868a0837f1ffb18f056f90ed3c972bcd74361cc22fb85163e67c2e2fce05915e099e2ed4a12c2db486293b88e0b18b828edbc485628677060515c71b2b805581363ad6cab2202cc3a572920e0b26c8dc57c11f46bffc0e8ce0248635eca754637c4d9cf316fb79a20c756421a3b391f3bb44fb4fa04ca380855490"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x9}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140))
setuid(r3)
ioprio_set$uid(0x3, r3, 0x4007)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r3, &(0x7f00000000c0))
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x306000, 0x0)

622.631511ms ago: executing program 1 (id=1494):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x0, 0x4, 0x86220080, r2})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0xfe}, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
accept(r0, &(0x7f0000001340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000013c0)=0x80)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r5 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="58e18e6433eaa51c9945e0590e8775da573729f16b40ee7f3e9b525e7c88384fddfd24b2913b3ff65dbc8c284d3af38c6f1581683349f013770e5c54950a2e2141c26a8c0a3f3df27bd4b287840877a455b03b263ad03fb3a9f16559f5d8e7da129dcd8298ba20dfdb7749fbc161ca48b66664e49cd31522ba95b143340ab3035a66273eb46f4b1a2ef36b20", 0x8c, 0xfffffffffffffffd)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000001400)=0xffffffffffffff97)
r7 = getgid()
keyctl$chown(0x4, r5, r6, r7)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0)

594.102451ms ago: executing program 1 (id=1495):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast}, 0x10) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00')

521.990362ms ago: executing program 1 (id=1496):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x80503d0a, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x60b, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xe, 0x0, 0x1, {0x22, 0x2c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x34, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x0, 0x3, 0x20, 0x95}, 0x59, &(0x7f0000000100)={0x5, 0xf, 0x59, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x2, 0xe, 0xf, 0xb}, @generic={0x49, 0x10, 0x4, "997fc685a9b4c54355c131f5ef481b48d947745f92f0b2a98e794d71d2e5b31f4346ac6a4cdadadfe830e0ca0be0a56ec5280d594dff2b233848692c182e0b61b5d4c004f5c2"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1621}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="cde892e6ff4fa01df24ff24f7bc7a2d70e099be85a5b822af4c9707dc2dc989c8678e4feffc2549281874cdb167de982096c753e395f127c9c844854bc8ad65ed3d3fdeb1bd4911de1d0a3c3bb0f5ca2203fa88ee3ab95038676be5865a35a8aa4a92312eaef60cfbcdabce6516f7e9f6259784e5fe8e92b8b8c97faeaf37c23bf48940d65ceba072eec28734847e1f73ad6ba902235ff440109da7c0a7b2047fc55e0b4df"]}, {0x49, &(0x7f0000000440)=@string={0x49, 0x3, "8ed6b3349e205a513e487fab5b9dac5eac7e49a37e32ea41afe8dc9e894e2b9bec15c8a0622f7d70538bbe819bc062f720648abb34032e8ce6c43234eb76e83fd766822a1e598a"}}, {0x0, 0x0}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r5, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x1, 0x159c2, 0x4}]})
r6 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = fcntl$dupfd(r8, 0x406, r9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
flock(r10, 0x5)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500), 0x5a, 0x0, &(0x7f0000000140)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222610051f612948409bc69ce5464f379a3cf0522ceec07847628e2f84ca2f381cb8dc311c91da7c40d13dcb2579d8c55dcd67490bce8a4c9c7f6a61b64ac6004067665d"})

245.047526ms ago: executing program 4 (id=1499):
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (async)
r0 = socket(0x1e, 0x1, 0x0) (async, rerun: 32)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x90000) (rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000280)={{0x3, 0x1, 0xffffffff, 0x1}, 0x9, 0xfffffffffffffff7, 0x7}) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xd88, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xa2c, 0x11d, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x370, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x5}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xd5, 0x0, 0xff46, 0x0, 0x56f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x8}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x6}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0xa}, {0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x6}, {0x0, 0x2}, {0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x7, 0x8}, {}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0x1}, {0x5, 0x3}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x7, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xde, 0xff34, 0xde, 0xfff9, 0x40, 0x7ff, 0x394b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x700, 0x4, 0x3, 0x90a2, 0xec, 0x800, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x41, 0xfffd, 0x7e, 0x4, 0x7, 0x4, 0xc]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7721, 0x9, 0xb97c, 0x81, 0x101, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22bc, 0xe, 0x9, 0x1000, 0x2, 0x2, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {}, {0x6, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x5, 0x8}, {0x7}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x2}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x36, 0xc, 0x9, 0x12, 0x2, 0x18, 0x2, 0x6, 0x1c, 0x16, 0xc, 0x3, 0x58, 0x36, 0x60, 0x1, 0x48, 0x60, 0x0, 0x7e, 0x4, 0x30, 0x30, 0x3, 0x1, 0x3, 0x6, 0x12, 0xaac3f4793927181d, 0x6, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0xfffb, 0x1, 0x8000, 0x3, 0x27, 0x776, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x4, 0x7ff, 0xe441, 0x67, 0x100, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xb, 0x9, 0x3, 0xc, 0x3, 0x36, 0x1, 0x18, 0x6c, 0x6c, 0x3, 0x62, 0x24, 0x24, 0x1d]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xc, 0xc, 0x3, 0x16, 0x9, 0x60, 0x5, 0x16, 0x30, 0x30, 0x13]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x34, 0x12, 0x79ab3f09a64e8047, 0x30, 0xc, 0x12, 0x1b, 0x5, 0x48, 0x30, 0x6c, 0x5, 0x1, 0x3, 0x16, 0x18, 0x6, 0x36, 0x5, 0x0, 0x3, 0x24, 0x4, 0x18, 0x2, 0x6c, 0x4, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ddc, 0x1, 0xe2, 0x3ff, 0x7, 0x482a, 0x3, 0x200]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x6c, 0x36, 0x48, 0x1b, 0x1, 0xc, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x38, 0x1, 0x1b, 0x36, 0x1, 0x3, 0x3, 0x1b, 0x16, 0x96, 0x12, 0x12, 0x18, 0x24, 0x4, 0x60, 0x4, 0x60, 0x3, 0x16, 0x9, 0x4e, 0x9, 0x60, 0x1b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x4, 0x26, 0x1, 0x3, 0x800, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3ff, 0xe6, 0x800, 0x40, 0x36, 0xd6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x16]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xd, 0x8, 0x9, 0x1, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x3, 0x48, 0xb, 0x2, 0x4, 0x1b, 0x16, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x2, 0x2, 0x5, 0x24, 0x2, 0x3, 0x36, 0x16, 0x18, 0x24, 0xc, 0xb, 0x4, 0x16, 0x6, 0x30, 0xe, 0xb, 0x12, 0x6c, 0x36]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x2}, {0x1, 0x3}, {0x1}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x5}, {0x5}, {0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f97, 0xa, 0x2, 0x0, 0x8694, 0x0, 0x7f, 0xbe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}]}, {0x644, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8, 0x2, 0xff, 0xb5f4, 0xa, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x5, 0x6, 0x6, 0x24, 0x2, 0x5, 0x16, 0xc, 0x48, 0x60, 0x3, 0x27]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x1bf9fcf18b0a630d, 0xc, 0x4a, 0x1, 0xb, 0x9, 0x6c, 0xb, 0x1b, 0x2, 0x60, 0x7a, 0x12, 0x16, 0x5, 0xb, 0x4, 0x24, 0x24, 0x36, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff, 0x6, 0x77, 0x1, 0xfff, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x4}, {}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x4}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x5}, {0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {}, {0x6, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x6c, 0x5, 0x4, 0x18, 0x36, 0x36, 0x12, 0x1b, 0x6c, 0x41, 0x48, 0x4, 0x2, 0x16, 0x18, 0x30, 0xc, 0x16]}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0xffff, 0x522, 0x6, 0xb, 0xc, 0xfffd]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0xa}, {0x2}, {0x2}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x4}, {0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x6, 0x8, 0x7f, 0xfff8, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x1}, {0x6}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xe8abc5434a947ec5, 0x4, 0x30, 0x1a, 0x1b, 0x3, 0x6, 0x4, 0x60, 0x18, 0x1, 0x6, 0x36, 0x2, 0x60, 0x4, 0x6d, 0x1, 0x1, 0x30, 0x3, 0x16, 0x5, 0x19, 0x48, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x5, 0xa}, {0x7}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x5}, {0x1, 0x8}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa7f3, 0x4, 0x7fff, 0x4865, 0x9, 0xff, 0x6b71]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xfc01, 0x6, 0x4, 0x3, 0x400, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x2, 0x100, 0xe, 0x6, 0x0, 0xa4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x7}, {0x5, 0x1f}, {0x2, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0x9}, {0x5, 0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x3, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x9, 0xf3, 0x1c00, 0xa7, 0x5, 0x0, 0xc3df]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x36, 0x24, 0xb, 0x16, 0x9, 0x48, 0x36, 0xc, 0x1b, 0x0, 0x9, 0x48, 0x4, 0x1b, 0xb, 0x5, 0x36, 0x3, 0x6, 0x5, 0x24, 0x0, 0xc, 0x1b, 0x4, 0x5, 0xc, 0x60]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfff7, 0x9, 0x1ff, 0xf, 0x480, 0x362a, 0x2]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7438, 0x1, 0x4, 0x7, 0xd508, 0x6, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x6}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x4}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0x8001, 0x6, 0x9f5, 0xef2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x6}, {0x7, 0x1}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x4}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x6}, {0x1}, {}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x1}, {0x3}, {0x7}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x36, 0x1b, 0x0, 0x9, 0xc, 0x4, 0x1, 0x9, 0x2, 0x1, 0x1b, 0x6, 0x24, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x7}, {0x2}, {0x2, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x256, 0x1, 0x1, 0x3, 0x401, 0xfff0, 0x5]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x18, 0x60, 0x5, 0x0, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0xedcd, 0x7, 0x2, 0x8a7, 0xa, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0x1000, 0x200, 0x1, 0x5, 0x81, 0x3c7]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0xc, 0x12, 0x6, 0x9, 0x36, 0x36, 0x5, 0x3, 0x1, 0x60, 0x3, 0xb, 0xd, 0x48, 0x60, 0x16, 0x4, 0x6c, 0x48, 0x1, 0x71, 0x86ac547523b0b31c, 0x6c, 0x6, 0x48, 0x4, 0x48, 0x3, 0xc]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x6c, 0x60, 0x30, 0x48, 0x3, 0x9, 0x1b, 0x6c, 0x18, 0x5, 0x9, 0x16, 0xb, 0x6c, 0x24, 0x16, 0xc, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x6, 0x6, 0x81, 0x428, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x18, 0x16, 0x9, 0x9, 0x3, 0x18, 0x6, 0x2, 0x2, 0x60, 0x2, 0x4, 0xb, 0x2, 0x2, 0x5, 0x30, 0x9, 0xc, 0xc, 0x9, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x400, 0x5, 0xff, 0x1, 0x0, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x232, 0x2, 0xda3, 0x8001, 0x7, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x1, 0x3, 0xb5f2, 0xfff, 0x8, 0x401, 0x6]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x1, 0xfff, 0x8, 0x0, 0x3, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x2}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x5}, {0x6, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x1}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x1}, {0x0, 0x9}, {0x6}, {0x5, 0x5}, {0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xd}, {0x4, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x2, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x16, 0x18, 0x30, 0x18, 0x30]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x33c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x13}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x270, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x2, 0xe, 0x7, 0x4436, 0x3, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x2, 0x9, 0x4, 0x92af, 0x1, 0xd554]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6a]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x6c, 0x30, 0xc, 0x16, 0x24, 0x9, 0x0, 0x48, 0x2, 0x36, 0x9, 0x60, 0x4b, 0x60, 0x16, 0x60, 0x12, 0x6, 0x3, 0x9, 0x1b, 0x6c, 0x18, 0x12, 0x0, 0xbb9d4b5a740cce7e, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x80, 0x3ff, 0x4, 0x4, 0x260b, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x4e, 0xfffc, 0x1, 0x1, 0x1, 0x211, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0x6623, 0x76, 0xeb, 0x2, 0xb1, 0x2db]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xca, 0xff, 0x7cf, 0x6, 0x7, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc48, 0x3, 0x3, 0xff, 0x5, 0x2, 0xfff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8, 0xbdd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8275, 0x4, 0x5, 0x0, 0x1, 0x7, 0x6, 0xd]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x8}, {0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {}, {0x6, 0x5}, {0x7, 0xa}, {0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0xa}, {0x7}, {0x6, 0x9}, {0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x4, 0x1}, {0x7, 0x9}, {0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0xf, 0xdd76, 0x8, 0x8, 0x4, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x7, 0xa}, {0x5, 0x8}, {0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x3}]}]}]}]}]}]}, 0xd88}, 0x1, 0x0, 0x0, 0x10}, 0x890) (async)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async, rerun: 32)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) (async, rerun: 32)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x5dc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004008) (async)
ioprio_set$pid(0x1, 0x0, 0x2004) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
ioctl$BLKRRPART(r5, 0x125f, 0x0)

244.476757ms ago: executing program 4 (id=1500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x8, 0x460201)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={[0x0]}, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x40010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x4000000)
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x5)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1081, 0x200000000000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201)
r4 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0xe, {0x2, 0x4e20, @local}, 'veth0_to_batadv\x00'})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x3)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0xf7f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"})

243.948677ms ago: executing program 4 (id=1501):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
read(r0, &(0x7f0000000040)=""/123, 0x7b)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}})
accept$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x321101, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000})
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

229.157307ms ago: executing program 4 (id=1502):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
r1 = socket$inet(0x2, 0x1, 0x7)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='pim6reg0\x00', 0x10)
pipe(0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x1}, @acquire, @register_looper, @acquire_done={0x40106309, 0x1}], 0x6b, 0x0, &(0x7f0000000140)="d17db10ce3785de4b82fe4a7fbf3e77553900f27b7819c28f5aca6dcf3f0fa641c54cadcd0b120006dedf639bcdc9a5c52255e08d2625b1e40bc4fdc2ab26f1da43e8c86303578455021c923c0338180f7f5c23aed860d6bc3af3ba082a0a1889de665f9ca4bcc60ae4213"})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x100000007, 0x3e, 0x6, 0x2, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

156.240218ms ago: executing program 2 (id=1503):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
pwrite64(r2, &(0x7f0000000000)="48ed", 0x2, 0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x0, 0x4, 0x86220080, r3})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0xfe}, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r3})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r6 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="58e18e6433eaa51c9945e0590e8775da573729f16b40ee7f3e9b525e7c88384fddfd24b2913b3ff65dbc8c284d3af38c6f1581683349f013770e5c54950a2e2141c26a8c0a3f3df27bd4b287840877a455b03b263ad03fb3a9f16559f5d8e7da129dcd8298ba20dfdb7749fbc161ca48b66664e49cd31522ba95b143340ab3035a66273eb46f4b1a2ef36b20", 0x8c, 0xfffffffffffffffd)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8)
r8 = getgid()
keyctl$chown(0x4, r6, r7, r8)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0)

106.016619ms ago: executing program 3 (id=1504):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000280)) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB='fscontext?}', @ANYRESHEX=0x0, @ANYRES16, @ANYRES32])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x5) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 32)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002740)=ANY=[@ANYBLOB="380100001000010000000000fedbdf25ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000080146c00000000001000000000000000ffffe0000002000000000000000000000000000000000000000000000000fffffffff7ffffff00000000000000000000000000000000000000000000001000000000000000000000000000000000040000000000000000000000000000000200000000000000000000003b0a0000000000000000000000000000020001060000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = dup2(r5, r2)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f00000003c0)) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x40) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) (async, rerun: 64)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x6)

105.466939ms ago: executing program 2 (id=1505):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020)

103.071919ms ago: executing program 3 (id=1506):
r0 = syz_open_dev$usbfs(0x0, 0xf, 0x8041)
ioctl$USBDEVFS_RESET(r0, 0x5514)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002208000000aa"], 0x0}, 0x0)

84.949419ms ago: executing program 4 (id=1507):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000680)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004010}, 0x20000005)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close(0xffffffffffffffff)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

71.913989ms ago: executing program 4 (id=1508):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fchdir(r0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x3b)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1.96962ms ago: executing program 1 (id=1509):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x4}], {0x10, 0x4}, {0x20, 0x4}}, 0x2c, 0x3)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)

0s ago: executing program 1 (id=1510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000000000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
unshare(0x22020600)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x4020400)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x193)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xfffffffffffffe77, 0x0, &(0x7f0000000000)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

alue: 2
[   60.311133][   T45] usb 4-1: config 1 has no interface number 0
[   60.317565][   T45] usb 4-1: config 1 has no interface number 1
[   60.323769][   T45] usb 4-1: config 1 interface 2 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[   60.334795][   T45] usb 4-1: config 1 interface 2 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   60.345993][   T45] usb 4-1: config 1 interface 2 altsetting 8 has an endpoint descriptor with address 0xAD, changing to 0x8D
[   60.357819][   T45] usb 4-1: config 1 interface 2 altsetting 8 endpoint 0x8D has an invalid bInterval 227, changing to 11
[   60.370601][   T45] usb 4-1: config 1 interface 2 altsetting 8 endpoint 0x8D has invalid maxpacket 50624, setting to 1024
[   60.382176][   T45] usb 4-1: config 1 interface 2 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[   60.392960][   T45] usb 4-1: config 1 interface 2 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64
[   60.404123][   T45] usb 4-1: config 1 interface 2 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[   60.415102][   T45] usb 4-1: config 1 interface 2 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 13
[   60.428319][   T45] usb 4-1: too many endpoints for config 1 interface 247 altsetting 29: 234, using maximum allowed: 30
[   60.439613][   T45] usb 4-1: config 1 interface 247 altsetting 29 has a duplicate endpoint with address 0xD, skipping
[   60.450621][   T45] usb 4-1: config 1 interface 247 altsetting 29 has a duplicate endpoint with address 0xB, skipping
[   60.461647][   T45] usb 4-1: config 1 interface 247 altsetting 29 has a duplicate endpoint with address 0x6, skipping
[   60.475276][   T45] usb 4-1: config 1 interface 247 altsetting 29 has a duplicate endpoint with address 0xD, skipping
[   60.486809][   T45] usb 4-1: config 1 interface 247 altsetting 29 bulk endpoint 0x5 has invalid maxpacket 64
[   60.496989][   T45] usb 4-1: config 1 interface 247 altsetting 29 has a duplicate endpoint with address 0x8, skipping
[   60.507900][   T45] usb 4-1: config 1 interface 247 altsetting 29 has 6 endpoint descriptors, different from the interface descriptor's value: 234
[   60.521301][   T45] usb 4-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[   60.532185][   T45] usb 4-1: config 1 interface 135 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   60.534928][  T452] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   60.544972][   T45] usb 4-1: config 1 interface 135 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[   60.563453][   T45] usb 4-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[   60.574225][   T45] usb 4-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[   60.584968][   T45] usb 4-1: config 1 interface 135 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   60.599155][   T45] usb 4-1: config 1 interface 135 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   60.610136][   T45] usb 4-1: config 1 interface 135 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   60.621231][   T45] usb 4-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[   60.631969][   T45] usb 4-1: config 1 interface 135 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   60.642978][   T45] usb 4-1: config 1 interface 2 has no altsetting 0
[   60.649655][   T45] usb 4-1: config 1 interface 247 has no altsetting 0
[   60.650645][ T1185] rust_binder: Write failure EINVAL in pid:195
[   60.656944][   T45] usb 4-1: config 1 interface 135 has no altsetting 0
[   60.658648][   T45] usb 4-1: New USB device found, idVendor=05c6, idProduct=9022, bcdDevice=16.da
[   60.679808][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.688033][   T45] usb 4-1: Product: ࠒ
[   60.692235][ T1185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1185 comm=syz.1.284
[   60.692283][   T45] usb 4-1: Manufacturer: ဇ
[   60.706127][  T452] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   60.709563][   T45] usb 4-1: SerialNumber: ࠧ
[   60.719541][  T452] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   60.738135][ T1149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   60.740008][  T452] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.754709][  T388] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[   60.762680][  T452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   60.764165][ T1186] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.770859][  T452] usb 1-1: SerialNumber: syz
[   60.783232][ T1177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   60.925981][  T388] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.937155][  T388] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   60.947740][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.948738][  T388] usb 3-1: config 0 interface 0 has no altsetting 0
[   60.957679][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.964221][  T388] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   60.973159][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.981431][  T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.990099][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.998973][  T388] usb 3-1: config 0 descriptor??
[   61.007350][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.019003][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.020642][ T1182] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   61.027563][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.042626][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.050890][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.059481][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.082399][   T45] usb 4-1: USB disconnect, device number 20
[   61.442890][  T388] holtek_mouse 0003:04D9:A067.000E: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0
[   61.488835][   T36] audit: type=1400 audit(1750749551.410:294): avc:  denied  { setattr } for  pid=1192 comm="syz.1.286" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   61.645175][  T388] usb 3-1: USB disconnect, device number 22
[   62.274951][  T388] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   62.359390][ T1226] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   62.366720][ T1226] rust_binder: Write failure EINVAL in pid:192
[   62.398406][   T36] audit: type=1400 audit(1750749552.320:295): avc:  denied  { read } for  pid=1231 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   62.427904][   T36] audit: type=1400 audit(1750749552.320:296): avc:  denied  { write } for  pid=1231 comm="syz.2.300" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   62.458339][  T388] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   62.468678][  T388] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   62.487984][  T388] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   62.498684][  T388] usb 4-1: config 220 has no interface number 2
[   62.506377][  T388] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   62.521928][  T388] usb 4-1: config 220 interface 0 has no altsetting 0
[   62.529119][  T388] usb 4-1: config 220 interface 76 has no altsetting 0
[   62.536877][  T388] usb 4-1: config 220 interface 1 has no altsetting 0
[   62.546899][  T388] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   62.559353][  T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.567711][  T388] usb 4-1: Product: syz
[   62.571937][  T388] usb 4-1: Manufacturer: syz
[   62.576799][  T388] usb 4-1: SerialNumber: syz
[   62.734978][   T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   62.790288][  T388] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   62.796847][  T388] usb 4-1: No valid video chain found.
[   62.802362][  T388] usb 4-1: selecting invalid altsetting 0
[   62.812733][  T388] usb 4-1: USB disconnect, device number 21
[   62.834938][  T443] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[   62.864978][   T31] usb 2-1: device descriptor read/64, error -71
[   62.985991][  T443] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   62.997253][  T443] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   63.008331][  T443] usb 3-1: config 0 interface 0 has no altsetting 0
[   63.015121][  T443] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   63.024242][  T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.033176][  T443] usb 3-1: config 0 descriptor??
[   63.039078][ T1240] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   63.114954][   T31] usb 2-1: device descriptor read/64, error -71
[   63.218148][  T452] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[   63.236690][  T452] usb 1-1: USB disconnect, device number 14
[   63.319166][ T1250] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   63.354951][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   63.475909][  T443] holtek_mouse 0003:04D9:A067.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0
[   63.579699][   T31] usb 2-1: device descriptor read/64, error -71
[   63.593983][   T36] audit: type=1400 audit(1750749553.520:297): avc:  denied  { read } for  pid=1263 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   63.629116][ T1266] rust_binder: Write failure EFAULT in pid:270
[   63.646403][ T1267] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   63.657700][   T45] usb 3-1: USB disconnect, device number 23
[   63.668667][ T1269] overlay: Unknown parameter 'mounts'
[   63.835064][   T31] usb 2-1: device descriptor read/64, error -71
[   63.924955][  T443] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   63.945066][   T31] usb usb2-port1: attempt power cycle
[   64.074958][  T443] usb 1-1: Using ep0 maxpacket: 32
[   64.081273][  T443] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   64.089876][  T443] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   64.098746][  T443] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   64.107877][  T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   64.117584][  T443] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   64.127271][  T443] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   64.140290][  T443] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   64.149551][  T443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.158214][  T443] usb 1-1: config 0 descriptor??
[   64.182730][   T36] audit: type=1400 audit(1750749554.100:298): avc:  denied  { mount } for  pid=1275 comm="syz.2.314" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   64.272320][   T36] audit: type=1400 audit(1750749554.190:299): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   64.285119][   T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   64.313801][ T1283] xt_NFQUEUE: number of total queues is 0
[   64.316186][   T31] usb 2-1: device descriptor read/8, error -71
[   64.364978][  T443] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   64.455969][   T31] usb 2-1: device descriptor read/8, error -71
[   64.566079][   T36] audit: type=1400 audit(1750749554.490:300): avc:  denied  { read write } for  pid=1273 comm="syz.0.313" name="lp0" dev="devtmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   64.589912][   T36] audit: type=1400 audit(1750749554.490:301): avc:  denied  { open } for  pid=1273 comm="syz.0.313" path="/dev/usb/lp0" dev="devtmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   64.590617][   T45] usb 1-1: USB disconnect, device number 15
[   64.621686][   T45] usblp0: removed
[   64.674995][  T343] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   64.694957][   T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   64.716285][   T31] usb 2-1: device descriptor read/8, error -71
[   64.804952][  T343] usb 4-1: device descriptor read/64, error -71
[   64.846649][   T31] usb 2-1: device descriptor read/8, error -71
[   64.955146][   T31] usb usb2-port1: unable to enumerate USB device
[   65.044947][  T343] usb 4-1: device descriptor read/64, error -71
[   65.203574][   T36] audit: type=1400 audit(1750749555.120:302): avc:  denied  { append } for  pid=1294 comm="syz.2.321" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   65.294959][  T343] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   65.424928][  T343] usb 4-1: device descriptor read/64, error -71
[   65.495598][   T31] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[   65.664939][  T343] usb 4-1: device descriptor read/64, error -71
[   65.674368][ T1314] syzkaller0: entered allmulticast mode
[   65.681264][   T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   65.693658][   T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   65.694690][ T1314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220
[   65.704897][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   65.721209][   T31] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   65.730823][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.749290][   T31] usb 3-1: config 0 descriptor??
[   65.754800][ T1301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   65.785412][  T343] usb usb4-port1: attempt power cycle
[   66.047572][ T1325] tmpfs: Unknown parameter 'nop'
[   66.134937][  T343] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   66.165154][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   66.171313][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   66.179853][  T343] usb 4-1: device descriptor read/8, error -71
[   66.186741][   T31] usb 3-1: USB disconnect, device number 24
[   66.315929][  T343] usb 4-1: device descriptor read/8, error -71
[   66.554960][  T343] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[   66.576175][  T343] usb 4-1: device descriptor read/8, error -71
[   66.589484][  T292] bridge_slave_1: left allmulticast mode
[   66.595243][  T292] bridge_slave_1: left promiscuous mode
[   66.601120][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.609100][  T292] bridge_slave_0: left allmulticast mode
[   66.615021][  T292] bridge_slave_0: left promiscuous mode
[   66.620751][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.716013][  T343] usb 4-1: device descriptor read/8, error -71
[   66.728293][  T292] tipc: Disabling bearer <udp:syz0>
[   66.730913][   T36] audit: type=1400 audit(1750749556.650:303): avc:  denied  { mounton } for  pid=1356 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   66.736153][  T292] tipc: Left network mode
[   66.771119][  T292] veth1_macvtap: left promiscuous mode
[   66.776777][  T292] veth0_vlan: left promiscuous mode
[   66.825142][  T343] usb usb4-port1: unable to enumerate USB device
[   66.891479][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.904952][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.925019][ T1356] bridge_slave_0: entered allmulticast mode
[   66.931501][ T1356] bridge_slave_0: entered promiscuous mode
[   66.938825][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.962661][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.980422][ T1362] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   66.980449][ T1362] rust_binder: Error while translating object.
[   66.982560][ T1356] bridge_slave_1: entered allmulticast mode
[   66.989948][ T1362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   66.996332][ T1356] bridge_slave_1: entered promiscuous mode
[   67.002791][ T1362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236
[   67.049989][ T1364] netlink: 'syz.2.344': attribute type 4 has an invalid length.
[   67.067016][ T1364] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.344'.
[   67.078015][   T36] audit: type=1400 audit(1750749557.010:304): avc:  denied  { getopt } for  pid=1363 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.121977][ T1366] rust_binder: Error while translating object.
[   67.122009][ T1366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   67.128477][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:232
[   67.162338][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.178794][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.186470][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.194199][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.223172][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.230516][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.245773][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.252932][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.270859][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.277997][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.296411][   T36] audit: type=1400 audit(1750749557.220:305): avc:  denied  { lock } for  pid=1375 comm="syz.2.348" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.296737][ T1376] rust_binder: Error while translating object.
[   67.319523][ T1376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   67.326175][ T1376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:239
[   67.349142][ T1356] veth0_vlan: entered promiscuous mode
[   67.378807][ T1356] veth1_macvtap: entered promiscuous mode
[   67.402622][   T36] audit: type=1400 audit(1750749557.320:306): avc:  denied  { mounton } for  pid=1356 comm="syz-executor" path="/root/syzkaller.vc5ham/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   67.465083][ T1385] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.475404][   T36] audit: type=1400 audit(1750749557.400:307): avc:  denied  { bind } for  pid=1388 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.476351][ T1389] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   67.510473][ T1389] rust_binder: Write failure EINVAL in pid:248
[   67.517325][ T1389] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.527190][ T1389] rust_binder: Write failure EFAULT in pid:248
[   67.534271][ T1389] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   67.535375][   T36] audit: type=1400 audit(1750749557.450:308): avc:  denied  { read } for  pid=1392 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.583012][ T1395] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   67.592775][   T36] audit: type=1400 audit(1750749557.500:309): avc:  denied  { ioctl } for  pid=1392 comm="syz.0.354" path="socket:[12156]" dev="sockfs" ino=12156 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   67.595005][ T1395] SELinux: failed to load policy
[   67.619748][   T36] audit: type=1400 audit(1750749557.500:310): avc:  denied  { create } for  pid=1392 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   67.644002][   T36] audit: type=1400 audit(1750749557.500:311): avc:  denied  { getopt } for  pid=1392 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   67.764992][  T388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[   67.773101][  T388] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   67.865000][    T9] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[   67.930569][ T1402] rust_binder: Write failure EFAULT in pid:255
[   68.017528][    T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   68.035646][    T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   68.046804][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   68.053756][    T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   68.063970][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.073408][    T9] usb 4-1: config 0 descriptor??
[   68.085903][ T1385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   68.096829][ T1172] bridge_slave_1: left allmulticast mode
[   68.102787][ T1172] bridge_slave_1: left promiscuous mode
[   68.113785][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.122237][ T1172] bridge_slave_0: left allmulticast mode
[   68.128052][ T1172] bridge_slave_0: left promiscuous mode
[   68.145010][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.208300][ T1408] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   68.320814][ T1172] tipc: Disabling bearer <udp:syz1>
[   68.326216][ T1172] tipc: Left network mode
[   68.338603][ T1172] veth1_macvtap: left promiscuous mode
[   68.344243][ T1172] veth0_vlan: left promiscuous mode
[   68.410628][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.421189][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.428658][ T1415] bridge_slave_0: entered allmulticast mode
[   68.439745][ T1415] bridge_slave_0: entered promiscuous mode
[   68.448961][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.459221][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.467735][ T1415] bridge_slave_1: entered allmulticast mode
[   68.474521][ T1415] bridge_slave_1: entered promiscuous mode
[   68.494915][  T343] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   68.495986][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   68.517348][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   68.537390][    T9] usb 4-1: USB disconnect, device number 26
[   68.552372][ T1434] rust_binder: Write failure EFAULT in pid:23
[   68.601362][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.614661][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.622016][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.629200][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.666270][  T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.683495][  T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.683517][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.700468][  T343] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   68.700548][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.709802][  T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.733790][  T343] usb 3-1: config 0 descriptor??
[   68.749147][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.756322][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.772927][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.780234][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.848004][ T1415] veth0_vlan: entered promiscuous mode
[   68.880265][ T1415] veth1_macvtap: entered promiscuous mode
[   68.958793][ T1414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.976738][ T1414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.983212][ T1452] rust_binder: Error while translating object.
[   68.984692][ T1452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   68.992026][ T1452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   69.165814][ T1473] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'.
[   69.188028][  T343] elo 0003:04E7:0030.0011: unknown main item tag 0x0
[   69.194793][  T343] elo 0003:04E7:0030.0011: unknown main item tag 0x4
[   69.219530][  T343] elo 0003:04E7:0030.0011: item fetching failed at offset 3/7
[   69.227403][  T343] elo 0003:04E7:0030.0011: parse failed
[   69.237374][  T343] elo 0003:04E7:0030.0011: probe with driver elo failed with error -22
[   69.388342][ T1414] overlayfs: disabling nfs_export due to verity=on
[   69.395004][ T1414] overlayfs: missing 'lowerdir'
[   69.400660][  T388] usb 3-1: USB disconnect, device number 25
[   69.504949][   T65] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[   69.554987][   T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   69.656169][   T65] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   69.667395][   T65] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   69.678580][   T65] usb 2-1: config 0 interface 0 has no altsetting 0
[   69.685726][   T65] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   69.695143][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.703858][   T65] usb 2-1: config 0 descriptor??
[   69.709672][ T1491] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[   69.724939][   T31] usb 1-1: Using ep0 maxpacket: 8
[   69.731934][   T31] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   69.743258][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   69.751716][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.40
[   69.761110][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.769357][   T31] usb 1-1: Manufacturer: 駣ᚼ䨲忈㱸፷觓ⅅ釘ׁ혏唢樛握캟᪩읻䣨ࡽ厼蛖킠쾀縺궂澢狘潩Ꜭ導䱦⶜ꎫꈚ಑耎ཉ䋢쭔됮熁€꟎ꟻ떵㯼卷鱖뾂쥛颴ꕑ櫼鉨좞攷鱋Ძࢢ缄簕㧚첖ኗ梘檈릪쀘꺶㐟̣꿸嗼Όࢀⶳ컜챇㗀ᨽ喇焰㿓ㅕᓒ女죮࿙튜ᷙ튻民R
[   69.800794][   T31] usb 1-1: SerialNumber: ⼪钣ᇞ㧹諟ϩ㞑ꂳ々婺ꮒ㟘뎁⦌వ樼⫚ጭ櫯༖吼ꟈ易蔾䱝͈潰ƿ⠰䟖椔嗇厽複消빁귿퀺꘤鈊聝쪣य 鯠ऀ箺͙ᚫ쓤뿽ꗙ኎ꖇօ㎹麈럾ွ혱庪ᘿ㆔
[   69.906773][ T1493] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   69.917117][ T1493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.924019][ T1493] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   69.934042][ T1493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   69.942205][ T1493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:255
[   70.024438][ T1483] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   70.033770][ T1483] rust_binder: Error while translating object.
[   70.042764][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.050518][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[   70.064808][   T31] usbhid 1-1:1.0: can't add hid device: -71
[   70.080089][   T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   70.088961][   T31] usb 1-1: USB disconnect, device number 16
[   70.119763][   T65] usbhid 2-1:0.0: can't add hid device: -71
[   70.127624][   T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   70.136865][   T65] usb 2-1: USB disconnect, device number 19
[   70.597734][ T1514] rust_binder: Error while translating object.
[   70.597761][ T1514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   70.603959][ T1514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59
[   70.615001][ T1515] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.647596][ T1519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.647933][ T1519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.654625][ T1524] binder: Bad value for 'max'
[   70.668279][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   70.668296][   T36] audit: type=1400 audit(1750749560.590:331): avc:  denied  { read } for  pid=94 comm="acpid" name="event8" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   70.698405][   T36] audit: type=1400 audit(1750749560.590:332): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   70.745685][   T36] audit: type=1400 audit(1750749560.590:333): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=567 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   70.894962][   T65] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[   70.969960][ T1543] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.972519][ T1543] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   70.989232][ T1543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   71.004923][ T1543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:269
[   71.067743][   T65] usb 1-1: unable to get BOS descriptor or descriptor too short
[   71.105320][   T65] usb 1-1: not running at top speed; connect to a high speed hub
[   71.127945][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271
[   71.128556][   T65] usb 1-1: config 3 has an invalid interface number: 86 but max is 0
[   71.151000][   T65] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[   71.161207][   T65] usb 1-1: config 3 has no interface number 0
[   71.174957][   T65] usb 1-1: config 3 interface 86 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   71.194266][   T65] usb 1-1: config 3 interface 86 has no altsetting 0
[   71.211806][   T65] usb 1-1: New USB device found, idVendor=19d2, idProduct=8241, bcdDevice=b0.5e
[   71.221362][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.229419][   T65] usb 1-1: Product: syz
[   71.233610][   T65] usb 1-1: Manufacturer: syz
[   71.238907][   T65] usb 1-1: SerialNumber: syz
[   71.384955][    T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[   71.457413][   T65] usb 1-1: bad CDC descriptors
[   71.475004][   T65] usb 1-1: USB disconnect, device number 17
[   71.541612][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   71.555026][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   71.565903][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   71.572724][    T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   71.581869][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.605229][    T9] usb 3-1: config 0 descriptor??
[   71.610495][ T1551] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   71.744931][   T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   71.894936][   T31] usb 2-1: Using ep0 maxpacket: 32
[   71.902088][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   71.916665][   T31] usb 2-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.40
[   71.926139][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.934148][   T31] usb 2-1: Product: 趯뿡豂缶⚟錦魿ꆤ㞡踷壘Ⱍ騛㕓喕쨸䂘煏뽽代˓㕓㙃灔픫꟫᧻눨䅌彪㥓亇؉ꆍ錨낣췖賤﵈ᬗꎪ㪠Ӭ㻽༌⧧렣鑹⟖굎汓
[   71.953823][   T31] usb 2-1: Manufacturer: ࠄ
[   71.958494][   T31] usb 2-1: SerialNumber: syz
[   71.985207][ T1568] rust_binder: Error while translating object.
[   71.985244][ T1568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   71.991644][   T36] audit: type=1400 audit(1750749561.910:334): avc:  denied  { create } for  pid=1565 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   72.009005][ T1568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:68
[   72.031887][    T9] holtek_mouse 0003:04D9:A067.0012: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0
[   72.070650][ T1573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.070688][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[   72.114185][   T36] audit: type=1400 audit(1750749562.030:335): avc:  denied  { getopt } for  pid=1578 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.144811][   T36] audit: type=1400 audit(1750749562.030:336): avc:  denied  { sqpoll } for  pid=1578 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   72.169867][   T36] audit: type=1400 audit(1750749562.040:337): avc:  denied  { setattr } for  pid=1578 comm="syz.3.410" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.231629][  T445] usb 3-1: USB disconnect, device number 26
[   72.238411][   T36] audit: type=1400 audit(1750749562.040:338): avc:  denied  { execute } for  pid=1578 comm="syz.3.410" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.243487][ T1591] rust_binder: Write failure EFAULT in pid:289
[   72.267089][   T36] audit: type=1400 audit(1750749562.040:339): avc:  denied  { read open } for  pid=1578 comm="syz.3.410" path="/97/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.295731][   T36] audit: type=1400 audit(1750749562.040:340): avc:  denied  { execute_no_trans } for  pid=1578 comm="syz.3.410" path="/97/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.347228][   T31] usbhid 2-1:1.0: can't add hid device: -71
[   72.355023][   T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   72.383236][   T31] usb 2-1: USB disconnect, device number 20
[   72.417349][ T1608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.435681][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84
[   72.441599][ T1605] rust_binder: Write failure EFAULT in pid:50
[   72.454778][ T1608] input: syz0 as /devices/virtual/input/input10
[   72.469597][ T1611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.485299][ T1611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.541211][ T1617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299
[   72.561246][ T1620] vcan0: entered allmulticast mode
[   72.564950][ T1622] /dev/rnullb0: Can't open blockdev
[   72.581246][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   72.856131][ T1635] rust_binder: Error while translating object.
[   72.856182][ T1635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.862564][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[   72.961095][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298
[   73.077483][ T1642] /dev/rnullb0: Can't open blockdev
[   73.094988][ T1641] /dev/rnullb0: Can't open blockdev
[   73.137456][ T1644] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   73.145951][ T1644] rust_binder: Write failure EINVAL in pid:305
[   73.180972][ T1646] fuse: Bad value for 'group_id'
[   73.192394][ T1646] fuse: Bad value for 'group_id'
[   73.198617][ T1646] rust_binder: Got transaction with invalid offset.
[   73.198704][ T1646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   73.205638][ T1646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307
[   73.271739][ T1659] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.306927][ T1663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61
[   73.409877][ T1671] kvm: pic: non byte write
[   73.412432][ T1673] rust_binder: Error in use_page_slow: ESRCH
[   73.420181][ T1671] random: crng reseeded on system resumption
[   73.423667][ T1673] rust_binder: use_range failure ESRCH
[   73.435670][ T1673] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[   73.441170][ T1673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   73.449362][ T1673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63
[   73.585017][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   73.651447][ T1680] binder: Unknown parameter 'defcontext01777777777777777777777'
[   73.659437][ T1680] binder: Unknown parameter 'defcontext01777777777777777777777'
[   73.754974][    T9] usb 1-1: Using ep0 maxpacket: 16
[   73.761224][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.772481][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.783045][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=f8.00
[   73.792147][    T9] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[   73.800342][    T9] usb 1-1: Manufacturer: syz
[   73.805692][    T9] usb 1-1: config 0 descriptor??
[   73.812287][    T9] usbhid 1-1:0.0: can't add hid device: -22
[   73.818351][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[   73.914952][   T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   74.016634][   T45] usb 1-1: USB disconnect, device number 18
[   74.064936][   T31] usb 3-1: Using ep0 maxpacket: 32
[   74.071161][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   74.077933][   T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[   74.087047][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.095824][   T31] usb 3-1: config 0 descriptor??
[   74.503541][   T31] uclogic 0003:5543:0522.0013: collection stack underflow
[   74.511035][   T31] uclogic 0003:5543:0522.0013: item 0 0 0 12 parsing failed
[   74.518746][   T31] uclogic 0003:5543:0522.0013: parse failed
[   74.524742][   T31] uclogic 0003:5543:0522.0013: probe with driver uclogic failed with error -22
[   74.548676][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[   74.550298][ T1698] rust_binder: Error while translating object.
[   74.560055][ T1698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   74.566508][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[   74.604014][ T1706] fuse: Bad value for 'fd'
[   74.635096][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   74.874966][   T31] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[   75.014941][  T388] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[   75.036070][   T31] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   75.036529][ T1723] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   75.047206][ T1723] rust_binder: Error while translating object.
[   75.054906][   T31] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   75.056090][ T1723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   75.062656][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   75.073208][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101
[   75.082882][   T31] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   75.110032][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.122370][   T31] usb 2-1: config 0 descriptor??
[   75.132868][ T1709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   75.166069][  T388] usb 4-1: config 39 has an invalid descriptor of length 238, skipping remainder of the config
[   75.176629][  T388] usb 4-1: config 39 has 0 interfaces, different from the descriptor's value: 1
[   75.185738][  T388] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[   75.195324][  T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.330443][ T1732] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[   75.330469][ T1732] rust_binder: Error while translating object.
[   75.343586][ T1732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   75.349965][ T1732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110
[   75.408956][  T388] usb 4-1: language id specifier not provided by device, defaulting to English
[   75.544403][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   75.550466][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   75.559886][   T31] usb 2-1: USB disconnect, device number 21
[   75.612484][  T388] usb 4-1: USB disconnect, device number 27
[   75.624985][  T445] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   75.786086][  T445] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   75.796174][  T445] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   75.809961][  T445] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.819053][  T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   75.827167][  T445] usb 1-1: SerialNumber: syz
[   75.834713][ T1734] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   76.042962][ T1734] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   76.067448][ T1736] rust_binder: inc_ref_done called when no active inc_refs
[   76.067482][ T1736] rust_binder: Write failure EINVAL in pid:89
[   76.107781][ T1741] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.181486][ T1746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.189080][ T1746] rust_binder: Write failure EINVAL in pid:98
[   76.238287][ T1755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312
[   76.259808][ T1759] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.452879][  T445] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[   76.478100][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   76.478117][   T36] audit: type=1400 audit(1750749566.400:358): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   76.509484][   T36] audit: type=1400 audit(1750749566.400:359): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.533216][   T36] audit: type=1400 audit(1750749566.400:360): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.555432][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   76.565954][   T36] audit: type=1400 audit(1750749566.400:361): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.590638][   T36] audit: type=1400 audit(1750749566.400:362): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3093 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.615680][   T36] audit: type=1400 audit(1750749566.440:363): avc:  denied  { read } for  pid=1765 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.638709][   T36] audit: type=1400 audit(1750749566.440:364): avc:  denied  { open } for  pid=1765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.666603][  T388] usb 1-1: USB disconnect, device number 19
[   76.673042][  T388] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[   76.685356][   T36] audit: type=1400 audit(1750749566.440:365): avc:  denied  { getattr } for  pid=1765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.700007][   T45] usb 3-1: USB disconnect, device number 27
[   76.724256][   T36] audit: type=1400 audit(1750749566.570:366): avc:  denied  { write } for  pid=1764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.772525][   T36] audit: type=1400 audit(1750749566.570:367): avc:  denied  { add_name } for  pid=1764 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.809673][ T1787] netlink: 'syz.2.469': attribute type 8 has an invalid length.
[   76.851917][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'.
[   77.414916][  T388] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   77.574913][  T388] usb 1-1: Using ep0 maxpacket: 16
[   77.581144][  T388] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   77.590133][  T388] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.600392][  T388] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.610693][  T388] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   77.620036][  T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.628112][  T388] usb 1-1: Product: syz
[   77.632325][  T388] usb 1-1: Manufacturer: syz
[   77.636954][  T388] usb 1-1: SerialNumber: syz
[   78.045397][  T388] usb 1-1: 0:2 : does not exist
[   78.578323][ T1851] geneve1: tun_chr_ioctl cmd 1074025672
[   78.583955][ T1851] geneve1: ignored: set checksum enabled
[   78.591585][ T1852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.600825][ T1852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.634921][  T515] Bluetooth: hci0: command 0x1003 tx timeout
[   78.634920][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   78.649709][ T1803] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   78.672974][  T388] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[   78.690568][  T388] usb 1-1: USB disconnect, device number 20
[   78.702049][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.824962][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   78.953573][ T1861] overlayfs: failed to clone upperpath
[   78.974909][    T9] usb 2-1: Using ep0 maxpacket: 16
[   78.981539][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   78.990049][    T9] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[   79.000664][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   79.010249][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   79.024657][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.035033][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.043327][    T9] usb 2-1: Product: syz
[   79.048057][    T9] usb 2-1: Manufacturer: syz
[   79.052755][    T9] usb 2-1: SerialNumber: syz
[   79.057614][ T1866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.068588][ T1865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.241113][ T1886] rust_binder: got new transaction with bad transaction stack
[   79.241139][ T1886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117
[   79.269927][    T9] cdc_ncm 2-1:1.0: skipping garbage
[   79.286082][    T9] cdc_ncm 2-1:1.0: skipping garbage
[   79.291307][    T9] cdc_ncm 2-1:1.0: skipping garbage
[   79.296614][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[   79.303409][    T9] cdc_ncm 2-1:1.0: bind() failure
[   79.310198][    T9] usb 2-1: USB disconnect, device number 22
[   79.495047][  T388] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   79.521313][ T1890] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.576075][ T1891] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.584214][ T1891] rust_binder: inc_ref_done called when no active inc_refs
[   79.645169][  T388] usb 1-1: Using ep0 maxpacket: 32
[   79.665189][  T388] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.675659][  T388] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   79.687439][  T388] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   79.699392][  T388] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[   79.709289][  T388] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   79.722732][  T388] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.729831][  T388] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   79.738902][  T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.748473][  T388] usb 1-1: config 0 descriptor??
[   79.845620][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.157924][  T388] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[   80.166327][  T388] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[   80.174280][  T388] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[   80.182416][  T388] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[   80.190376][  T388] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[   80.200650][  T388] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[   80.215501][  T388] hid-thrustmaster 0003:044F:B65D.0014: setup data couldn't be sent
[   80.361772][ T1888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.370492][ T1888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.382944][    C0] hid-thrustmaster 0003:044F:B65D.0014: URB to get model id failed with error -71
[   80.394976][    T9] usb 1-1: USB disconnect, device number 21
[   80.920669][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'.
[   80.935131][ T1920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.512'.
[   80.990596][ T1925] binder: Bad value for 'max'
[   81.032156][ T1934] batadv_slave_1: entered promiscuous mode
[   81.046294][ T1933] batadv_slave_1: left promiscuous mode
[   81.102572][ T1936] kvm: user requested TSC rate below hardware speed
[   81.110192][ T1936] kvm: user requested TSC rate below hardware speed
[   81.584450][ T1950] overlayfs: failed to clone upperpath
[   81.584450][ T1953] overlayfs: failed to clone upperpath
[   81.606421][ T1949] sock: sock_timestamping_bind_phc: sock not bind to device
[   81.914906][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   81.914955][  T515] Bluetooth: hci0: command 0x1003 tx timeout
[   82.029556][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   82.029576][   T36] audit: type=1400 audit(1750749571.950:380): avc:  denied  { map } for  pid=1970 comm="syz.0.529" path="socket:[16477]" dev="sockfs" ino=16477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   82.058701][   T36] audit: type=1400 audit(1750749571.950:381): avc:  denied  { write } for  pid=1970 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   82.234415][ T1982] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   82.242763][ T1982] rust_binder: Write failure EINVAL in pid:158
[   82.270478][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.284558][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.292776][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.300339][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.307887][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.315319][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.322703][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.330134][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.337567][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.344984][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.352395][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.359847][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.367281][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.375102][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.382483][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.389919][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.397348][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.404728][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.412139][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.419548][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.426973][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.434454][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.441864][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.449292][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.457060][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.464476][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.471930][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.479930][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.487542][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.495004][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.502461][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.510004][   T45] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   82.518167][   T45] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   82.545667][ T1996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   82.545705][ T1996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[   82.560246][ T1997] fido_id[1997]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   82.695125][ T2020] tmpfs: Unknown parameter '��01777777777777777777777'
[   82.702303][ T2021] rust_binder: Error in use_page_slow: ESRCH
[   82.702328][ T2021] rust_binder: use_range failure ESRCH
[   82.703337][ T2022] rust_binder: Error in use_page_slow: ESRCH
[   82.714483][ T2022] rust_binder: use_range failure ESRCH
[   82.715766][ T2021] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   82.736080][   T36] audit: type=1400 audit(1750749572.660:382): avc:  denied  { remount } for  pid=2025 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   82.750694][ T2022] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   82.766295][ T2021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   82.774288][ T2021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:174
[   82.777558][ T2022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   82.796262][ T2030] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[   82.806570][ T2030] rust_binder: Error while translating object.
[   82.815365][ T2022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:174
[   82.819536][ T2030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   82.835088][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[   82.942965][   T36] audit: type=1400 audit(1750749572.860:383): avc:  denied  { create } for  pid=2046 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   82.978722][   T36] audit: type=1400 audit(1750749572.900:384): avc:  denied  { sys_admin } for  pid=2046 comm="syz.2.552" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   82.981735][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.010641][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.214926][  T445] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   83.220261][ T2054] incfs_lookup_dentry err:-5
[   83.227421][ T2054] incfs: Can't find or create .index dir in ./file0
[   83.234688][ T2054] incfs: mount failed -5
[   83.364935][  T445] usb 1-1: Using ep0 maxpacket: 16
[   83.371213][  T445] usb 1-1: config 1 has an invalid interface number: 4 but max is 2
[   83.379468][  T445] usb 1-1: config 1 has no interface number 1
[   83.385622][  T445] usb 1-1: too many endpoints for config 1 interface 4 altsetting 0: 249, using maximum allowed: 30
[   83.396450][  T445] usb 1-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 249
[   83.410861][  T445] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.420017][  T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.428083][  T445] usb 1-1: Product: syz
[   83.434636][  T445] usb 1-1: Manufacturer: syz
[   83.437547][   T36] audit: type=1400 audit(1750749573.360:385): avc:  denied  { shutdown } for  pid=2066 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.443493][  T445] usb 1-1: SerialNumber: syz
[   83.539956][ T2069] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.540419][ T2069] rust_binder: Error while translating object.
[   83.547147][ T2069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   83.553618][ T2069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:350
[   83.610783][ T2074] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   83.676969][ T2044] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   83.684413][ T2044] rust_binder: Write failure EINVAL in pid:184
[   83.687913][  T445] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[   83.703742][  T445] usb 1-1: USB disconnect, device number 22
[   83.714256][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   83.800721][ T2077] input: syz1 as /devices/virtual/input/input12
[   83.810812][  T317] udevd[317]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   83.884903][  T343] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[   84.034959][  T343] usb 4-1: Using ep0 maxpacket: 32
[   84.041292][  T343] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   84.052995][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   84.064292][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   84.075536][  T343] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   84.084714][  T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.093358][  T343] usb 4-1: config 0 descriptor??
[   84.098656][ T2075] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   84.106873][  T343] hub 4-1:0.0: USB hub found
[   84.234972][  T445] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[   84.307182][  T343] hub 4-1:0.0: 2 ports detected
[   84.362012][ T2095] netlink: 37 bytes leftover after parsing attributes in process `syz.2.566'.
[   84.368366][  T445] usb 2-1: device descriptor read/64, error -71
[   84.605767][ T2109] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   84.605798][ T2109] rust_binder: Read failure Err(EFAULT) in pid:201
[   84.614928][  T445] usb 2-1: device descriptor read/64, error -71
[   84.864929][  T445] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[   84.913498][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.922132][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.930848][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.939510][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.004971][  T445] usb 2-1: device descriptor read/64, error -71
[   85.281545][  T445] usb 2-1: device descriptor read/64, error -71
[   85.397894][  T445] usb usb2-port1: attempt power cycle
[   85.745045][  T445] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[   85.754971][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   85.766362][  T445] usb 2-1: device descriptor read/8, error -71
[   85.866285][  T343] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[   85.896465][  T445] usb 2-1: device descriptor read/8, error -71
[   85.915393][    T9] usb 1-1: Using ep0 maxpacket: 32
[   85.922062][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   85.930347][    T9] usb 1-1: config 0 has no interface number 0
[   85.938651][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   85.947924][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.956138][    T9] usb 1-1: Product: syz
[   85.960453][    T9] usb 1-1: Manufacturer: syz
[   85.965191][    T9] usb 1-1: SerialNumber: syz
[   85.981312][    T9] usb 1-1: config 0 descriptor??
[   85.991772][    T9] smsc95xx v2.0.0
[   86.127514][ T2129] /dev/rnullb0: Can't lookup blockdev
[   86.127514][ T2130] /dev/rnullb0: Can't lookup blockdev
[   86.135139][  T445] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[   86.152780][ T2132] overlayfs: failed to resolve './file0': -2
[   86.160088][ T2134] overlayfs: failed to resolve './file0': -2
[   86.166083][  T445] usb 2-1: device descriptor read/8, error -71
[   86.296040][  T445] usb 2-1: device descriptor read/8, error -71
[   86.394898][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   86.405108][  T445] usb usb2-port1: unable to enumerate USB device
[   86.405811][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   86.621926][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   86.632790][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61
[   86.737746][   T36] audit: type=1326 audit(1750749576.660:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2147 comm="syz.2.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca2af8e929 code=0x0
[   86.813800][ T2163] netlink: 'syz.2.590': attribute type 12 has an invalid length.
[   86.836164][   T65] usb 4-1: reset high-speed USB device number 28 using dummy_hcd
[   86.946332][   T36] audit: type=1400 audit(1750749576.870:387): avc:  denied  { map } for  pid=2170 comm="syz.2.593" path="socket:[17330]" dev="sockfs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   86.998361][   T65] usb 4-1: device firmware changed
[   87.014186][   T65] usb 4-1: USB disconnect, device number 28
[   87.061950][   T36] audit: type=1400 audit(1750749576.980:388): avc:  denied  { listen } for  pid=2173 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.118308][ T2177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[   87.301465][ T2182] overlay: ./file0 is not a directory
[   87.314921][   T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[   87.484907][   T65] usb 4-1: Using ep0 maxpacket: 32
[   87.495600][   T65] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   87.503741][   T65] usb 4-1: config 0 has no interface number 0
[   87.526402][   T65] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   87.544904][   T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.552959][   T65] usb 4-1: Product: syz
[   87.557198][   T65] usb 4-1: Manufacturer: syz
[   87.561840][   T65] usb 4-1: SerialNumber: syz
[   87.575145][   T65] usb 4-1: config 0 descriptor??
[   87.580893][   T65] smsc95xx v2.0.0
[   87.982140][   T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   87.992944][   T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   88.254941][   T36] audit: type=1400 audit(1750749578.170:389): avc:  denied  { create } for  pid=2199 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   88.275590][   T36] audit: type=1400 audit(1750749578.180:390): avc:  denied  { write } for  pid=2199 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   88.298782][ T2202] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   88.542063][  T388] usb 1-1: USB disconnect, device number 23
[   88.583117][   T36] audit: type=1400 audit(1750749578.500:391): avc:  denied  { accept } for  pid=2210 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.603033][   T36] audit: type=1400 audit(1750749578.520:392): avc:  denied  { read } for  pid=2210 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.624561][   T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[   88.636658][   T65] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   88.646067][   T65] usb 4-1: USB disconnect, device number 29
[   88.668168][ T2211] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   88.676523][ T2211] rust_binder: Write failure EINVAL in pid:212
[   88.705355][ T2220] rust_binder: Write failure EINVAL in pid:221
[   89.177723][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.198483][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.206214][   T36] audit: type=1400 audit(1750749579.110:393): avc:  denied  { setopt } for  pid=2228 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.309566][ T2232] rust_binder: Write failure EINVAL in pid:360
[   89.520338][ T2235] tmpfs: Bad value for 'size'
[   89.636286][ T2247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[   89.794983][   T65] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   89.944917][   T65] usb 1-1: Using ep0 maxpacket: 16
[   89.951279][   T65] usb 1-1: config index 0 descriptor too short (expected 65316, got 36)
[   89.959719][   T65] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   89.967898][   T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   89.976898][   T65] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.988333][   T65] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.998116][   T65] usb 1-1: config 0 interface 0 has no altsetting 0
[   90.004738][   T65] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   90.013843][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.022483][   T65] usb 1-1: config 0 descriptor??
[   90.240102][ T2267] fuse: Bad value for 'group_id'
[   90.245469][ T2267] fuse: Bad value for 'group_id'
[   90.434929][  T452] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[   90.445749][   T65] hid (null): unknown global tag 0x12
[   90.451174][   T65] hid (null): report_id 660415670 is invalid
[   90.457230][   T65] hid (null): unknown global tag 0xd
[   90.462661][   T65] hid (null): report_id 3636381312 is invalid
[   90.468788][   T65] hid (null): unknown global tag 0xe
[   90.474109][   T65] hid (null): global environment stack underflow
[   90.481175][   T65] hid (null): invalid report_size 15733
[   90.486796][   T65] hid (null): global environment stack underflow
[   90.493165][   T65] hid (null): invalid report_size 59091
[   90.498868][   T65] hid (null): unknown global tag 0xe
[   90.504187][   T65] hid (null): invalid report_size 659322949
[   90.510220][   T65] hid (null): invalid report_size 40509
[   90.516049][   T65] hid (null): report_id 49840 is invalid
[   90.594978][  T452] usb 4-1: Using ep0 maxpacket: 32
[   90.601562][  T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.613680][  T452] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   90.622761][  T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.631516][  T452] usb 4-1: config 0 descriptor??
[   90.645265][   T65] usb 1-1: USB disconnect, device number 24
[   91.041938][  T452] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[   91.048974][  T452] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[   91.056015][  T452] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[   91.063180][  T452] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[   91.070169][  T452] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[   91.080126][  T452] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[   91.091431][ T2285] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   91.099062][ T2285] rust_binder: Write failure EINVAL in pid:164
[   91.125154][ T2289] rust_binder: Write failure EINVAL in pid:167
[   91.188304][ T2292] rust_binder: Failed to allocate buffer. len:144, is_oneway:true
[   91.250508][ T2298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.251096][  T452] arvo 0003:1E7D:30D4.0017: couldn't init struct arvo_device
[   91.259680][ T2298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.266967][  T452] arvo 0003:1E7D:30D4.0017: couldn't install keyboard
[   91.295808][  T452] arvo 0003:1E7D:30D4.0017: probe with driver arvo failed with error -32
[   91.306978][  T452] usb 4-1: USB disconnect, device number 30
[   91.397452][ T2314] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   91.406309][ T2314] rust_binder: Write failure EINVAL in pid:247
[   91.424929][ T1590] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   91.474162][ T2316] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   91.474192][ T2316] rust_binder: Error in use_page_slow: EBUSY
[   91.484956][ T2316] rust_binder: use_range failure EBUSY
[   91.491079][ T2316] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   91.496653][ T2316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   91.504312][ T2316] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   91.513767][ T2316] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:249
[   91.594912][ T1590] usb 2-1: Using ep0 maxpacket: 16
[   91.609652][ T1590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.621077][ T1590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.631665][ T1590] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.640990][ T1590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.651864][ T1590] usb 2-1: Product: syz
[   91.656260][ T1590] usb 2-1: Manufacturer: syz
[   91.660934][ T1590] usb 2-1: SerialNumber: syz
[   91.872931][ T1590] usb 2-1: 0:2 : does not exist
[   91.882204][ T1590] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   91.893847][ T1590] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   91.901543][   T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   91.911579][ T1590] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[   91.921913][ T1590] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5)
[   91.931818][ T1590] usb 2-1: USB disconnect, device number 27
[   92.034925][   T31] usb 1-1: device descriptor read/64, error -71
[   92.225965][ T2344] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   92.274965][   T31] usb 1-1: device descriptor read/64, error -71
[   92.484971][ T1590] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[   92.524935][   T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   92.587359][ T2353] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   92.587378][ T2353] rust_binder: Read failure Err(EFAULT) in pid:175
[   92.595790][ T2353] rust_binder: Write failure EINVAL in pid:175
[   92.602694][ T2353] rust_binder: Read failure Err(EAGAIN) in pid:175
[   92.609766][ T2356] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   92.616425][ T1590] usb 4-1: device descriptor read/64, error -71
[   92.630849][ T2356] rust_binder: Read failure Err(EFAULT) in pid:175
[   92.654931][   T31] usb 1-1: device descriptor read/64, error -71
[   92.659912][ T2369] overlayfs: failed to clone upperpath
[   92.675567][ T2369] overlayfs: failed to clone upperpath
[   92.692596][ T2374] netlink: 108 bytes leftover after parsing attributes in process `syz.2.656'.
[   92.699013][ T2375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180
[   92.875087][ T1590] usb 4-1: device descriptor read/64, error -71
[   92.895058][   T31] usb 1-1: device descriptor read/64, error -71
[   93.005030][   T31] usb usb1-port1: attempt power cycle
[   93.124976][ T1590] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[   93.254951][ T1590] usb 4-1: device descriptor read/64, error -71
[   93.344937][   T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   93.353396][   T36] audit: type=1400 audit(1750749583.274:394): avc:  denied  { getopt } for  pid=2381 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.373983][   T31] usb 1-1: device descriptor read/8, error -71
[   93.491703][ T2385] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   93.504990][ T1590] usb 4-1: device descriptor read/64, error -71
[   93.512380][   T31] usb 1-1: device descriptor read/8, error -71
[   93.562388][  T452] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[   93.585059][  T452] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   93.615323][ T1590] usb usb4-port1: attempt power cycle
[   93.697628][   T36] audit: type=1400 audit(1750749583.624:395): avc:  denied  { create } for  pid=2400 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   93.751823][ T2407] overlayfs: failed to clone upperpath
[   93.775024][   T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   93.802539][   T31] usb 1-1: device descriptor read/8, error -71
[   93.861393][ T2415] 9p: Unknown uid 00000000004294967295
[   93.920741][   T36] audit: type=1400 audit(1750749583.844:396): avc:  denied  { map } for  pid=2416 comm="syz.2.671" path="socket:[18974]" dev="sockfs" ino=18974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   93.945922][   T31] usb 1-1: device descriptor read/8, error -71
[   93.955244][   T36] audit: type=1400 audit(1750749583.884:397): avc:  denied  { nlmsg_write } for  pid=2421 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   93.994937][   T45] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[   94.004932][ T1590] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[   94.030357][ T1590] usb 4-1: device descriptor read/8, error -71
[   94.055082][   T31] usb usb1-port1: unable to enumerate USB device
[   94.145980][   T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.157070][   T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   94.167937][   T45] usb 2-1: config 0 interface 0 has no altsetting 0
[   94.174586][   T45] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   94.183747][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.192278][ T1590] usb 4-1: device descriptor read/8, error -71
[   94.198736][   T45] usb 2-1: config 0 descriptor??
[   94.204163][ T2405] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   94.434949][ T1590] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[   94.455926][ T1590] usb 4-1: device descriptor read/8, error -71
[   94.588297][ T1590] usb 4-1: device descriptor read/8, error -71
[   94.615050][   T45] holtek_mouse 0003:04D9:A067.0019: bogus close delimiter
[   94.622210][   T45] holtek_mouse 0003:04D9:A067.0019: item 0 2 2 10 parsing failed
[   94.630207][   T45] holtek_mouse 0003:04D9:A067.0019: hid parse failed: -22
[   94.637436][   T45] holtek_mouse 0003:04D9:A067.0019: probe with driver holtek_mouse failed with error -22
[   94.666731][ T2443] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.667596][ T2443] rust_binder: Write failure EINVAL in pid:256
[   94.695149][ T1590] usb usb4-port1: unable to enumerate USB device
[   94.815221][ T1590] usb 2-1: USB disconnect, device number 28
[   94.827871][   T13] bridge_slave_1: left allmulticast mode
[   94.833594][   T13] bridge_slave_1: left promiscuous mode
[   94.839629][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.848134][   T13] bridge_slave_0: left allmulticast mode
[   94.853877][   T13] bridge_slave_0: left promiscuous mode
[   94.859924][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.055772][ T2454] @: renamed from vlan0 (while UP)
[   95.097859][   T13] veth1_macvtap: left promiscuous mode
[   95.103391][   T13] veth0_vlan: left promiscuous mode
[   95.152620][ T2455] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.159757][ T2455] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.166874][ T2455] bridge_slave_0: entered allmulticast mode
[   95.173171][ T2455] bridge_slave_0: entered promiscuous mode
[   95.179960][ T2455] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.187141][ T2455] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.194214][ T2455] bridge_slave_1: entered allmulticast mode
[   95.201322][ T2455] bridge_slave_1: entered promiscuous mode
[   95.257457][ T2455] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.264562][ T2455] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.271898][ T2455] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.278964][ T2455] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.308125][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.315799][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.333924][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.341045][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.368288][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.375405][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.411145][ T2455] veth0_vlan: entered promiscuous mode
[   95.428487][ T2455] veth1_macvtap: entered promiscuous mode
[   95.443851][ T2467] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.447702][ T2467] rust_binder: Write failure EINVAL in pid:191
[   95.621631][ T2486] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   95.637080][ T2491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   95.637125][ T2491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:398
[   95.733272][   T36] audit: type=1400 audit(1750749585.654:398): avc:  denied  { getopt } for  pid=2503 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.837657][ T2518] binder: Unknown parameter 'se'
[   96.086051][   T36] audit: type=1400 audit(1750749586.014:399): avc:  denied  { setopt } for  pid=2525 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.119152][ T2528] mmap: syz.4.705 (2528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.129812][ T2531] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   96.136936][   T36] audit: type=1400 audit(1750749586.044:400): avc:  denied  { map } for  pid=2527 comm="syz.4.705" path="socket:[19577]" dev="sockfs" ino=19577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   96.149682][ T2531] SELinux: failed to load policy
[   96.182774][   T36] audit: type=1400 audit(1750749586.104:401): avc:  denied  { accept } for  pid=2534 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   96.268299][ T2545] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.321494][ T2546] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.329605][ T2546] rust_binder: inc_ref_done called when no active inc_refs
[   96.482269][   T36] audit: type=1400 audit(1750749586.404:402): avc:  denied  { connect } for  pid=2549 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.509137][   T36] audit: type=1400 audit(1750749586.404:403): avc:  denied  { read } for  pid=2549 comm="syz.2.712" laddr=172.20.20.10 lport=2 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.909369][ T2554] rust_binder: Write failure EFAULT in pid:202
[   97.152714][ T2565] tmpfs: Unknown parameter 'S01^��'
[   97.154984][   T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   97.314948][   T45] usb 2-1: Using ep0 maxpacket: 32
[   97.321259][   T45] usb 2-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.334637][   T45] usb 2-1: config 1 interface 0 has no altsetting 0
[   97.335050][ T2570] netlink: 5 bytes leftover after parsing attributes in process `syz.3.719'.
[   97.343043][   T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40
[   97.350665][ T2570] rust_binder: Write failure EFAULT in pid:427
[   97.359255][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.373762][   T45] usb 2-1: Product: ᠉
[   97.378108][   T45] usb 2-1: Manufacturer: а
[   97.382657][   T45] usb 2-1: SerialNumber: 
[   97.601010][   T45] usbhid 2-1:1.0: can't add hid device: -71
[   97.610814][   T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   97.622857][   T45] usb 2-1: USB disconnect, device number 29
[   97.644957][   T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[   97.794921][   T31] usb 4-1: Using ep0 maxpacket: 16
[   97.801671][   T31] usb 4-1: config 255 has an invalid interface number: 127 but max is 0
[   97.810259][   T31] usb 4-1: config 255 contains an unexpected descriptor of type 0x1, skipping
[   97.819293][   T31] usb 4-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config
[   97.829784][   T31] usb 4-1: config 255 has no interface number 0
[   97.836291][   T31] usb 4-1: config 255 interface 127 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 1024
[   97.847132][   T31] usb 4-1: config 255 interface 127 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64
[   97.864949][   T31] usb 4-1: config 255 interface 127 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[   97.884951][   T31] usb 4-1: config 255 interface 127 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64
[   97.908188][   T31] usb 4-1: config 255 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   97.920076][   T31] usb 4-1: config 255 interface 127 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 15
[   97.933787][   T31] usb 4-1: config 255 interface 127 has no altsetting 0
[   97.942536][   T31] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=d6.3a
[   97.951907][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.964804][   T31] usb 4-1: Product: ⠪
[   97.969245][   T31] usb 4-1: Manufacturer: Ⰹ
[   97.974442][   T31] usb 4-1: SerialNumber: syz
[   97.989861][ T2579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   97.997236][ T2579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   98.212208][   T31] usb 4-1: USB disconnect, device number 35
[   98.464929][  T343] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   98.615483][  T343] usb 2-1: Using ep0 maxpacket: 16
[   98.628907][  T343] usb 2-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config
[   98.644154][  T343] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   98.657622][  T343] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   98.667465][  T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.675716][ T2628] rust_binder: got new transaction with bad transaction stack
[   98.675741][ T2628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47
[   98.694843][  T343] usb 2-1: config 0 descriptor??
[   98.701485][ T2630] binder: Bad value for 'stats'
[   98.744556][ T2634] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 144, size: 87)
[   98.744585][ T2634] rust_binder: Error while translating object.
[   98.755392][ T2634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   98.761761][ T2634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[   98.881427][ T2647] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.950357][ T2648] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.958512][ T2648] rust_binder: inc_ref_done called when no active inc_refs
[   99.044978][ T1590] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.121367][ T2611] rust_binder: Write failure EFAULT in pid:207
[   99.121442][ T2610] rust_binder: Write failure EFAULT in pid:207
[   99.204910][ T1590] usb 5-1: Using ep0 maxpacket: 32
[   99.217300][ T1590] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   99.225525][ T1590] usb 5-1: config 0 has no interface number 0
[   99.231668][ T1590] usb 5-1: config 0 interface 184 altsetting 7 has an endpoint descriptor with address 0xE5, changing to 0x85
[   99.243406][ T1590] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   99.254900][ T1590] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x85 has invalid maxpacket 41132, setting to 1024
[   99.266254][ T1590] usb 5-1: config 0 interface 184 has no altsetting 0
[   99.274344][ T1590] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   99.283451][ T1590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.291523][ T1590] usb 5-1: Product: syz
[   99.295731][ T1590] usb 5-1: Manufacturer: syz
[   99.300372][ T1590] usb 5-1: SerialNumber: syz
[   99.306153][ T1590] usb 5-1: config 0 descriptor??
[   99.312297][ T1590] smsc75xx v1.0.0
[   99.316034][ T1590] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   99.326226][ T1590] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[   99.820809][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   99.820828][   T36] audit: type=1400 audit(1750749589.744:407): avc:  denied  { ioctl } for  pid=2718 comm="syz.3.766" path="/145/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   99.878600][ T2726] binder: Unknown parameter 'fscontext?}K'
[   99.879021][ T2722] binder: Unknown parameter 'fscontext?}K'
[   99.903439][   T36] audit: type=1400 audit(1750749589.824:408): avc:  denied  { mount } for  pid=2727 comm="syz.3.768" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   99.943943][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.952546][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.962333][   T36] audit: type=1400 audit(1750749589.884:409): avc:  denied  { write } for  pid=2729 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  100.066045][   T36] audit: type=1400 audit(1750749589.994:410): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  100.093609][ T2736] binder: Bad value for 'stats'
[  100.111610][ T2738] binder: Bad value for 'max'
[  100.131338][ T2740] input: syz0 as /devices/virtual/input/input14
[  100.141991][   T36] audit: type=1326 audit(1750749590.064:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.3.772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7f358e929 code=0x0
[  100.346894][ T2746] overlayfs: failed to resolve './bus': -2
[  100.391603][ T2754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=2754 comm=syz.2.777
[  100.404556][ T2754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=2754 comm=syz.2.777
[  100.417376][ T2754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=2754 comm=syz.2.777
[  100.429974][ T2754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=2754 comm=syz.2.777
[  100.481495][ T2761] rust_binder: Write failure EFAULT in pid:226
[  100.500708][   T36] audit: type=1400 audit(1750749590.424:412): avc:  denied  { setattr } for  pid=2762 comm="syz.1.781" name="NETLINK" dev="sockfs" ino=21322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.599964][ T2766] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.600947][ T2766] rust_binder: Write failure EINVAL in pid:230
[  100.684714][ T2771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.700205][ T2771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.079945][ T2777] overlay: Unknown parameter 'fsmagic'
[  101.238250][ T2809] rust_binder: 2808 RLIMIT_NICE not set
[  101.279798][ T2824] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.286572][ T2824] rust_binder: Write failure EINVAL in pid:238
[  101.371495][   T36] audit: type=1400 audit(1750749591.294:413): avc:  denied  { getattr } for  pid=2827 comm="syz.1.795" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  101.509605][ T2845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253
[  101.814339][  T388] usb 5-1: USB disconnect, device number 2
[  101.920300][ T2858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.921444][ T2858] rust_binder: Write failure EINVAL in pid:66
[  101.991720][   T36] audit: type=1400 audit(1750749591.914:414): avc:  denied  { map } for  pid=2860 comm="syz.4.804" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  102.427781][   T36] audit: type=1400 audit(1750749598.341:415): avc:  denied  { remount } for  pid=2885 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  103.453616][ T2944] lo: entered promiscuous mode
[  103.520180][   T12] tipc: Subscription rejected, illegal request
[  103.538930][   T36] audit: type=1400 audit(1750749599.441:416): avc:  denied  { map } for  pid=2941 comm="syz.1.830" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  103.659479][ T2946] lo: left promiscuous mode
[  103.879442][ T2953] rust_binder: Write failure EINVAL in pid:107
[  104.009086][  T343] usb 2-1: string descriptor 0 read error: -110
[  104.055388][  T343] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  104.124456][ T2959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2959 comm=syz.3.835
[  104.140940][ T2961] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  104.140969][ T2961] rust_binder: Error in use_page_slow: EBUSY
[  104.151532][ T2961] rust_binder: use_range failure EBUSY
[  104.157861][ T2961] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  104.163375][ T2961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  104.175646][ T2961] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  104.185030][ T2961] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:111
[  104.187129][ T2967] rust_binder: Error while translating object.
[  104.205002][ T2967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  104.211220][ T2967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276
[  104.222959][ T2971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.839'.
[  104.242350][ T2971] netlink: 'syz.4.839': attribute type 4 has an invalid length.
[  104.251053][ T2973] veth0_vlan: left promiscuous mode
[  104.328176][ T2980] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  104.336592][ T2980] rust_binder: Write failure EINVAL in pid:283
[  104.349022][ T2982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287
[  104.368110][ T2985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.385826][ T2985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.436953][ T2996] overlayfs: failed to resolve './file1': -2
[  104.484918][  T388] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  104.624933][  T388] usb 5-1: device descriptor read/64, error -71
[  104.635060][ T3004] fuse: Unknown parameter '18446744073709551615��01777777777777777777777�'
[  104.787224][ T3016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'.
[  104.864979][  T388] usb 5-1: device descriptor read/64, error -71
[  105.104910][  T388] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  105.264906][  T388] usb 5-1: device descriptor read/64, error -71
[  105.504954][  T388] usb 5-1: device descriptor read/64, error -71
[  105.625077][  T388] usb usb5-port1: attempt power cycle
[  105.855714][   T36] audit: type=1400 audit(1750749601.781:417): avc:  denied  { mount } for  pid=3030 comm="syz.1.858" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  105.907694][   T36] audit: type=1400 audit(1750749601.781:418): avc:  denied  { mounton } for  pid=3030 comm="syz.1.858" path="/98/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  105.953924][ T3035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.965050][   T36] audit: type=1400 audit(1750749601.851:419): avc:  denied  { unmount } for  pid=1415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  105.973636][ T3035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.994952][  T388] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  106.025958][  T388] usb 5-1: device descriptor read/8, error -71
[  106.156839][  T388] usb 5-1: device descriptor read/8, error -71
[  106.345257][ T3004] 9pnet_fd: Insufficient options for proto=fd
[  106.399572][  T388] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  106.426048][  T388] usb 5-1: device descriptor read/8, error -71
[  106.555945][  T388] usb 5-1: device descriptor read/8, error -71
[  106.665224][  T388] usb usb5-port1: unable to enumerate USB device
[  107.166248][ T3100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'.
[  107.383437][   T36] audit: type=1400 audit(1750749603.301:420): avc:  denied  { write } for  pid=65 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21993 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  107.619361][   T36] audit: type=1400 audit(1750749603.541:421): avc:  denied  { setopt } for  pid=3144 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  107.624964][  T388] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  107.688404][ T3156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'.
[  107.697888][ T3156] binder: Unknown parameter 's'
[  107.720816][   T36] audit: type=1400 audit(1750749603.641:422): avc:  denied  { nlmsg_read } for  pid=3157 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  107.795977][  T388] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.807187][  T388] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  107.818560][  T388] usb 5-1: config 0 interface 0 has no altsetting 0
[  107.826139][  T388] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  107.835981][  T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.843963][ T3176] netlink: 140 bytes leftover after parsing attributes in process `syz.1.907'.
[  107.846841][  T388] usb 5-1: config 0 descriptor??
[  107.857136][ T3176] tipc: Started in network mode
[  107.863664][ T3176] tipc: Node identity , cluster identity 4711
[  107.870077][ T3123] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  107.883807][ T3176] tipc: Failed to obtain node identity
[  107.893003][ T3176] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[  108.045827][ T3195] incfs: Backing dir is not set, filesystem can't be mounted.
[  108.053486][ T3195] incfs: mount failed -2
[  108.059513][ T3195] 9pnet_fd: Insufficient options for proto=fd
[  108.296946][  T388] holtek_mouse 0003:04D9:A067.001A: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0
[  108.487725][  T388] usb 5-1: USB disconnect, device number 7
[  109.428290][   T36] audit: type=1400 audit(1750749605.351:423): avc:  denied  { getopt } for  pid=3247 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  109.455725][ T3241] overlayfs: missing 'lowerdir'
[  109.712598][ T3287] overlayfs: failed to clone upperpath
[  110.195278][ T3309] rust_binder: Failed copying remainder into alloc: EFAULT
[  110.195307][ T3309] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  110.202808][ T3309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  110.211394][ T3309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134
[  110.262324][ T3319] /dev/rnullb0: Can't lookup blockdev
[  110.310228][ T3327] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3327 comm=syz.1.957
[  110.383346][   T36] audit: type=1400 audit(1750749606.301:424): avc:  denied  { write } for  pid=3337 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  110.475477][ T3361] netlink: 124 bytes leftover after parsing attributes in process `syz.1.969'.
[  110.485241][   T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  110.502032][   T36] audit: type=1400 audit(1750749606.421:425): avc:  denied  { create } for  pid=3363 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  110.664973][   T31] usb 5-1: Using ep0 maxpacket: 16
[  110.672143][   T31] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 8
[  110.686282][   T31] usb 5-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  110.699550][   T31] usb 5-1: config 1 interface 0 has no altsetting 0
[  110.708003][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  110.717293][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.725523][   T31] usb 5-1: Product: 㐊
[  110.729757][   T31] usb 5-1: Manufacturer: ࠝ
[  110.734381][   T31] usb 5-1: SerialNumber: Ѝ
[  110.737475][ T3390] fuse: Unknown parameter 'r100000'
[  110.744989][ T3317] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  110.876838][ T3401] netlink: 'syz.2.986': attribute type 12 has an invalid length.
[  111.160094][   T36] audit: type=1400 audit(1750749607.081:426): avc:  denied  { setattr } for  pid=3314 comm="syz.4.953" name="KEY" dev="sockfs" ino=23351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  111.191637][   T31] usb 5-1: USB disconnect, device number 8
[  111.414145][ T3485] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  111.527571][ T3507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  111.536542][ T3507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  111.603568][ T3520] overlayfs: failed to clone upperpath
[  111.784928][   T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  111.936707][   T31] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  111.948734][   T31] usb 5-1: config 1 interface 0 has no altsetting 0
[  111.957039][   T31] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  111.966204][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.974225][   T31] usb 5-1: Product: syz
[  111.984478][   T31] usb 5-1: Manufacturer: syz
[  111.989289][   T31] usb 5-1: SerialNumber: syz
[  112.446688][   T31] usbhid 5-1:1.0: can't add hid device: -71
[  112.455492][   T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  112.465430][   T31] usb 5-1: USB disconnect, device number 9
[  112.905835][ T3583] overlayfs: failed to clone upperpath
[  113.003769][   T36] audit: type=1400 audit(1750749608.921:427): avc:  denied  { remount } for  pid=3588 comm="syz.4.1049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  113.045563][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'.
[  113.075208][ T3594] tmpfs: Unsupported parameter 'mpol'
[  113.716840][ T3624] overlayfs: failed to clone lowerpath
[  113.884949][ T3637] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1066'.
[  114.034928][   T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  114.165566][   T36] audit: type=1400 audit(1750749610.091:428): avc:  denied  { mounton } for  pid=3661 comm="syz.1.1074" path="/184/file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  114.206050][ T3666] veth1_to_bond: entered allmulticast mode
[  114.206441][   T31] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.219869][   T31] usb 5-1: can't read configurations, error -61
[  114.224925][ T3666] veth1_to_bond: entered promiscuous mode
[  114.232711][ T3666] veth1_to_bond: left promiscuous mode
[  114.244227][ T3666] veth1_to_bond: left allmulticast mode
[  114.354969][   T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  114.506351][   T31] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.513989][   T31] usb 5-1: can't read configurations, error -61
[  114.520419][   T31] usb usb5-port1: attempt power cycle
[  114.716884][ T3677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3677 comm=syz.3.1081
[  114.729641][ T3677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3677 comm=syz.3.1081
[  114.742359][ T3677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3677 comm=syz.3.1081
[  114.755220][ T3677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=3677 comm=syz.3.1081
[  114.864953][   T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  114.889979][   T31] usb 5-1: unable to read config index 0 descriptor/start: -61
[  114.897729][   T31] usb 5-1: can't read configurations, error -61
[  114.977707][   T36] audit: type=1400 audit(1750749610.901:429): avc:  denied  { execute } for  pid=3692 comm="syz.1.1088" name="file1" dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.024988][   T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  115.046818][   T31] usb 5-1: unable to read config index 0 descriptor/start: -61
[  115.054614][   T31] usb 5-1: can't read configurations, error -61
[  115.061244][   T31] usb usb5-port1: unable to enumerate USB device
[  115.385164][ T3696] bpf: Bad value for 'mode'
[  115.402707][ T3698] futex_wake_op: syz.2.1090 tries to shift op by 144; fix this program
[  115.436591][ T3705] fuse: Unknown parameter '0x0000000000000004'
[  115.436601][   T36] audit: type=1400 audit(1750749611.361:430): avc:  denied  { mounton } for  pid=3704 comm="syz.2.1092" path="/350/file0" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.508109][ T3708] lo: entered promiscuous mode
[  115.513291][ T3707] lo: left promiscuous mode
[  115.872622][ T3746] /dev/rnullb0: Can't lookup blockdev
[  116.029453][   T36] audit: type=1400 audit(1750749611.951:431): avc:  denied  { bind } for  pid=3754 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  116.048856][   T36] audit: type=1400 audit(1750749611.951:432): avc:  denied  { name_bind } for  pid=3754 comm="syz.2.1110" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  116.070004][   T36] audit: type=1400 audit(1750749611.951:433): avc:  denied  { node_bind } for  pid=3754 comm="syz.2.1110" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  116.117309][ T3761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3761 comm=syz.2.1112
[  116.252932][ T3765] tipc: Started in network mode
[  116.257989][ T3765] tipc: Node identity ac1414aa, cluster identity 4711
[  116.265213][ T3765] tipc: Enabled bearer <udp:s>, priority 10
[  116.693462][ T3787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'.
[  116.702626][ T3786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'.
[  117.384909][  T388] tipc: Node number set to 2886997162
[  117.580072][ T3826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1134'.
[  117.618599][ T3830] lo: entered promiscuous mode
[  117.623777][ T3830] lo: left promiscuous mode
[  117.669918][ T3838] rust_binder: Write failure EINVAL in pid:188
[  117.681222][   T36] audit: type=1400 audit(1750749613.601:434): avc:  denied  { execute_no_trans } for  pid=3840 comm="syz.4.1140" path="/59/file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  117.710769][ T3841] rust_binder: Write failure EINVAL in pid:191
[  117.710846][ T3842] rust_binder: Write failure EINVAL in pid:191
[  117.816166][ T3851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'.
[  117.954909][  T388] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  118.084909][  T388] usb 5-1: device descriptor read/64, error -71
[  118.104976][ T3859] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  118.115206][   T36] audit: type=1400 audit(1750749614.041:435): avc:  denied  { relabelto } for  pid=3858 comm="syz.1.1146" name="208" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  118.141801][   T36] audit: type=1400 audit(1750749614.041:436): avc:  denied  { associate } for  pid=3858 comm="syz.1.1146" name="208" dev="tmpfs" ino=1134 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  118.293235][   T36] audit: type=1400 audit(1750749614.201:437): avc:  denied  { write } for  pid=3867 comm="syz.1.1146" name="208" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  118.334889][   T36] audit: type=1400 audit(1750749614.201:438): avc:  denied  { add_name } for  pid=3867 comm="syz.1.1146" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  118.344910][  T388] usb 5-1: device descriptor read/64, error -71
[  118.363505][   T36] audit: type=1400 audit(1750749614.201:439): avc:  denied  { create } for  pid=3867 comm="syz.1.1146" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  118.412283][   T36] audit: type=1400 audit(1750749614.201:440): avc:  denied  { associate } for  pid=3867 comm="syz.1.1146" name="core" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  118.443814][   T36] audit: type=1400 audit(1750749614.201:441): avc:  denied  { write open } for  pid=3867 comm="syz.1.1146" path="/208/core" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  118.634897][  T388] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  118.795884][  T388] usb 5-1: device descriptor read/64, error -71
[  118.809719][   T36] audit: type=1400 audit(1750749614.731:442): avc:  denied  { create } for  pid=3889 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  118.956460][   T36] audit: type=1400 audit(1750749614.881:443): avc:  denied  { remove_name } for  pid=1415 comm="syz-executor" name="core" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  119.044909][  T388] usb 5-1: device descriptor read/64, error -71
[  119.149033][ T3906] overlayfs: failed to clone upperpath
[  119.155514][  T388] usb usb5-port1: attempt power cycle
[  119.167559][ T3908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1167'.
[  119.233625][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'.
[  119.388079][ T3949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3949 comm=syz.2.1180
[  119.413780][ T3953] /dev/rnullb0: Can't lookup blockdev
[  119.494952][  T388] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  119.525916][  T388] usb 5-1: device descriptor read/8, error -71
[  119.551741][ T3967] overlayfs: missing 'lowerdir'
[  119.558211][ T3967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'.
[  119.655951][  T388] usb 5-1: device descriptor read/8, error -71
[  119.894953][  T388] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  119.916004][  T388] usb 5-1: device descriptor read/8, error -71
[  119.996477][ T4005] overlayfs: failed to clone upperpath
[  120.053716][  T388] usb 5-1: device descriptor read/8, error -71
[  120.164999][  T388] usb usb5-port1: unable to enumerate USB device
[  120.181284][ T4019] sock: sock_timestamping_bind_phc: sock not bind to device
[  120.409375][ T4051] overlayfs: failed to clone upperpath
[  120.431497][ T4055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64513 sclass=netlink_tcpdiag_socket pid=4055 comm=syz.1.1214
[  122.084916][  T443] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  122.165353][ T4171] overlayfs: failed to clone upperpath
[  122.244920][  T443] usb 5-1: Using ep0 maxpacket: 32
[  122.251411][  T443] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  122.259574][  T443] usb 5-1: config 0 has no interface number 0
[  122.267453][  T443] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  122.276569][  T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.284595][  T443] usb 5-1: Product: syz
[  122.289207][  T443] usb 5-1: Manufacturer: syz
[  122.294347][  T443] usb 5-1: SerialNumber: syz
[  122.300298][  T443] usb 5-1: config 0 descriptor??
[  122.309250][  T443] smsc95xx v2.0.0
[  122.523949][  T443] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  122.537821][  T443] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  122.547638][  T443] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  122.560861][  T443] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  122.570772][  T443] usb 5-1: USB disconnect, device number 18
[  122.604252][ T4215] rust_binder: Write failure EINVAL in pid:211
[  122.674743][ T4224] rust_binder: Write failure EINVAL in pid:213
[  122.769987][ T4232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217
[  122.777027][ T4232] rust_binder: Error while translating object.
[  122.786613][ T4232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  122.792955][ T4232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217
[  123.094289][ T4260] overlayfs: failed to resolve './file1/file0': -2
[  123.612193][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  123.612211][   T36] audit: type=1400 audit(1750749619.531:449): avc:  denied  { create } for  pid=4292 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  124.498153][   T36] audit: type=1400 audit(1750749620.421:450): avc:  denied  { audit_write } for  pid=4342 comm="syz.3.1315" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  124.779398][ T4351] /dev/rnullb0: Can't lookup blockdev
[  124.795797][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'.
[  124.807704][   T36] audit: type=1400 audit(1750749620.731:451): avc:  denied  { checkpoint_restore } for  pid=4352 comm="syz.1.1320" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  125.028387][ T4371] fuse: Unknown parameter '0x0000000000000006'
[  125.058645][   T36] audit: type=1400 audit(1750749621.988:452): avc:  denied  { watch watch_reads } for  pid=4379 comm="syz.2.1329" path="/dev/rnullb0" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.107157][ T4387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'.
[  125.148697][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'.
[  125.171766][ T4394] tipc: Started in network mode
[  125.176763][ T4394] tipc: Node identity e0000001, cluster identity 4711
[  125.183877][ T4394] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  125.201874][   T36] audit: type=1400 audit(1750749622.128:453): avc:  denied  { ioctl } for  pid=4396 comm="syz.2.1336" path="socket:[26815]" dev="sockfs" ino=26815 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  125.897073][ T4434] overlayfs: failed to clone upperpath
[  125.940963][   T36] audit: type=1400 audit(1750749622.868:454): avc:  denied  { create } for  pid=4426 comm="syz.2.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  126.071559][ T4447] rust_binder: Write failure EINVAL in pid:229
[  126.184271][ T4459] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1358'.
[  126.595054][ T4500] /dev/rnullb0: Can't lookup blockdev
[  126.645013][ T4508] futex_wake_op: syz.2.1376 tries to shift op by -1; fix this program
[  127.165242][   T36] audit: type=1400 audit(1750749624.098:455): avc:  denied  { lock } for  pid=4515 comm="syz.2.1379" path="socket:[26274]" dev="sockfs" ino=26274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  127.264959][   T45] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  127.271067][   T36] audit: type=1326 audit(1750749624.198:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.1385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e37b8e929 code=0x0
[  127.323711][ T4537] overlayfs: failed to clone upperpath
[  127.415990][   T45] usb 5-1: No LPM exit latency info found, disabling LPM.
[  127.423898][   T45] usb 5-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  127.434643][   T45] usb 5-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  127.445417][   T45] usb 5-1: config 1 interface 0 has no altsetting 0
[  127.453953][   T45] usb 5-1: string descriptor 0 read error: -22
[  127.460189][   T45] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40
[  127.469271][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.478353][ T4512] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  127.486086][ T4512] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  127.700398][   T45] usbhid 5-1:1.0: can't add hid device: -71
[  127.706528][   T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  127.716376][   T45] usb 5-1: USB disconnect, device number 19
[  127.768973][   T36] audit: type=1400 audit(1750749624.698:457): avc:  denied  { map } for  pid=4546 comm="syz.3.1391" path="socket:[27054]" dev="sockfs" ino=27054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  127.792207][   T36] audit: type=1400 audit(1750749624.698:458): avc:  denied  { accept } for  pid=4546 comm="syz.3.1391" path="socket:[27054]" dev="sockfs" ino=27054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  128.138209][ T4566] overlayfs: failed to clone upperpath
[  128.146483][ T4566] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  128.166932][ T4569] fuse: Bad value for 'fd'
[  128.634899][  T343] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  128.786068][  T343] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  128.794385][  T343] usb 5-1: config 0 has no interface number 0
[  128.800559][  T343] usb 5-1: config 0 interface 132 has no altsetting 0
[  128.808716][  T343] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  128.817838][  T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.825968][  T343] usb 5-1: Product: syz
[  128.830157][  T343] usb 5-1: Manufacturer: syz
[  128.834765][  T343] usb 5-1: SerialNumber: syz
[  128.840119][  T343] usb 5-1: config 0 descriptor??
[  129.649557][  T343] CoreChips 5-1:0.132 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  130.063837][  T343] CoreChips 5-1:0.132 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  130.075463][  T343] CoreChips 5-1:0.132 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  130.085057][  T343] CoreChips 5-1:0.132: probe with driver CoreChips failed with error -71
[  130.094695][  T343] usb 5-1: USB disconnect, device number 20
[  130.252145][ T4706] can: request_module (can-proto-0) failed.
[  130.946778][ T4727] binder: Unknown parameter 'sechabel'
[  130.963503][   T36] audit: type=1400 audit(1750749627.888:459): avc:  denied  { execstack } for  pid=4728 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  131.102691][ T4746] fuse: Bad value for 'fd'
[  132.185001][  T452] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  132.336054][  T452] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.347195][  T452] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  132.358058][  T452] usb 5-1: config 0 interface 0 has no altsetting 0
[  132.364693][  T452] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  132.373959][  T452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.383037][  T452] usb 5-1: config 0 descriptor??
[  132.388491][ T4775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  132.747977][ T4786] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  132.800248][  T452] holtek_mouse 0003:04D9:A067.001B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0
[  132.842049][ T4799] overlayfs: failed to clone upperpath
[  132.864888][   T36] audit: type=1326 audit(1750749629.788:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.3.1490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7f358e929 code=0x0
[  132.999607][   T31] usb 5-1: USB disconnect, device number 21
[  133.149086][ T4807] overlayfs: failed to clone upperpath
[  133.241251][ T4812] batadv_slave_0: entered promiscuous mode
[  133.248958][ T4811] batadv_slave_0: left promiscuous mode
[  133.270523][   T36] audit: type=1400 audit(1750749630.198:461): avc:  denied  { lock } for  pid=4814 comm="syz.1.1496" path="socket:[27814]" dev="sockfs" ino=27814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  133.696675][ T4840] overlayfs: failed to clone upperpath
[  133.779182][ T3234] ------------[ cut here ]------------
[  133.784695][ T3234] WARNING: CPU: 1 PID: 3234 at fs/inode.c:340 drop_nlink+0xce/0x110
[  133.792802][ T3234] Modules linked in:
[  133.796791][ T3234] CPU: 1 UID: 0 PID: 3234 Comm: syz.4.921 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  133.810478][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  133.820742][ T3234] RIP: 0010:drop_nlink+0xce/0x110
[  133.826061][ T3234] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 5f 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[  133.846348][ T3234] RSP: 0018:ffffc9000cb67860 EFLAGS: 00010293
[  133.852683][ T3234] RAX: ffffffff81ed3d2e RBX: ffff88811b862d10 RCX: ffff88811d72a600
[  133.860726][ T3234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  133.868782][ T3234] RBP: ffffc9000cb67888 R08: 0000000000000003 R09: 0000000000000004
[  133.876827][ T3234] R10: dffffc0000000000 R11: fffff5200196cefc R12: dffffc0000000000
[  133.884822][ T3234] R13: 1ffff1102370c5ab R14: ffff88811b862d58 R15: 0000000000000000
[  133.892866][ T3234] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  133.902046][ T3234] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.908872][ T3234] CR2: 0000000000000000 CR3: 00000000072a8000 CR4: 00000000003526b0
[  133.916895][ T3234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.924917][ T3234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.932909][ T3234] Call Trace:
[  133.936228][ T3234]  <TASK>
[  133.939174][ T3234]  shmem_rmdir+0x5f/0x90
[  133.943434][ T3234]  vfs_rmdir+0x3e0/0x560
[  133.948667][ T3234]  incfs_kill_sb+0x109/0x230
[  133.953289][ T3234]  deactivate_locked_super+0xd5/0x2a0
[  133.958702][ T3234]  deactivate_super+0xb8/0xe0
[  133.963493][ T3234]  cleanup_mnt+0x3f1/0x480
[  133.968309][ T3234]  __cleanup_mnt+0x1d/0x40
[  133.972755][ T3234]  task_work_run+0x1e0/0x250
[  133.977378][ T3234]  ? __cfi_task_work_run+0x10/0x10
[  133.982509][ T3234]  ? free_nsproxy+0x223/0x290
[  133.987223][ T3234]  do_exit+0x9b4/0x2630
[  133.991398][ T3234]  ? __sched_text_start+0x10/0x10
[  133.996496][ T3234]  ? __cfi_do_exit+0x10/0x10
[  134.001129][ T3234]  ? __kasan_check_write+0x18/0x20
[  134.006280][ T3234]  ? _raw_spin_lock_irq+0x8d/0x120
[  134.011509][ T3234]  ? __kasan_check_read+0x15/0x20
[  134.016569][ T3234]  ? cgroup_update_frozen+0x160/0x990
[  134.021967][ T3234]  do_group_exit+0x22a/0x300
[  134.026591][ T3234]  ? cgroup_leave_frozen+0x16c/0x2b0
[  134.031923][ T3234]  get_signal+0x139d/0x14f0
[  134.036573][ T3234]  arch_do_signal_or_restart+0x96/0x720
[  134.042142][ T3234]  ? common_nsleep+0x93/0xb0
[  134.046792][ T3234]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  134.052976][ T3234]  ? __se_sys_clock_nanosleep+0x300/0x390
[  134.058761][ T3234]  ? __secure_computing+0xef/0x2b0
[  134.063902][ T3234]  syscall_exit_to_user_mode+0x58/0xb0
[  134.069414][ T3234]  do_syscall_64+0x64/0xf0
[  134.073863][ T3234]  ? clear_bhb_loop+0x50/0xa0
[  134.078588][ T3234]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  134.084510][ T3234] RIP: 00fb:0x294e66b3c7c44cb4
[  134.089328][ T3234] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a.
[  134.096757][ T3234] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753
[  134.105226][ T3234] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e
[  134.113235][ T3234] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd
[  134.121283][ T3234] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d
[  134.129314][ T3234] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1
[  134.137338][ T3234] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018
[  134.145367][ T3234]  </TASK>
[  134.148408][ T3234] ---[ end trace 0000000000000000 ]---
[  134.153981][ T3234] ==================================================================
[  134.162080][ T3234] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[  134.168338][ T3234] Write of size 4 at addr 0000000000000168 by task syz.4.921/3234
[  134.176142][ T3234] 
[  134.178464][ T3234] CPU: 0 UID: 0 PID: 3234 Comm: syz.4.921 Tainted: G        W          6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  134.178491][ T3234] Tainted: [W]=WARN
[  134.178496][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.178507][ T3234] Call Trace:
[  134.178513][ T3234]  <TASK>
[  134.178520][ T3234]  __dump_stack+0x21/0x30
[  134.178544][ T3234]  dump_stack_lvl+0x10c/0x190
[  134.178563][ T3234]  ? __cfi_dump_stack_lvl+0x10/0x10
[  134.178583][ T3234]  print_report+0x3d/0x70
[  134.178597][ T3234]  kasan_report+0x163/0x1a0
[  134.178621][ T3234]  ? ihold+0x24/0x70
[  134.178644][ T3234]  ? _raw_spin_unlock+0x45/0x60
[  134.178668][ T3234]  ? ihold+0x24/0x70
[  134.178690][ T3234]  kasan_check_range+0x299/0x2a0
[  134.178714][ T3234]  __kasan_check_write+0x18/0x20
[  134.178733][ T3234]  ihold+0x24/0x70
[  134.178754][ T3234]  vfs_rmdir+0x26a/0x560
[  134.178770][ T3234]  incfs_kill_sb+0x109/0x230
[  134.178789][ T3234]  deactivate_locked_super+0xd5/0x2a0
[  134.178810][ T3234]  deactivate_super+0xb8/0xe0
[  134.178837][ T3234]  cleanup_mnt+0x3f1/0x480
[  134.178860][ T3234]  __cleanup_mnt+0x1d/0x40
[  134.178881][ T3234]  task_work_run+0x1e0/0x250
[  134.178898][ T3234]  ? __cfi_task_work_run+0x10/0x10
[  134.178918][ T3234]  ? free_nsproxy+0x223/0x290
[  134.178938][ T3234]  do_exit+0x9b4/0x2630
[  134.178954][ T3234]  ? __sched_text_start+0x10/0x10
[  134.178969][ T3234]  ? __cfi_do_exit+0x10/0x10
[  134.178985][ T3234]  ? __kasan_check_write+0x18/0x20
[  134.179003][ T3234]  ? _raw_spin_lock_irq+0x8d/0x120
[  134.179026][ T3234]  ? __kasan_check_read+0x15/0x20
[  134.179044][ T3234]  ? cgroup_update_frozen+0x160/0x990
[  134.179067][ T3234]  do_group_exit+0x22a/0x300
[  134.179083][ T3234]  ? cgroup_leave_frozen+0x16c/0x2b0
[  134.179105][ T3234]  get_signal+0x139d/0x14f0
[  134.179124][ T3234]  arch_do_signal_or_restart+0x96/0x720
[  134.179146][ T3234]  ? common_nsleep+0x93/0xb0
[  134.179166][ T3234]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  134.179187][ T3234]  ? __se_sys_clock_nanosleep+0x300/0x390
[  134.179208][ T3234]  ? __secure_computing+0xef/0x2b0
[  134.179230][ T3234]  syscall_exit_to_user_mode+0x58/0xb0
[  134.179249][ T3234]  do_syscall_64+0x64/0xf0
[  134.179272][ T3234]  ? clear_bhb_loop+0x50/0xa0
[  134.179289][ T3234]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  134.179305][ T3234] RIP: 00fb:0x294e66b3c7c44cb4
[  134.179318][ T3234] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a.
[  134.179327][ T3234] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753
[  134.179344][ T3234] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e
[  134.179357][ T3234] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd
[  134.179369][ T3234] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d
[  134.179381][ T3234] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1
[  134.179393][ T3234] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018
[  134.179408][ T3234]  </TASK>
[  134.179414][ T3234] ==================================================================
[  134.487101][ T3234] Disabling lock debugging due to kernel taint
[  134.493407][ T3234] BUG: kernel NULL pointer dereference, address: 0000000000000168
[  134.501230][ T3234] #PF: supervisor write access in kernel mode
[  134.507296][ T3234] #PF: error_code(0x0002) - not-present page
[  134.514485][ T3234] PGD 800000010df7f067 P4D 800000010df7f067 PUD 0 
[  134.520994][ T3234] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  134.527151][ T3234] CPU: 0 UID: 0 PID: 3234 Comm: syz.4.921 Tainted: G    B   W          6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  134.542095][ T3234] Tainted: [B]=BAD_PAGE, [W]=WARN
[  134.547133][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.557197][ T3234] RIP: 0010:ihold+0x2a/0x70
[  134.561723][ T3234] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d
[  134.581433][ T3234] RSP: 0018:ffffc9000cb678a0 EFLAGS: 00010246
[  134.587511][ T3234] RAX: ffff88811d72a600 RBX: 0000000000000000 RCX: ffff88811d72a600
[  134.595488][ T3234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  134.603465][ T3234] RBP: ffffc9000cb678b0 R08: ffffffff88957947 R09: 1ffffffff112af28
[  134.611447][ T3234] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff88811b862d1c
[  134.619433][ T3234] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  134.627406][ T3234] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  134.636355][ T3234] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.642943][ T3234] CR2: 0000000000000168 CR3: 0000000124ebc000 CR4: 00000000003526b0
[  134.650928][ T3234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.658905][ T3234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  134.667048][ T3234] Call Trace:
[  134.670331][ T3234]  <TASK>
[  134.673262][ T3234]  vfs_rmdir+0x26a/0x560
[  134.677509][ T3234]  incfs_kill_sb+0x109/0x230
[  134.682106][ T3234]  deactivate_locked_super+0xd5/0x2a0
[  134.687569][ T3234]  deactivate_super+0xb8/0xe0
[  134.692252][ T3234]  cleanup_mnt+0x3f1/0x480
[  134.696694][ T3234]  __cleanup_mnt+0x1d/0x40
[  134.701203][ T3234]  task_work_run+0x1e0/0x250
[  134.705885][ T3234]  ? __cfi_task_work_run+0x10/0x10
[  134.711018][ T3234]  ? free_nsproxy+0x223/0x290
[  134.715711][ T3234]  do_exit+0x9b4/0x2630
[  134.720051][ T3234]  ? __sched_text_start+0x10/0x10
[  134.725076][ T3234]  ? __cfi_do_exit+0x10/0x10
[  134.729674][ T3234]  ? __kasan_check_write+0x18/0x20
[  134.734788][ T3234]  ? _raw_spin_lock_irq+0x8d/0x120
[  134.739924][ T3234]  ? __kasan_check_read+0x15/0x20
[  134.744973][ T3234]  ? cgroup_update_frozen+0x160/0x990
[  134.750382][ T3234]  do_group_exit+0x22a/0x300
[  134.754987][ T3234]  ? cgroup_leave_frozen+0x16c/0x2b0
[  134.760299][ T3234]  get_signal+0x139d/0x14f0
[  134.764823][ T3234]  arch_do_signal_or_restart+0x96/0x720
[  134.770394][ T3234]  ? common_nsleep+0x93/0xb0
[  134.774992][ T3234]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  134.781161][ T3234]  ? __se_sys_clock_nanosleep+0x300/0x390
[  134.786902][ T3234]  ? __secure_computing+0xef/0x2b0
[  134.792023][ T3234]  syscall_exit_to_user_mode+0x58/0xb0
[  134.797532][ T3234]  do_syscall_64+0x64/0xf0
[  134.801979][ T3234]  ? clear_bhb_loop+0x50/0xa0
[  134.806677][ T3234]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  134.812830][ T3234] RIP: 00fb:0x294e66b3c7c44cb4
[  134.817592][ T3234] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a.
[  134.824955][ T3234] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753
[  134.833377][ T3234] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e
[  134.841482][ T3234] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd
[  134.849500][ T3234] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d
[  134.857511][ T3234] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1
[  134.865486][ T3234] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018
[  134.873553][ T3234]  </TASK>
[  134.876582][ T3234] Modules linked in:
[  134.880475][ T3234] CR2: 0000000000000168
[  134.884636][ T3234] ---[ end trace 0000000000000000 ]---
[  134.890103][ T3234] RIP: 0010:ihold+0x2a/0x70
[  134.894655][ T3234] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d
[  134.914466][ T3234] RSP: 0018:ffffc9000cb678a0 EFLAGS: 00010246
[  134.920542][ T3234] RAX: ffff88811d72a600 RBX: 0000000000000000 RCX: ffff88811d72a600
[  134.928525][ T3234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  134.936524][ T3234] RBP: ffffc9000cb678b0 R08: ffffffff88957947 R09: 1ffffffff112af28
[  134.944499][ T3234] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff88811b862d1c
[  134.952476][ T3234] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  134.960482][ T3234] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  134.969515][ T3234] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.976107][ T3234] CR2: 0000000000000168 CR3: 0000000124ebc000 CR4: 00000000003526b0
[  134.984121][ T3234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.992093][ T3234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  135.000083][ T3234] Kernel panic - not syncing: Fatal exception
[  135.006462][ T3234] Kernel Offset: disabled
[  135.010785][ T3234] Rebooting in 86400 seconds..