last executing test programs:

3m3.307908393s ago: executing program 0 (id=168):
clock_gettime(0x7, &(0x7f0000000000))
futex_waitv(&(0x7f0000001e40)=[{0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x82}, {0x5, &(0x7f0000000080)=0x100000000, 0x82}, {0x0, &(0x7f00000000c0)=0x200, 0x82}, {0x85c, &(0x7f0000000100)=0x9, 0x2}, {0x7f, &(0x7f0000000140)=0xffffffffcc08bc4d, 0x2}, {0xc, &(0x7f0000000180)=0x5, 0x82}, {0x6, &(0x7f00000001c0)=0x8a, 0x82}, {0x204000000000, &(0x7f0000000200)=0x6, 0x2}, {0x56b2, &(0x7f0000000240)=0x101, 0x2}, {0x8, &(0x7f0000000280)=0x5, 0x9c3bf4fbce4156f}, {0x5, &(0x7f00000002c0)=0xdc, 0x2}, {0x8, &(0x7f0000000300)=0xf, 0x82}, {0x9, &(0x7f0000000340)}, {0x1c00000, &(0x7f0000000380)=0x3, 0x82}, {0x9640, &(0x7f00000003c0)=0x2, 0x2}, {0x8000000000000001, &(0x7f0000000400)=0x2b9, 0x2}, {0x4, &(0x7f0000000440)=0x8, 0x82}, {0x1, &(0x7f0000000480)=0x9, 0x82}, {0x10, &(0x7f00000004c0)=0x6, 0x2}, {0x5, &(0x7f0000000500)=0x8, 0x82}, {0x9, &(0x7f0000000540)=0x9, 0x2}, {0x101, 0xfffffffffffffffe, 0x82}, {0x5, &(0x7f0000000580)=0x6, 0x106}, {0xffffffffffff0000, &(0x7f00000005c0)=0x7, 0x82}, {0x1, &(0x7f0000000600)=0x3, 0x82}, {0x9, &(0x7f0000000640)=0xfffffffffffffffa, 0x82}, {0xff, &(0x7f0000000680)=0x7fffffffffffffff, 0x2}, {0x400, &(0x7f00000006c0)=0x6, 0x2}, {0xfffffffffffffffc, &(0x7f0000000700)=0xfd, 0x82}, {0x7, &(0x7f0000000740)=0x6, 0x82}, {0xc, &(0x7f0000000780)=0x7, 0x2}, {0x9, &(0x7f00000007c0)=0x1, 0x82}, {0xb639930, &(0x7f0000000800)=0x1ff, 0x5d432fba2a57894c}, {0x7339, &(0x7f0000000840)=0x8788, 0x82}, {0x491, &(0x7f0000000880)=0x2, 0x2}, {0x3, &(0x7f00000008c0)=0x80, 0x2}, {0x8000000000000000, &(0x7f0000000900)=0x2, 0x2}, {0x2, &(0x7f0000000940)=0x9, 0x2}, {0xffffffff, &(0x7f0000000980)=0x1ff00000000, 0x82}, {0xd8, &(0x7f00000009c0)=0x1, 0x2}, {0x1, &(0x7f0000000a00)=0x2, 0x82}, {0x9, &(0x7f0000000a40)=0x7, 0x82}, {0x9, &(0x7f0000000a80)=0x10000, 0x2}, {0x6, &(0x7f0000000ac0)=0x9, 0x82}, {0xfffffffffffffff7, &(0x7f0000000b00)=0x2, 0x82}, {0x5, &(0x7f0000000b40)=0xdef, 0x82}, {0xfffffffffffeffff, &(0x7f0000000b80)=0x9, 0x2}, {0x4, &(0x7f0000000bc0)=0xfffffffffffffffc, 0x2}, {0x1000, &(0x7f0000000c00)=0x6, 0x82}, {0x9, &(0x7f0000000c40)=0xf, 0x82}, {0x2, &(0x7f0000000c80)=0x4, 0x82}, {0x2, &(0x7f0000000cc0)=0xa3, 0x2}, {0x7, &(0x7f0000000d00)=0x3, 0x82}, {0x1, &(0x7f0000000d40)=0xfffffffffffffffe, 0x82}, {0x4, &(0x7f0000000d80)=0x906, 0x82}, {0xd695, &(0x7f0000000dc0)=0x1000, 0x2}, {0x1, &(0x7f0000000e00)=0x3, 0x2}, {0x3, &(0x7f0000000e40)=0xfffffffffffffff7, 0x82}, {0x6, &(0x7f0000000e80)=0x5, 0x2}, {0x1, &(0x7f0000000ec0)=0x1, 0x82}, {0x9, &(0x7f0000000f00)=0x7fffffffffffffff, 0x2}, {0x8a3, &(0x7f0000000f40)=0x8, 0x82}, {0x5, &(0x7f0000000f80)=0x80000000, 0x82}, {0x8000000000000001, &(0x7f0000000fc0)=0x5c, 0x82}, {0x4, &(0x7f0000001000)=0x7, 0x80}, {0xfffffffffffffff8, &(0x7f0000001040)=0x7, 0x2}, {0x58, &(0x7f0000001080), 0x2}, {0x5, &(0x7f00000010c0)=0x2, 0x82}, {0xe1, &(0x7f0000001100)=0x7, 0x82}, {0x33a, &(0x7f0000001140)=0x8001, 0x82}, {0xa, &(0x7f0000001180)=0x9, 0x2}, {0xa, &(0x7f00000011c0)=0x6}, {0x6, &(0x7f0000001200)=0xfffffffffffff800, 0x2}, {0x3, &(0x7f0000001240)=0x6176816a, 0x82}, {0x2f, &(0x7f0000001280)=0x10, 0x82}, {0x7f, &(0x7f00000012c0)=0xfffffffffffffff7, 0x82}, {0xe12, &(0x7f0000001300), 0x2}, {0x10, &(0x7f0000001340)=0xfff, 0x2}, {0x5, &(0x7f0000001380)=0x7, 0xc3}, {0x2, &(0x7f00000013c0)=0x8, 0x2}, {0x3ff, &(0x7f0000001400)=0x10000, 0x2}, {0x1, &(0x7f0000001440)=0x5, 0x82}, {0x1, &(0x7f0000001480), 0x2}, {0x2, &(0x7f00000014c0)=0xfffffffffffffff3, 0x2}, {0x4, &(0x7f0000001500)=0x1, 0x82}, {0x2, &(0x7f0000001540)=0x100000001, 0x2}, {0x4, &(0x7f0000001580)=0x5, 0x82}, {0x2, &(0x7f00000015c0)=0xa, 0x2}, {0x40, &(0x7f0000001600)=0x3, 0x2}, {0x2, &(0x7f0000001640)=0x7, 0x82}, {0x7, &(0x7f0000001680)=0xc68, 0x82}, {0x3ff, &(0x7f00000016c0)=0x4, 0x82}, {0x4, &(0x7f0000001700), 0x82}, {0x3203, &(0x7f0000001740)=0x5, 0x2}, {0x75, &(0x7f0000001780)=0x2}, {0x7fffffffffffffff, &(0x7f00000017c0)=0x8, 0x82}, {0x8, &(0x7f0000001800)=0xfff, 0x82}, {0x9, &(0x7f0000001840)=0x80000001}, {0x3, &(0x7f0000001880)=0x85, 0x82}, {0xe, &(0x7f00000018c0), 0x82}, {0x2, &(0x7f0000001900)=0x5, 0x2}, {0x1, &(0x7f0000001940)=0x8001, 0x82}, {0x4, &(0x7f0000001980)=0x2, 0x2}, {0x1, &(0x7f00000019c0)=0x55, 0x2}, {0x7fffffffffffffff, &(0x7f0000001a00), 0x82}, {0x4, &(0x7f0000001a40)=0x9, 0x82}, {0x7, &(0x7f0000001a80)=0x2, 0x82}, {0x3, &(0x7f0000001ac0)=0x2, 0x2}, {0xfffffffffffffff9, &(0x7f0000001b00)=0x3, 0x2}, {0x0, &(0x7f0000001b40)=0x5, 0x2}, {0x4, &(0x7f0000001b80)=0x800, 0x82}, {0xfffffffffffffff9, &(0x7f0000001bc0)=0x9, 0x2}, {0x0, &(0x7f0000001c00)=0x80000000, 0x2}, {0x1ec3ba62, &(0x7f0000001c40)=0x7, 0x2}, {0x8, &(0x7f0000001c80)=0xde69, 0x82}, {0x3, &(0x7f0000001cc0)=0x2, 0x2}, {0x4, &(0x7f0000001d00)=0x1, 0x2}, {0x9, &(0x7f0000001d40)=0x3, 0x2}, {0x5, &(0x7f0000001d80)=0x7, 0x2}, {0x4000000, &(0x7f0000001dc0)=0xd8, 0x2}, {0x672e, &(0x7f0000001e00)=0x1, 0x2}], 0x79, 0x0, &(0x7f00000029c0), 0x1) (async)
r0 = getpgrp(0x0)
tkill(r0, 0x16) (async)
pselect6(0x40, &(0x7f0000002a00)={0x0, 0x9, 0x0, 0x2, 0x73dc0d4f, 0x10000, 0x8000000000000001}, &(0x7f0000002a40)={0x4, 0x6b, 0x4, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x7}, &(0x7f0000002a80)={0x5, 0xfffffffffffffffd, 0xfffffffffffff800, 0x6, 0x100000001, 0x9, 0x186, 0x1}, &(0x7f0000002ac0)={0x77359400}, &(0x7f0000002b40)={&(0x7f0000002b00)={[0x4]}, 0x8}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002b80)=0x1) (async)
r1 = timerfd_create(0x2, 0x100000)
timerfd_gettime(r1, &(0x7f0000002bc0))
futex_waitv(&(0x7f0000004480)=[{0x8000000000000000, &(0x7f0000002c00)=0x4, 0x81}, {0x519d31c4, &(0x7f0000002c40)=0x100000000, 0x82}, {0xa14e, &(0x7f0000002c80)=0x26, 0x2}, {0x6, &(0x7f0000002cc0)=0x4, 0x2}, {0x7f, &(0x7f0000002d00)=0xffff, 0x82}, {0x1, &(0x7f0000002d40)=0x4, 0x82}, {0xd94, &(0x7f0000002d80)=0xfffffffffffffff8, 0x82}, {0x2, &(0x7f0000002dc0)=0x25ee8447, 0x2}, {0x0, &(0x7f0000002e00), 0x2}, {0xfffffffffffffffa, &(0x7f0000002e40)=0x9, 0x2}, {0x0, &(0x7f0000002e80)=0x8, 0x82}, {0x7fffffff, &(0x7f0000002ec0)=0x6, 0x82}, {0x3ff, &(0x7f0000002f00)=0x2, 0x2}, {0x100000000, &(0x7f0000002f40)=0x1, 0x2}, {0x1, &(0x7f0000002f80)=0x7fff, 0x2}, {0x1, &(0x7f0000002fc0)=0x6, 0x82}, {0x6, &(0x7f0000003000)=0x2, 0x82}, {0x40, &(0x7f0000003040)=0x8, 0x2}, {0x6, &(0x7f0000003080)=0x1, 0x82}, {0x3, &(0x7f00000030c0)=0x40, 0x2}, {0x4, &(0x7f0000003100)=0x3, 0x2}, {0x8, &(0x7f0000003140)=0x8, 0x82}, {0xcf, &(0x7f0000003180)=0x1000, 0x2}, {0x10000, &(0x7f00000031c0)=0x8f, 0x2}, {0xf63a, &(0x7f0000003200)=0x6}, {0x0, &(0x7f0000003240), 0x82}, {0x5e8, &(0x7f0000003280)=0x3ff, 0x2}, {0x17a, &(0x7f00000032c0)=0x2, 0x2}, {0x1, &(0x7f0000003300)=0x2, 0x82}, {0xe801, &(0x7f0000003340)=0x6, 0x82}, {0x8, &(0x7f0000003380)=0x8000, 0x82}, {0x9, &(0x7f00000033c0), 0x82}, {0x5, &(0x7f0000003400)=0x36, 0x2}, {0x5, &(0x7f0000003440)=0xf7, 0x2}, {0x2, &(0x7f0000003480)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f00000034c0)=0xde, 0x2}, {0x7fff, &(0x7f0000003500), 0x82}, {0x9, &(0x7f0000003540)=0x1, 0x2}, {0xf43, &(0x7f0000003580)=0x6, 0x2}, {0x4, &(0x7f00000035c0)=0xfff, 0x82}, {0x9, &(0x7f0000003600)=0x384610da, 0x2}, {0x10, &(0x7f0000003640)=0x6c90, 0x82}, {0x80, &(0x7f0000003680)=0x10000, 0x82}, {0x1ff, &(0x7f00000036c0)=0x3, 0x82}, {0x4, &(0x7f0000003700)=0xa2, 0x82}, {0x9, &(0x7f0000003740)=0xa, 0x2}, {0x3, &(0x7f0000003780)=0x79d5b65f, 0x82}, {0xa5, &(0x7f00000037c0)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f0000003800)=0x8, 0x82}, {0x3, &(0x7f0000003840)=0xb2, 0x82}, {0x6, &(0x7f0000003880)=0x5, 0x2}, {0x7fffffffffffffff, &(0x7f00000038c0)=0x4, 0x82}, {0x10, &(0x7f0000003900)=0x6, 0x2}, {0xa148, &(0x7f0000003940)=0x10001, 0x82}, {0x80000000, &(0x7f0000003980)=0x4, 0x82}, {0x1, &(0x7f00000039c0)}, {0x40, &(0x7f0000003a00)=0xb, 0x82}, {0x6, &(0x7f0000003a40)=0x4}, {0x100000001, &(0x7f0000003a80)=0x1, 0x82}, {0x6, &(0x7f0000003ac0)=0xbdd, 0x2}, {0x6, &(0x7f0000003b00)=0x8, 0x82}, {0x6, &(0x7f0000003b40)=0x4, 0x2}, {0xfffffffffffff186, &(0x7f0000003b80)=0x6, 0x82}, {0x0, &(0x7f0000003bc0)=0x5, 0x82}, {0x1, &(0x7f0000003c00)=0x6, 0x82}, {0x80000000, &(0x7f0000003c40)=0x54e, 0x2}, {0x4, &(0x7f0000003c80)=0x7, 0x82}, {0x100000001, &(0x7f0000003cc0), 0x2}, {0x587, &(0x7f0000003d00)=0xffffffff, 0x184}, {0x121, &(0x7f0000003d40)=0x7ff, 0x2}, {0x8000000000000001, &(0x7f0000003d80)=0x3, 0x80}, {0x53, &(0x7f0000003dc0)=0x7f, 0x2}, {0x1, &(0x7f0000003e00)=0x9, 0x82}, {0x6, &(0x7f0000003e40)=0x5, 0x2}, {0x1, &(0x7f0000003e80)=0x855f, 0x82}, {0x9, &(0x7f0000003ec0)=0x89b2, 0x7acbd0d2cba17a3b}, {0x0, &(0x7f0000003f00)=0x27fe, 0x2}, {0x10001, &(0x7f0000003f40)=0x1, 0x82}, {0xfffffffffffffff8, &(0x7f0000003f80), 0x82}, {0x3, &(0x7f0000003fc0)=0xfffffffffffffc01, 0x2}, {0x5, &(0x7f0000004000)=0x47d, 0x82}, {0x1, &(0x7f0000004040)=0x4800000000000, 0x82}, {0x460c7f, &(0x7f0000004080)=0xa6, 0x82}, {0x1, &(0x7f00000040c0)=0x200, 0x80}, {0xa, &(0x7f0000004100)=0x8, 0x2}, {0xc1, &(0x7f0000004140)=0x7, 0x82}, {0x0, &(0x7f0000004180)=0x4, 0x82}, {0x1, &(0x7f00000041c0)=0xfa6a, 0x82}, {0xb01, &(0x7f0000004200)=0x8, 0x82}, {0x8, &(0x7f0000004240), 0x82}, {0x5, &(0x7f0000004280)=0x1, 0x82}, {0xffffffffffffff5b, &(0x7f00000042c0)=0xfffffffffffffffe, 0x82}, {0x3, &(0x7f0000004300)=0xfffffffffffff2ee, 0x2}, {0xdd71, &(0x7f0000004340)=0x1, 0x82}, {0x5, &(0x7f0000004380)=0x4, 0x82}, {0x9, &(0x7f00000043c0)=0x1, 0x82}, {0x0, &(0x7f0000004400)=0x7, 0x82}, {0x3, &(0x7f0000004440)=0x1, 0x82}], 0x62, 0x0, &(0x7f0000004dc0)={0x0, 0x3938700}, 0x0) (async)
futex(&(0x7f0000004e00), 0xb, 0x0, &(0x7f0000004e40)={0x77359400}, &(0x7f0000004e80), 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000053c0)={0x0, &(0x7f0000004ec0)=[@cpuid={0x2, 0x18, {0x8000, 0x8}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x48, {"0f3067470fc76f71f2400f09410f01cb4302b0b670298d8fc93899e6c462dd092c3c64f3470fe64e4b0f20e035000002000f22e00f1aee"}}, @code={0x1, 0x6f, {"c4633979083648b84e000000000000000f23c00f21f835000002000f23f8c4217d75bb00000000c4e1e173f169b8010000000f01d966ba6100b005eeb8010000000f01d98f6978c39500000000b9800000c00f3235008000000f30f71cd2"}}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @uexit={0x0, 0x18, 0x8001}, @uexit={0x0, 0x18, 0x10000}, @cpuid={0x2, 0x18, {0x10, 0x1}}, @code={0x1, 0x7a, {"2e66440f00d3b8010000000f01c1430fc76d0066b881000f00d8c4a17a6f550dc4c2599f7be0f6af5255000066baf80cb8947fb98fef66bafc0cb800180000efc74424000b000000c744240200780000c7442406000000000f011424440f20c03508000000440f22c0"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x60, {"26fff00f08410f92b762f5ffff470fc75900f30fbcf4c744240036000000c744240218000000ff2c24470f79ba9d000000c4218df643ab66baf80cb8cf6ec889ef66bafc0cb0caee66bad004b00bee"}}, @cpuid={0x2, 0x18, {0x2, 0xea}}, @code={0x1, 0x7c, {"660f768b47000000c744240034010000c744240246f7d6c1ff2c2466ba4300ed66ba210066b8570066ef650f212466baf80cb8e963c18bef66bafc0cb017eec7442400bf000000c744240200700000ff1c2466b83a010f00d866470f383e72a62e66410f38818602000000"}}, @code={0x1, 0x68, {"66baf80cb80eb87e86ef66bafc0c66b8550066efb9800000c00f3235000800000f300f20c035080000000f22c026f247ad66ba2000b8cda7bb21efb9fb0b00000f3266410fc7735666ba410066ed0fbe85006000006690"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x581}, @code={0x1, 0x59, {"0f20e035080000000f22e0f30fbd78eaf2f30f08450f005cf600470fc73766460f09d3fa66baf80cb83c288f88ef66bafc0cb800000000ef66bad004ed2e66400f38812547000000"}}, @code={0x1, 0x69, {"b9800000c00f3235000100000f306464f2f04531abafa000000f01c80f20e035000020000f22e00fae6258b8010000000f01c1b9800000c00f3235010000000f30c4016def3f440f20c0350c000000440f22c0660f005bfa"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @code={0x1, 0x56, {"64260f760066baf80cb864cd618bef66bafc0ced0f01c2430f0091902400002e420f08400f01cbb989090000b800000000ba000000000f30b9900800000f32650f060f2323"}}], 0x4dd})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005480)=[@textreal={0x8, &(0x7f0000005400)="ba4300b002ee0f0f30bf0faeada80066b9800000c00f326635000400000f30f4baf80c66b8fe449c8b66efbafc0ced0f350f208566b97e02000066b82710000066ba000000000f300f01cf", 0x4b}], 0x1, 0x64, &(0x7f00000054c0), 0x0) (async)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000005500)={0xaa, 0x2})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005540), 0x10900, 0x0) (async)
pselect6(0x40, &(0x7f0000005580)={0xffff, 0x456f, 0xb7, 0x2, 0x8, 0x1ff, 0x996, 0xff}, &(0x7f00000055c0)={0x6, 0x4, 0x2, 0x1, 0x0, 0x6, 0xd0, 0x4}, &(0x7f0000005600)={0x8, 0x80, 0xfff, 0xda2, 0x9, 0x0, 0x0, 0x7}, &(0x7f0000005640)={0x77359400}, &(0x7f00000056c0)={&(0x7f0000005680)={[0x9]}, 0x8}) (async)
pselect6(0x40, &(0x7f0000005700)={0x9, 0x1, 0x7fff, 0xfffffffffffffff7, 0x100000000, 0x6, 0x7}, &(0x7f0000005740)={0x2756, 0x6, 0x4, 0x1, 0x2930000000000, 0x8, 0x80000001, 0xc2}, &(0x7f0000005780)={0x5, 0x7fff, 0xffff, 0x3, 0x6, 0x2, 0x4, 0x81}, &(0x7f00000057c0)={0x77359400}, &(0x7f0000005840)={&(0x7f0000005800)={[0xff]}, 0x8})
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000005880), 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000008ac0)=[{{&(0x7f00000058c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005940)=""/223, 0xdf}, {&(0x7f0000005a40)=""/31, 0x1f}], 0x2}}, {{&(0x7f0000005ac0), 0x6e, &(0x7f0000006080)=[{&(0x7f0000005b40)=""/39, 0x27}, {&(0x7f0000005b80)=""/246, 0xf6}, {&(0x7f0000005c80)=""/5, 0x5}, {&(0x7f0000005cc0)=""/142, 0x8e}, {&(0x7f0000005d80)=""/215, 0xd7}, {&(0x7f0000005e80)=""/96, 0x60}, {&(0x7f0000005f00)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/29, 0x1d}, {&(0x7f0000006000)=""/55, 0x37}, {&(0x7f0000006040)}], 0xa}}, {{&(0x7f0000006140)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f00000061c0)=""/173, 0xad}, {&(0x7f0000006280)=""/165, 0xa5}, {&(0x7f0000006340)=""/138, 0x8a}, {&(0x7f0000006400)=""/242, 0xf2}, {&(0x7f0000006500)=""/165, 0xa5}, {&(0x7f00000065c0)=""/186, 0xba}, {&(0x7f0000006680)=""/201, 0xc9}], 0x7, &(0x7f0000006800)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}], 0x90}}, {{&(0x7f00000068c0), 0x6e, &(0x7f0000008a40)=[{&(0x7f0000006940)=""/4096, 0x1000}, {&(0x7f0000007940)=""/4096, 0x1000}, {&(0x7f0000008940)=""/220, 0xdc}], 0x3, &(0x7f0000008a80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x4, 0x400000a1, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r9 = signalfd(r8, &(0x7f0000008bc0)={[0x1]}, 0x8)
recvfrom$inet(r9, &(0x7f0000008c00)=""/245, 0xf5, 0x0, &(0x7f0000008d00)={0x2, 0x4e23, @multicast2}, 0x10)
mknod$loop(&(0x7f0000008d40)='./file0\x00', 0x8, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000008d80)={0x80002004}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000008dc0)) (async)
rt_sigprocmask(0x2, &(0x7f0000008e00)={[0xff]}, 0x0, 0x8) (async)
ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f0000008e40)={[0x7ff]}) (async)
ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000008e80)) (async)
tkill(0x0, 0x3b)

3m3.306701823s ago: executing program 0 (id=169):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"})
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000011000000000000001400000000000000290000000b0000003a50c8d48671514888b078e52a4b430000000600000000"], 0x30}}], 0x1, 0x40000)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m3.301144343s ago: executing program 0 (id=171):
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'bridge0\x00', {0x3}, 0x2c}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delsa={0x7c, 0x11, 0x200, 0x70bd26, 0x25dfdbfd, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2, 0xfe}, [@user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x2, 0x5, 0xf}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40004000) (async, rerun: 32)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @empty}, {0x1}, 0x0, {0x2, 0x4e23, @empty}, 'rose0\x00'}) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x6, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x7}, 0x4) (async)
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000400)={'sit0\x00', 0x3})
ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000440)=""/72) (async)
madvise(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0xb)
r4 = fsmount(r3, 0x1, 0xf0)
copy_file_range(r4, &(0x7f00000004c0)=0x2, r0, &(0x7f0000000500)=0x40, 0x39d, 0x0)
getgroups(0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee00, <r5=>0xee00]) (async)
r6 = getegid() (async, rerun: 64)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, <r7=>0x0}, &(0x7f00000005c0)=0xc) (rerun: 64)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000640)=0xc) (async)
statx(r4, &(0x7f0000000680)='./file0\x00', 0x2000, 0x2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x6, &(0x7f00000007c0)=[r5, r6, r7, r8, 0xee01, r9]) (async)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x20d00, 0x28) (async)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_proto_private(r10, 0x89e7, &(0x7f0000000840)="2972c3890c330185bca381c6") (async)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r4)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r11, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x70}}, 0x80) (async)
r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', <r13=>0x0, 0x29, 0x1, 0x6, 0xe2c, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7887, 0x8, 0x0, 0xffff}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', r13, 0x4, 0x9, 0x4, 0x100, 0x2, @remote, @loopback, 0x1, 0x8000, 0xfffffff8, 0x4}}) (async, rerun: 32)
dup3(r4, 0xffffffffffffffff, 0x80000) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c00)=@getsadinfo={0x370, 0x23, 0x800, 0x70bd2d, 0x25dfdbfe, 0x0, [@algo_comp={0x102, 0x3, {{'lzs\x00'}, 0x5d0, "3bdf1dff4d0ba3b98fd3a61bcfcf23c6e2282fdc288ae5ad4b0bb36cbfe375ed85b28a95aa2a1377d9e8b41ef7ac0637d93f63934cf4e58e5a9260776edbc845c70491b42ed8619da8d74b431f394562944ed744f27642d72c694410b3b1818d81d662bed42efcb225fdf51352c0babe37d898a26a7a0575181b1b2fb2e13ed09f49077cbeca3ae47b3e419aa9757adc3528dfa41e35835cfb96f7edeb25eb15961883d5c658536073b5c59898bafce617972143c7a7d701ef1f"}}, @lifetime_val={0x24, 0x9, {0x80000001, 0x0, 0x5, 0xc}}, @sec_ctx={0xaa, 0x8, {0xa6, 0x8, 0x1, 0x6, 0x9e, "ff226415fb7687cb493b38338a446f97e62b47f39323b25e6db64239c94ae56d60aa2e6238a4de6dc5295207f6437b2c3306f2d91f804cf2da1c7d62a7419a8ef900934d50d991e81cc2bca02704b802ac0bd5af93e37651536bcb17764b91cef97c0c9b9787f3415d002413d40ea46ad7edd2f01fee995f1fefe025eede7509a1d46b4909968e2987145bcab0d9977f274e514626c12f4ec3ff160df199"}}, @tfcpad={0x8, 0x16, 0x6}, @proto={0x5, 0x19, 0x32}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x70bd27, 0x2, [0x507, 0x1000, 0xf4, 0x6, 0x7, 0x2, 0x1000000, 0x4, 0x2, 0x61f]}}, @replay_thresh={0x8, 0xb, 0x101}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd2d, 0x70bd2a, 0x70bd2d, 0x5, [0x5, 0x6]}}, @algo_crypt={0x105, 0x2, {{'cts-cbc-aes-neon\x00'}, 0x5e8, "067973b362c04288c9c3d1caf7b5c0f7dd8977048be95f8dfc1d32d3aafa74e4284906b5a3981858c259d72ca431c565de456e080c825fa6b70bd13e2a9252eef395fcf4bd023bebca034872937c3c7592c7c78a944f8505d9d9e6f150d4a727acb335059ea07be57bc990357ae6f917d1869f31a8cd4f12503676c9973cfd9213bdf7000896995e2736066edb082053328a95d3678f2cf1c23a4031d61ce2ca1b2c25e0b5d2356b62848fdc6618dcf7e09b8f92b2805e766f3c604cba"}}]}, 0x370}, 0x1, 0x0, 0x0, 0x4800}, 0x200404c4)

3m3.280345824s ago: executing program 0 (id=172):
creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
unshare(0x22020600)
lseek(r0, 0x10001, 0x0)
creat(0x0, 0x0) (async)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
unshare(0x22020600) (async)
lseek(r0, 0x10001, 0x0) (async)

3m3.220695715s ago: executing program 0 (id=173):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

3m3.054791757s ago: executing program 0 (id=177):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5f"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x1c, 0x0, &(0x7f0000000dc0)=[@register_looper, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0})

3m2.998731978s ago: executing program 32 (id=177):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x1c, 0x0, &(0x7f0000000dc0)=[@register_looper, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0})

2m28.02064819s ago: executing program 2 (id=728):
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x3)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x3)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x3)
prctl$PR_SET_FPEMU(0xa, 0x5)
prctl$PR_SET_FPEMU(0xa, 0x2)
prctl$PR_SET_FPEMU(0xa, 0x3)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x1)
prctl$PR_SET_FPEMU(0xa, 0x6)
prctl$PR_SET_FPEMU(0xa, 0x7)

2m27.9931007s ago: executing program 2 (id=730):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x1, 0x1e}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9343"], 0xfe33)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)

2m27.908570431s ago: executing program 2 (id=731):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) (async)
r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) (async)
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80})
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) (async)
r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x75b, 0x100000001, 0x3c0000, 0x1, 0x3, 0x0, 0x6}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fstat(r1, &(0x7f00000005c0))
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[{0x3, 0x6, 0xf8, 0x5d0aebcf}]}, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYBLOB="010029bd700000000000070000000c0099000300000055000000e41bac53687de604fd0f9d0700eda4226ad0367cc402d682ce32ccf5c620bdceb0010bd7f63ced724055ac32a6ff1c0cbd927f815cdc6fef5aa8ffea21848ab8deb0f0ae0c5f5ee3ef1070927eb027f47fb2c9ecd437c8d24d3f8f51b62817f6ff29142b947c8d868d207f08f7ff9a5672d29c959778b97b6455a2191cd2306d6fe6257f0da3ff3417ef94c17a8b6dd1cb3e25d5b433f021abfc3d392b2e24469335aa82a1c1f906c7272e31c4a294253b724f2955f09f80ce885f4d859207cd0f213b13"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
socket$packet(0x11, 0x3, 0x300) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0) (async)
setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10)
r12 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4)
open(&(0x7f0000000500)='./file0\x00', 0x46942, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

2m27.735869854s ago: executing program 2 (id=733):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000100)=""/89, &(0x7f0000000080)=0x59)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2}, 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
openat$ashmem(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10)
rt_sigaction(0x40000022, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m27.222960292s ago: executing program 2 (id=738):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r2 = syz_pidfd_open(0x0, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

2m27.178503922s ago: executing program 2 (id=739):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9343"], 0xfe33)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)

2m12.130254211s ago: executing program 33 (id=739):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9343"], 0xfe33)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)

50.376433054s ago: executing program 1 (id=1871):
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x4)
ppoll(&(0x7f00000000c0)=[{r2, 0x2093}], 0x1, 0x0, 0x0, 0x0)
shutdown(r2, 0x0)
copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

50.243578726s ago: executing program 1 (id=1873):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_clone(0x8000000, &(0x7f0000000280)="61e991437da725dfb1ee082762be69f8ed5ebc9a7337b56d7a9458fe3446e4af17d0340049b808179aafc289f073901479f12b5bbed10275432e428b940b2d189b5b78bbe075b9eed7f48eccecd74fc5df7302520f09f1be63de7fe92a1defcfcad253282f50861ad48115781bf64ff49a51", 0x72, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="559fd5cad64ae9e4de2a73704948fab10ca961dfba5201b65416af3351d74a")
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r3)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
sendfile(r1, r1, 0x0, 0x7ffff000)

49.277331721s ago: executing program 1 (id=1882):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x12da82, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)

49.139940923s ago: executing program 1 (id=1883):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]})
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, 0x0, &(0x7f0000000100))
futex_waitv(&(0x7f000000b140)=[{0xfe45, &(0x7f000000a780)=0x2, 0x82}], 0x1, 0x0, &(0x7f000000b500)={0x77359400}, 0x1)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207000000ab8d932a9195"], 0x0}, 0x0)
quotactl$Q_QUOTAOFF(0x0, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (async)
sendto$packet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, 0x0, &(0x7f0000000100)) (async)
futex_waitv(&(0x7f000000b140)=[{0xfe45, &(0x7f000000a780)=0x2, 0x82}], 0x1, 0x0, &(0x7f000000b500)={0x77359400}, 0x1) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207000000ab8d932a9195"], 0x0}, 0x0) (async)
quotactl$Q_QUOTAOFF(0x0, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0) (async)

46.118114949s ago: executing program 1 (id=1901):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x5, 0x5fb, "61dce6241840"}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
openat$kvm(0xffffffffffffff9c, 0x0, 0x400200, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETS2(r4, 0x802c542a, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

45.226365842s ago: executing program 1 (id=1906):
socket$xdp(0x2c, 0x3, 0x0)
r0 = syz_clone(0x4000a000, &(0x7f00000001c0)="165937bb2207242be1c184d302e1e40e845cf520cfff84de93ab243a6ed8100a44a4124a853dcc56f236fe99e45089d8d258403b998386ffbf96f5b59c87c829423d92c761009bc43aecb8259a0d6e6b116ab2679f4f13f15205fcb01553ea4552dae99e9c6ff4458e3fa756", 0x6c, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0)="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")
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)=<r1=>0x0)
r2 = gettid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000015c0)={0x0, <r3=>0x0})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000001680)={0x4000800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f00000003c0)=""/139, &(0x7f0000000540)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff00fbffff07003950323030ff0f75"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r7, &(0x7f0000001700)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x7}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0xfffffffb}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0)
lseek(r8, 0x10001, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
syz_clone(0x4000a000, &(0x7f00000001c0)="165937bb2207242be1c184d302e1e40e845cf520cfff84de93ab243a6ed8100a44a4124a853dcc56f236fe99e45089d8d258403b998386ffbf96f5b59c87c829423d92c761009bc43aecb8259a0d6e6b116ab2679f4f13f15205fcb01553ea4552dae99e9c6ff4458e3fa756", 0x6c, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0)="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") (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)) (async)
gettid() (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000015c0)) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
syz_clone3(&(0x7f0000001680)={0x4000800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f00000003c0)=""/139, &(0x7f0000000540)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000240), 0x0) (async)
write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff00fbffff07003950323030ff0f75"], 0x15) (async)
dup(r6) (async)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_INIT(r7, &(0x7f0000001700)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x7}}, 0x50) (async)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0xfffffffb}}, 0x30) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0) (async)
lseek(r8, 0x10001, 0x0) (async)

30.012625474s ago: executing program 34 (id=1906):
socket$xdp(0x2c, 0x3, 0x0)
r0 = syz_clone(0x4000a000, &(0x7f00000001c0)="165937bb2207242be1c184d302e1e40e845cf520cfff84de93ab243a6ed8100a44a4124a853dcc56f236fe99e45089d8d258403b998386ffbf96f5b59c87c829423d92c761009bc43aecb8259a0d6e6b116ab2679f4f13f15205fcb01553ea4552dae99e9c6ff4458e3fa756", 0x6c, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0)="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")
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)=<r1=>0x0)
r2 = gettid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000015c0)={0x0, <r3=>0x0})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000001680)={0x4000800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f00000003c0)=""/139, &(0x7f0000000540)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff00fbffff07003950323030ff0f75"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r7, &(0x7f0000001700)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x7}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0xfffffffb}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0)
lseek(r8, 0x10001, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
syz_clone(0x4000a000, &(0x7f00000001c0)="165937bb2207242be1c184d302e1e40e845cf520cfff84de93ab243a6ed8100a44a4124a853dcc56f236fe99e45089d8d258403b998386ffbf96f5b59c87c829423d92c761009bc43aecb8259a0d6e6b116ab2679f4f13f15205fcb01553ea4552dae99e9c6ff4458e3fa756", 0x6c, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0)="b2b665d637a8f14a95bc43a46f53c2492286431a8e7b805924b14e4f498e252f42f9c4cdb6f538aac19f669ba514b5dfd5c3d2ec79422d5fb3a1987d4a8f48e7af5aabfbb2eb45244e234d18bc4bfee097b10c84961dba9dee388dacb9bf515750809092c32b1d9fbccfeb339391402e76eace187d7c006b6c4b7c142d3145e9fc5b2ff614f4f24c765d14105a10819e62bff44c321e013dfae0247cf71c04c8a2a4275b66d834d3633a364dcd6b2322408edb4b100df27fb55a22c66a0bec702cf2ed6afd4dea0805b07ddd72b092600074f6bf24bd7a56e42dddea3dc22cffc907019fee00f6628ceef916067aee5c4e5ee543c81a2735fb679cc1bf80b6f15d9f354840840766a97aee4f357cbda25a11e176d3a32120aebbfded7f72724317d9ad8fd00eccfe2f22c01fb30e37cc33d67c72e9ba57bca3c90c7a947a5acc7c1dcf5abbab0f27d8ea239ab819f91f100e67ea625b545f909a4887ec1ee8056622eed3e7e44e28ddec13053f439792b87daeda80423770e2677026020193901a5eed77162411b2629a9a666e282214b7da9b8e543f107c885f1c7a217243860a49101aef1b305a09221442218f29ce50eab46e40b4b6c283493cf76eb2fe6c3215c8d80e224490cda841569ec168deae2f4b4219bbec5eff912543efb3c657f0becc68a15e2bee8ddd27c9b118f3f66be060395b11081a8e6daf7eea095cd36bd3bbdb639819ac148e13c0fb2d59c6fca2444793c6c2d3bd9cb0ede919cc477a2d6a21b16c27a7206d52f2a21bfa3b6d59163f57310f68c3690f79454e1ba63845412ed9890a6aadf6cf092baace4512cef8b8f9571b046d6629caf042e3acd576e59e9253a5ea1cd43fb8daaf670b8ba93d7c4e673e73d92c3c5c946573d98b7d4a64d0b8ecf9104902163bb7e16854ec4a67b94483c553fa18e4f5b610d16f62d64e7a99645f9fd578d9c62053da3716cda638aab91e9396cece0173e77a4fe17c779a5d5373926e7cd088aee07456002e45550e8db1db49bd6e87e4ab643ade2560370b0863bb13a2805470512816e40bfe86a29c25cfb2591fe5b5e1969a933cc7118fe46b55c4bb7ce90e2c9c61461ecce95617cf0636547dcce89e85b8ea0c42957dcec7833b79239d7c79ccbb70ec8ede2cc20cd5fd5890b4cf1bc3426ff905404d949b56bd8015f433aa6a051d890a4900bf05d24ab78e89e19c2be44816393d00bec57e5bb65e46aee53ebeb6ecb942b37454a61ac1be2a4cf37fe439390d8b1a666e959a4bf06acb32a7b008ef341f277590c31dc4969196845d8623460613c96c5cb07694d0feefd621e0d64c39a9cff9f5f9e75d65f7af26bafd26eab48b87d2970ba69b0e1198059ff7fdbbfcb9d1cd36da02957fd21b3ffad34477456967c1f04b75b02c97a9f9623fd56d7aa0488790c3d78ec4f297f65c7126fffa1ab6fda548e3f47baf0f8331804e027c7bc75268b492bb292fe87a5eb2291f2cee2de6e578478df33f34c74db5042d25fd82dbcd59a97e68d764d3698b88d98ded0a1b4fe9fcc609a9a8c586a4a3a8541648672209053c6b1f5107163dc0f9eca363acd394e50bb3bce2a899cd288faa00ffd47b612f489f7813f5606b28d89e25695a94c1f80c63da258860d8fa78903f9b822ad7a514903e86726aecf236c9bd299123869226ef415fdb972b7edc3f5e2ecdd9c2d9408513e29cab97c675de8c4fb916c938a037145fbab1633aa3381ccafaacc3480330738572911d42628cb4a6cade80dc18d137b38493e61eab3189ed2d14ea635aa5e2a87b69c41524e81405a726663cb055e546722e723fcd37a4d3d5903c16b1f5ee9689d312fcc69cd9cf3be4d6316244d80f5dd15fe06f743b7cdec22f35b614d8ea99012bdb65653005e596e1fb29d2d9288cea4e968660308930eb02421cacbe8a3e5f1ae06ab9e3fbb4bde7c48225794bed685c5c8ce242bb32b309e963d79c5b686183d96b2527cec758b6db53e51cf1e0b0d158b7b6cbe87530911a89c133f5e8cacfd200b8ddd336d9e758ba08c4e9f0778875fc80ca7c2f646d3e20afd1dd8abfdf42b8193f1cf44c3478388733f8205a62837fb89201a35f308af7ca8407de9feb9c472f53823890460e386efba52c23990d7682b32a378dfb4573aa67bb100ab62d24befaf549dd8a7f345994b8c95b40114ecdb70efaa10ec3a1a8040b016f545df359be776ae137d824c38ef43580d0cef9806ea70616e66cb0345f170a3015d726d9dbfc6c2a37df614ebdd24dd8d7985505adb896a96e6fc01c6ad084fe114e90a1172d2f78cef6becbbc42bcbfae1d5ce6813564684fa2edb20ef4aaa0927b897b1029a0aafb97dda20c63a81d66b0ff69a7039c200135432a4aef5b6b38aae6a4c0e7385f2c58233269f87c8c6d7826170145f63fde24c3da59cbff2d388162a0e37750c34979f2dd92797758e86fecb8191498557c7c18b09b29598c823b22a422ed9565583ceed1ef0d68b799642d87cad6ac10355a9f76f46e101915d0d634ab454dbd1f2135b50942533c89926c82edc8ce0cb7cb04473b30646022b5f0db1d7024c4daaefbb607bfbd64aaf7961023b9232d293a089848018652c3335bae26388587f3ff3de7e7e4abf14ec109afc60811578e928444f6393b11eefb80690a55dffce51ec5a563dcfef73ddf853474ecbd6b8e80ecac614515cfbc74b935b6bd1a3b9ab1e7c5c16bc50a8101f0c5f8eeebcfe0b1abb58da564d4f8cb16306e8d9a7e1c2a071d53d6daaa01bf0a162ef0d23aa24905e1bca858966cd8320a12b502dd04614a3c2647345b8ac464a55b162a59acac518e38fadbfa3254951487e06c4f30cf6234a27bda2ae43af1ee8d981d267fe1fe21c6d8d73889991d0b5a01af9468f063645fe5e5988e1251a1b1dba9bafc40d006929402337f41acac9fe1150384ef5338405b8bc7e4a16e82dcc0d0544ed17980bee65ea801f226e9925c49693c61a9043d7424205f3ab50ed85dc680cc66a9a4a3f8ee611e738003a410e69bd6c3eb19fdc0957b233dc9387705f6eec087c6c9b0644c5355313844abdfcef443b3447ba196c6e69eb6f427ddbcd301a74be546ddcc9bdae1a7dacbc1651923ae42006987da7e3b6d4dd1c3e8053608eddd4671edd8d4ebf9926121435e68a1316014c124796706b3c9bfb340761e5180f1135830d1e7c6d7134074cefcc125f1894f5df1e11741ab31bd3c1823016d8474faac24fee713d4cadeb2d5c5f74a7ea214671a426545b0b0b01e5151408eb82bcabc2f5e131d1af1b23418019ef334ee1e62800aeceba36cfac6c03737917f9da0ee6199e80d0207469070722528913da3698d279df80c2e79f1bf3f6c7fc3dcd89e724d8d3af1366e6154251be6a2011bb2e7f73577f48bf66dcc731c9e67db0a274a6220b7311419e6a99cc9d09dbc3ece896ec8f64beb415cfece0df72f4b4b8d7c27e98919f9641b606343c600e533cc2a88beea9bea56a1d4d3bca7b63387f7a2c3ec6d36eeb7db18c7011c27b382aa4eeccf12ca7fc7d50e01caf7221d0c75063948247b6dff75705ab1b90367b7d5c3f5db68c8c7d83963bacba1d79c3fdc0355b50f0dc1612ccab3a11e978c914d83ffa9e9d2dfe10da3a70099938384d10f72d9d21ee2bbc3d3532e44ef0268f10463ba9de27e970e4b435b4aa0857c565d5b041f3f388181a62c876760e2d2436a3bc4cc47f4f5d3288d98a50a8f5f6942655f27922939d4f26fd4d46f2740388357e61c4d42d7203cfee017277308ae47e92ab4b9a137954fe176a18dba134b83d52a0558a096f6a679f118a2173cfcb5e716cae872d4d4b848384959d9508901a14749c3cf083d7927e40f2daa89d7c519eadc5e1beefbb2bb6f936aa24c84b7373f0faa00262fe10fb6c2a4ee7d330e9a40244303c372b5dcf60dab6698ad0ccd1fe6da7095dc31435b5904e8ae95a25fd0bd10a3939a9e7cdd7ae4d805c7b68191225dde854a3101bb8ffbdefd7f2558eaa27b3301256c0b4831f9a744a84a77798d9bdd96fb3af2a5ae36035a99c2eb2a92b023f2650a0c694cd4efe26d38749db050fc7599a4a89a0bdc5a8ff642514e989726a6ca9920d717471ef779aca8aa10d843488a2533fd8d003ae370979675000e0077f021dbf1140545d588b833d5cd21b367f8cd8672f63f2ea975e56be32c0c9f300768cca282564580ca2452e023f96263941424c7fc263277c2d78fdc388032315c62950e8611485d71cefa91df685489bb6ece59d66e75c997e7d8ef7023c4e6cfcbaadf537ee2bc06a1d7918c108560c241c2d42659f7f315d5f65639e03f8cf53f740a5c3e38b5d91d60496ba86644686d5b2493ae6bcfa88aa2eec81015ba9d12331ee3427e894b6cf56bb52142090f2636036a4f061c4be2929bf4fa9a520756ecaba916eed91e8e9d54f35a895c5620d6ad41e813cce6c3ed84aa72b2283f4d46c732976ea813f6ec3b2178783449729ab96b9bccef06ec867ac9f393071cde5478ed90682be8d45234587fa50ec2347d269299829c33e4bd521406a2340e2555eed3d8117214b1a9382b21017359940171ac12b5afc32f837a724d32365604e8f93723666afa1abdac297a58526e5a43ad35f919f7a45af9af4a80a0ead89ce470e79182c14c6c11dd4710baba8d48bcc3826abadf72eeb8a17afee45a180a7a0c2effa980f5b71c3f1a09e87c061d23843707c80f7af2083da7879661f623dcee8f35fbf087e0c9b299c836449bacc8f5c2d1bfb197e6ad1aaeb9e5b5bfec1c43afd1e7b42918027976658f77834bb246b091c4837b7d5f5a6496ee23fad2fd519219eedb8267550fe188f7fd594109d6c21095eecd6be08eb655799ea055bbccb312e0753a7e651316a6898f410e8403aef1ea01eed4fee4e57b720b19ce9dc9fa827cf0d4a7826ea3117b3cd9b6bf60ca2e6808b4650042cf52c8cc0c796c18b9cb092e5c6bda9452b595bd5c890175f97207d6019190bebb29f14874494c57b37bcfa2b0d830c7d1fee898b75e0fdaaf163bf8a7b8503ee9e741c1235aeb3f19c8eb8503c4cedb9adc62796e3dd2763260766c58859355c04c3a44de9b2ba996806439de7583e7a5fb1052cfc57db35d05ff92d760cf3ad55daf060f468c1c73a48ec6536e77392a3419a7f782c1439da6c4fd891f6f3b59b5f185b6f8550f84e8469da1dcc6ca03cbda569055f691fffde9976625561d1ff643950f8c5fec194099e15bc3d696b0f85f89c4d659261bba2f2b57cd1a5a0db0f891e62eba2d199cca09908b29f13f6ed7c82bf07cdfb20e4e62b3c22b2ce05639bb89207ef1f838d77bfea1a121bb4887113fa733d7b486bb101ae2e5a387e5bcb19cb001ef05629eefaa53c5e83d6038b47df270def1351802876e2a44cd7333f6bd0d4ce3b3c0884fa951f07c5feb5a9a5624cc9852ce77aeb4873f4029cd13b87e57370a9a99cb71861531bdcf189fa99e224861a3af770994d724ce6845e6e9eeb3356444e0c64cffe93d174b90183c4fcc090f872e8400b40c10f2380f8e32b2718eef424626bab4a65f89454131f7a3d97d8c164cf8c190a9196e529a2cd17a6d4485c7faee717830d7f0e6563bde42d88221bed9f231c708dd854f96ad1f76e11a08f7036e59435a4690bf9d287cdc98746abfde204686efe68d872d92d19a29410ef9a1ead0ca09d10db5d85393fd93f640028e26a4e7df30577735e62767fa73e6ea94fbf68e80f5fc4a1175fec021b3b0e0f0638cc3a938ab63") (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)) (async)
gettid() (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000015c0)) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
syz_clone3(&(0x7f0000001680)={0x4000800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f00000003c0)=""/139, &(0x7f0000000540)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000240), 0x0) (async)
write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff00fbffff07003950323030ff0f75"], 0x15) (async)
dup(r6) (async)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_INIT(r7, &(0x7f0000001700)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x7}}, 0x50) (async)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0xfffffffb}}, 0x30) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0) (async)
lseek(r8, 0x10001, 0x0) (async)

23.992991865s ago: executing program 6 (id=2119):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0)
syz_clone3(&(0x7f0000000040)={0x206361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x10000, {0x57e, 0x8, 0x0, {0x1, 0x81, 0x0, 0x2, 0x2, 0x8, 0x7f, 0x0, 0x40, 0xc000, 0x81, r3, 0x0, 0x8bf, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x26)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000001c0)=@filename='./file0\x00', r3, 0x0)

23.928314817s ago: executing program 6 (id=2121):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000000)={0x8, 0xfffffffffffffe26, 0x6, 0xffffffffffff69e6, 0x1, 0x3, 0x5, 0x2}, &(0x7f0000000040)={0x3, 0x7, 0x7, 0x2, 0xfffffffffffffe01, 0x0, 0x1, 0x3}, &(0x7f0000000140)={0xa75, 0x5, 0x1c, 0x5, 0x2, 0xe, 0x4, 0x10}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x9]}, 0x8})
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x20, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

23.919165126s ago: executing program 6 (id=2124):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r1, &(0x7f0000007640)=[{{&(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x1, 0x814) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="f30f1ecfd92b66b8010000000f01d966b9c40d000066b80080000066ba000000000f30f2abb811010f00d03664650f01c3e800d065dac80f21ac", 0x3a}], 0x1, 0x69, 0x0, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)=""/132, 0x84}], 0x1, 0x8, 0x7fffffff) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x1, 0x0, 0x1, "ff00f7000000af88008300"})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000140)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc06}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async)
clock_settime(0x300, 0x0) (async)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304985)
ftruncate(r6, 0x8)
getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000002c0)=0x4) (async)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) (async)
syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="20055b000000087a1e678a6031f228ad0c8000000000000000d8d5f929433175c6f89af2798a9f110fffc1a8036eeac70a438dfed1d2fd0a4acf10551fb57139359a"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000680)={0x40, 0xb, 0x2, "ae4a"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7b26}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'Ce'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x96}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x7f}}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x6) (async)
mkdirat(r7, &(0x7f0000000000)='./file0\x00', 0x144)

23.402197704s ago: executing program 6 (id=2129):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x442302, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffeffffffff7fb)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r1, 0x4758f000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x0, 0x608, 0xa1, {}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x2}, 0x1, 0x2, 0x0, 0x0, "e665d2e36dd43410"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)

22.557638327s ago: executing program 6 (id=2146):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_IOCTL(r1, &(0x7f0000000200)={0x20, 0xfffffffffffffffe, r2, {0x0, 0x4, 0x5, 0x8ba}}, 0x20)

22.496721948s ago: executing program 6 (id=2147):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) (async)
r1 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182)
ftruncate(r1, 0x200002) (async)
ftruncate(r1, 0x200002)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10)
connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r3, r2, 0x0, 0x80001d00c0d0) (async)
sendfile(r3, r2, 0x0, 0x80001d00c0d0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "764e8dfdd92e4753", "f6af97120504ee79b22fc9563590bcef1069b7741925b43c5ca8257b1bf6208c", "29c91168", "abac22448b0a4cc6"}, 0x38)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
close(r6)

22.431383429s ago: executing program 35 (id=2147):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) (async)
r1 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182)
ftruncate(r1, 0x200002) (async)
ftruncate(r1, 0x200002)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10)
connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r3, r2, 0x0, 0x80001d00c0d0) (async)
sendfile(r3, r2, 0x0, 0x80001d00c0d0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "764e8dfdd92e4753", "f6af97120504ee79b22fc9563590bcef1069b7741925b43c5ca8257b1bf6208c", "29c91168", "abac22448b0a4cc6"}, 0x38)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
close(r6)

5.003058874s ago: executing program 5 (id=2320):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$KDSIGACCEPT(r0, 0x800455ca, 0x2e)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x100000001)
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r5, 0x2546c000)
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712)
ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')
poll(&(0x7f0000000100)=[{r1, 0xab6cc3d7ffaa0897}, {r4, 0x8}, {r4, 0x8001}, {r1, 0x1002}], 0x4, 0x0)
read(r1, &(0x7f0000000000)=""/175, 0xaf)

4.351781174s ago: executing program 3 (id=2324):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x3, 0x2}, 0x10}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4880, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e3b014b5aec3434a72f40ae71e605"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
socket$inet(0x2, 0xa, 0xfffffffc)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x218000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020)

4.180507177s ago: executing program 3 (id=2325):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
prlimit64(0x0, 0x9, &(0x7f0000000040)={0x1, 0x7}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r1=>0xee00])
setregid(0x0, r1)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7})
write$tcp_congestion(r2, 0x0, 0xee00)
openat$kvm(0xffffffffffffff9c, 0x0, 0x400200, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETS2(r3, 0x802c542a, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4.146575637s ago: executing program 3 (id=2326):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20002000)

4.126183178s ago: executing program 3 (id=2327):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5040}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x1})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1, 0xff, 0xa, 0xa12f, 0x5}, 0x20)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1101}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x2a}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

3.168928362s ago: executing program 7 (id=2332):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$unix(0x1, 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r0}}, 0x20)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

3.167051622s ago: executing program 7 (id=2334):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc810}, 0x1)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x80d0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}}, 0x20000080)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', <r7=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000001800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000017c0)={&(0x7f00000004c0)={0x12c4, 0x13, 0x100, 0x70bd2c, 0x25dfdbfe, {0x26, 0x1, 0xa, 0x4, {0x4e23, 0x4e23, [0x5, 0xfffffffb, 0x0, 0x6d], [0xb, 0x8, 0x3, 0x8], r7, [0x1]}, 0x5, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "d5ac277559d9a8526fc9bb14cb955d5c49eec3b9bc30b2ba61a1c7b8eb4c5b0a27829e64b5f71eaa60fa0ca182bafaada6957476644066e45c59b239cac0e7260d23358dd0f3c942b3349b1eed5fcd405330fe92"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "30cfacc2a3f3e25ea380354b9c6a5c08866d5b70f74b9193b9fbce7d8fcd81596a62fc7bfe0c641d5d8526adbe08ff5c2086ebb0e147385b0ba13eaead49636edb"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "d2569795ee29d0b77ccfb1db82cd77182b251acf30d587abf26f910f6124c2d43a64f1e0fad7712c5ea6e1602baaf8be4d680b7476b3d6195b492907a806c303461873e2833e3812bfcbc0859a28bab8fa12c2d133d38b8bd8606ed4f94ffcc487f6d816ecd7dc09a03d831680431813d680cdae74f1d1612da49bb53cfd22cf85cc1ba44968e8fad3a2f6e7cef1375d6f9b9aa0f1e9b69f3df458fa700e8bff69a68f8fa024fc612caa63d268fd01d6d641c5086222371a"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "84183b92ee67c48f9bce018cd21953e4713b99bf5916247b2e268fdfa04411c37493ed783898bab7376f00ab24c2477f620d1c"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "37da9f6c86902d9d899bb8565a54fc498ef37187744f79acd19da8b6488a053514cffaeb313a74e91b5e2634be68569b5cd3c295df2afaf2e43a7f7d68256d569c941ba508da23ee7d1b1e66902befde476a9fc0c3ebd7b82be722b108c2b1c411e53c52e042a4021dac1d58fb1d8ea658356abff88b2a570e96e885b767281da77ee5cbaba74a43cdf566ecfa058ef021bf6931f653ed554fc2fa69bbe2a5c1b9877511708a1c08ded9c8628d70b7b10f53e69d652438"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "7da73d85573ef344d0bdd2aefe4c9a9eb0b59100d6e6a18fcac27c72dbf44e1f"}]}, 0x12c4}, 0x1, 0x0, 0x0, 0x805}, 0x18401)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r1)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000018c0)={@mcast1, <r9=>0x0}, &(0x7f0000001900)=0x14)
getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x64, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004005}, 0x200000c4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001ac0), r2)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001b00)={{{@in, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000001c00)=0xe8)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r11, &(0x7f0000001c40))
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x11a, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x88c0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x64, 0x2, 0x1, 0x3, 0x0, 0x0, {0x8, 0x0, 0x7}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x1e}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xf}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x2}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0xd}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004894}, 0x800)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002980)={&(0x7f0000002040)={0x930, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x80, 0x6}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x858, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x850, 0x4, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x11, 0x2, "cc93a6585540735ad94c51008a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x150}, @NL80211_PKTPAT_MASK={0xbd, 0x1, "808f90d82b3b03a6c08b06a5d2f4cc51c2b6abbbb1c4c632c52a53e54d21af921718287f14b8c052f8c57ef5f9488ef2420ab769f79158308e00b43d21ffc220f5355c8a7c64f381a0ec5aa335ccdaef6d9283f8bfc3577eeb97efb63e3988546d73fd1db960d9d93d39d9fc26f56ccf2a1e1bcd65b1d35e6bfc7ae4146be6c8f7b0940a2c8be9e0392a43f72a9f21b8ea0c8958f0d000fe59b6396df4601a4a943cbdc979336cc39187177074ef30d3ba3cc6c894ab6a5dd9"}, @NL80211_PKTPAT_MASK={0xb7, 0x1, "a09a7025d6a26ac4cc057cd1b8cf611c7b326da5d5ab10b588dc345030160ccc5a9a7c3370c683686eb2aa3445613ad7881ef8fecea1c44350027315ca9b5c6ef68845ef70bb74fd70a43c8016f88f69a9fc30f2363c1b88d8fa4aef64d6877117167366426be96f29ef5aba02361c5b2dea0c5846e9e512fda0194514b51fd335149add3d5c450e6ef79f1686df961d89a81b25dcb9a580bdbae0cc4f979ed2302393898d99cbae6a40f573e2dc5259d6aeb8"}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x6, 0x2, "edff"}, @NL80211_PKTPAT_MASK={0x48, 0x1, "a0f0683427b017e967f0e5043dee66af2048e582123cc98c496e15b05ccb193b286b75d9440323afb263a05a0eeab3773aac3a6ad0c55bc4466efdfa79024b9830f0090a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0x11, 0x2, "bb571c948656956b277868f957"}, @NL80211_PKTPAT_MASK={0x9a, 0x1, "9dcdff951dc84afe2456c91d5d7833affae0d2dad173f3044fd58631ab25b8bc852f66710c6469fde9565d20864ab6b3d7102368bdfcc7330bdb656d21219552c271304ef4cdf0a2d3bead611e9bdf6c389091c134a60f3ab69ffe9e3e2585587a6596143f04328ccee52d604b93cbbf44bc0b3a2e4f9d1838f45017bd4b4148c0869e4364ef94e7cf4e3b5260fd749593dac1048be5"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x4f, 0x1, "7bf1878b310b5ed5f821f734dced39e92911db3a9979e31414c9866e6ce0ff59245d8342e0c4d9fe80e9617033ba61e83bb80dcd0c086dd8138577a4aac182b9b33d281895d0b04a044f75"}, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x83, 0x2, "d971a1b23876251ede64de3eff9db76888e0243545ff324becd51e0b6680dd9e2c7bb36923cab35a80bd25000b76473b34287c37f5f1d0158bb2c3be061e307c63495a3aa68318fa45d6c94a76f1b488e79a06833c6fe4b9dc254cacfda0288cfc2a0dcca4409c97a288a406654d8dc3a062e2a9fd3d486a7359c33f8dc214"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0xf0, 0x1, "3375ced95f27ec146f0e1962c373976a0a57a970dc528d35e808fd697351f3a51edac6fa73d9c0a0f6265fe15746846ff3861c45bb5ea487e05ee021c39be7513cd50796cfb337af265c53569cfb1ea4caf2ebb08df0d3d71a44edd8ffdc8dbf3c506507c0bfa2207fbd31a51a2299b3013dfdeb325da1a1da3dd034f82a7285c0e9d4deae6ac2aa6d521257c88eef193936304b9df4edbbb36c124b45f97c8fa861a2782afb9dcb94fd6ebb68f9de0ed9824fa80c3c02af999c9297446501e71eb3012cae4da9afad7816e89ed0291378ca7464375df478becf706ad2db6fbe82927bd3f074937cdb11a75a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x45cb}, @NL80211_PKTPAT_PATTERN={0x68, 0x2, "686dbd8d2d47f151f6e8bca36f5a4dd9ba56c65635c8a0447a3c47f59efae748acc69ee3372fe6fffc8cff8bfa85a68da05c12f51e4b2b3e660e2a97a450aef10349772d0b5d089dedcc804ea3e21546d274c9b814a8372d6f6fb765b709f13fd26a72d5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x38, 0x2, "e6851c65ec2c1817da79a729583c8291d0da40b8b5df27cf40a91099ac63d333c67122ed288ae9714efda574d0001dd7e5c72278"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xca}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x46, 0x2, "99b8b09e8c72ce618620d4cb567bc6ddcfc7cbe05355886ca3f4aa09bb4589de42f09c21bff6875a975d3036916480034382a9273ea20fd6e1f583ce8f6684f36a87"}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xbb, 0x2, "e94523984fab0a4e3dd0ce2380e92100d1c44694464def2adf613cb2a43c28972e832aacf2eee9d595802dd43ca456940afd13ed7ec65e55ecc14af0383879a92258ef6c3306e9979274cf2341df7ed1c87a7c88aaddc11b453f6eaa636f2161bbdd9bf15a776e8d84d5f9ed2240b64eb1ab8907eaceef4d8e157d0dbbc6e4fd86afc80068174faebf28efb940f737940e51da46730b9cfc4a3953a70ae0b60fc6286776318a4e0b7c90bfbff76585531e2f27095f0b82"}, @NL80211_PKTPAT_MASK={0xf3, 0x1, "aae1a83f416b8cc85aa2847c3bdc900bf372e6231e09b5f709fefb2cf04a76285761bd55013e056deb513e99eaf224262b5b9ff2fa5e5e121c04f9cf4bde11857b911565d4cb85da893b9e669fc44bdba4f2179f88164dacc8757fb2742dc39c3eb8916aa49fb652c8df6bfed0d5cf2f7f4ecff130bc360fdff86468336c3188f4a80a543f627c5a3c538b9ddd1340d9f5dce9037032a9c3f95c1f5f32b84a6088d41dcbb0c3284f49c0f94a2c3f6a3763fa1ce7626a3b4d6c6c8cd8af1460fb4cd85b9e5f9d8d5162fbfbab96b36ada3b1587df9cf69a7431d06356f7555f29f85cef9d0091adb0e6e1fe186767d9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1eb2400}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x9c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x98, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x6}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0xbfd8, 0xff}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x74, 0xb, "49926665e51477a8c8d43be1d1b7474874d6f483e2a6eee99e62862a6d2d60b6e034713400b9b906370678094d270bc23870d832cd03f87544013f090abbd9adc62f26098254ce489aef2e5639338188a6e1114409753f74a05b87dee3a75ffb299f110f5d2a3741010d0684500452e1"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7f}]}]}]}, 0x930}, 0x1, 0x0, 0x0, 0x8010}, 0x40)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000002a00)={0x90, 0x75, 0x2, {0x85, "9786259635490635e68521aa94d162dee2f26d8ee82c1108967d9d58c25e541e4322b1b80da4a2e0ba79a0916155fc04ede4b2a72ef09e590bb2afb5a317511edcb3fe76b93d719cc39fcb6b057425b95fc39a7d875a9806c41dc20be0bfe00fa402edc40c3dde9794689b1c5cef1273d5b91eb1092819049e7515faf0cdf82d838954aa51"}}, 0x90)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b00), r2)
sendmsg$IEEE802154_ASSOCIATE_RESP(r12, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r13, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

3.108580423s ago: executing program 7 (id=2336):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) (async)

3.108271123s ago: executing program 7 (id=2337):
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
pipe(&(0x7f0000000380))
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000100))
socket$inet6_udplite(0xa, 0x2, 0x88)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x144, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "8de5b3949cf27f9add59dfd102b596727ec96b3b5a91845f5e9bd56ec737128fad2156e806190418ba6488b6c08c3c74a54f82f21e639866db673d8fa518f78f3635c924950591cddc8147dcd1965a93c1b942753c40dc84e549feb43ade62fa16a28d3094574177468d2cf03cb017e61b9f54c5704d1b480b1aeb0e554e076d19b43568a74ce894c783ccbc1fd04e967e7e7e8fb5a96c9a484014cce5efc5df9002a3a07d31ae9dd6"}, @NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "a4a8b585f885d58cfa97dc571c43b75cd3ceb67584f34d0a26e1be30719df9939974128ef2ec2b9f5a480b65b3fba37336bbec5f196d0f359a8b28eec031dc46ac113fc466d13d323867b0580954447ed07e3d825e8688f564d6d2388c4695e40cb0cf9e0ce7360c"}]}, 0x144}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

3.071755564s ago: executing program 7 (id=2339):
r0 = socket(0x11, 0xa, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x6, &(0x7f0000000100)=[{0xbd6e, 0x5, 0x6, 0x6}, {0x100, 0x2, 0xb, 0x5}, {0x4, 0x0, 0x5, 0x2}, {0x3ff, 0x2, 0xe, 0x3ff}, {0x4, 0x0, 0x38, 0x8}, {0x2, 0x2, 0x1, 0x5}]})
syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x27, {0x27, 0x3, "aca457fd03cdd65bb67fba8888ea617081ff08482dd52c5b12a9fad7a85aa244bc42f0f8b7"}}, &(0x7f0000000440)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "b1178869a13c9d185252f2c8f7e3960f7bfaf409b6debfce653c0d3775878fa11ca70c4e4e8ddacbd2c4916cc5099dffa4d770f732b3d5cf76b825de5477ed43c80c9c587d31b800870787edf192dc729e5d9158cf6af90dd4918dfea1fff3763c62a05c4b8cdb7348a96623c38929c7ce5e2c9e1034415e804e7629b02b6dfb07b9223eb5874c3f6f4f0a718c7c30fbf7effa551f69f006d4f76af5ef4408083d96a37c572305317d1563bf0b298b14b1818562eaa775c00cb4cee13ee6871511f50e509566467329589fc17a0a8476e3ba7c6c1166d28ba0"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000540)={0x20, 0x7, 0x5a, "56c4be7999aefd51d908ccf87899722a286f117308115f305bfb3fa635d2c40d97c415d2370ac9f4270aa430ba5fc063ce5af128dd707fcfd0fd738e9959288888c8529a9c7f881ed4e5b44bf9c39274963d22dc0728dc5a7da4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6e}, &(0x7f00000003c0)={0x20, 0x0, 0xc, {0xa, "48045ee0fe67665ab8f6"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x4}})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001cc0)={'ip6tnl0\x00', &(0x7f0000001c40)={'syztnl1\x00', 0x0, 0x2f, 0x18, 0x9, 0x6, 0x12, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x1ff, 0x1}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])

2.912629716s ago: executing program 5 (id=2340):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x438, 0x350, 0x240, 0x10010000, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) (async)
sendto$unix(r1, &(0x7f00000004c0)="a0a3", 0x2, 0x200088d1, 0x0, 0x0) (async)
recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f00000000c0), 0x10822, &(0x7f0000000140)={[{@stats}]}) (async)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x3, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x44090)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)

2.102620798s ago: executing program 5 (id=2347):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001080)={0x9, <r1=>r0, 'id1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x191}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x3c}}, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001240)=<r3=>0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000001280)={0x1, r3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x81804011}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000001400)='net/ip_vs_stats_percpu\x00')
writev(r5, &(0x7f00000014c0)=[{&(0x7f0000001440)="fb653e593fb74ef302d16079d82652c9265e866031b902ada10b25f972978dffae8f0a147fe5193552661000b906774eb0073682cb601ae5e628be8b807644d4d9f1babb7d739206ed2fb9caa3cf0b", 0x4f}], 0x1)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x1e)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000001500)={{0x2, 0x4e21, @empty}, {0x1, @random="53bb5e607dec"}, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}, 'pim6reg0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x138, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x118, 0x12, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_INFO={0xb2, 0x3, "d558db294b60a8c8e9df25b56983bb99774839e5a3395be451bf7ef582c86aa78b4224b02d5385ee7f06ce602f33e7d1efcfa1529e457f4a0d5a54df3787bb2a7c64c2ac3efb32f5becf91d6ef8a2b034cffdac87e5f420780ec2781b9445346db14fd327baa9e87996564e85ba3a38112672848539f6ef64ed77e0f9662a135ac9db2d2b535bafc751e94daa4a93af3893ea3b0fefd6a6fb7bf89609d7c17e5f008326aaf0f3b2160e1b607be6a"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x45}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x1a, 0x3, "e870dcdcbfb9437198365ad30cf25c95dba7e8616ef1"}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40400d0)
pread64(r5, &(0x7f0000001780)=""/92, 0x5c, 0x15)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001840)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000855}, 0x4000810)
fcntl$setlease(r0, 0x400, 0x2)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001940), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r8, 0x5501)
getresuid(&(0x7f0000002ac0)=<r9=>0x0, &(0x7f0000002b00), &(0x7f0000002b40))
r10 = syz_socket_connect_nvme_tcp()
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002f40)=<r11=>0x0)
r12 = getuid()
lstat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fstat(r8, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
stat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmsg$netlink(r4, &(0x7f0000003200)={&(0x7f0000001980)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc, &(0x7f0000002f00)=[{&(0x7f00000019c0)={0x10d4, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x20, 0x0, 0x0, @fd=r6}, @generic="a310b0a3367363735338e24f65774a3a289e5b5fb298a61e405aced72c3d00d1456966f9945e9edeb393ee13623bb95c8ddb6617695d7c65e322b5f14ca9af1063cf81c34faba4eeeadca327ad29c5149851b747c73329d56512aa64c825bcb144ae834763bda4ba0795bae44a781eb2057dd402", @typed={0x9, 0x51, 0x0, 0x0, @str='*,)+\x00'}, @generic="84f2ad56efb9e2d112e81db68eb9bc9aa46aabfa829466fea94f83b1423727faf738c5e81797ce27423de396ebcd5b86d1ae05a630196d253aa0083a6716cdc2699cc3b910548939fba474af51d1449770ec44da14693c30de9a7ea7d72752e3205a72c5d544831a2b82755d48c5515fd13144aced36204bc3ce631ad85c13ed8d62f0b7d50b8993b55b58d4e016d086bdcea4e53bd5f1d344ca4a803b6bf0c783d551de6aa2adaa1db4a365f594e57e5fefaf7553a1ecbcae5c0a5359e5e1e545d7f323a961898e52c3876174d784945803648fe18bdd004cf87ddab92d1600a3179e1c8069a3554c8018ab1d15f1e81ecf10a589422233552813e29477324d3eebf72024da100b47fc4d2c09fa1e44a3053dd044e9f05771e01a5a96b1d2eb707734e4edebda6bf87ef32ed937011f5a1072dc6dbf9abe533729ed8663be50d94e7e9263e1b698366a577557c0e17c1c7ab0689eaeecc7b82a99c907031a0b9fe85d7118cabfeb44998dde50c3872708d2c56ce22ad08a42c6f82424f4f2562a85d81f766272c2e98e7dba5f3929339862833c0da4581ecc434c48626fc75315a8dcbfa9d9c5f80c299c3aba87595784002ffb1416b02d04ba3e6b6a56563ff41a600af6ef2b419ba61d7ef66996841bb93b6676e144d8f4ca0dc28a1332e447f1a982d03b59b52c8af84e2023940f9502b67dd01457b6b7873a7439f97b08527b4b7589acf7137fffd8234663f8f69de98fe60a017d38b971c161c55bb1660cd62f123557935520979dcb9f4535194e2d1cefec82a5bfb5719ca634570c039f75532858b413dbabb223d4c607b19ed058ce9b1ffa5ad12289a290ce9c9b656ecad1a022807fffafd5e02883c39ebe754be2e0067ec9683bc74ad01678bd7f5fcdbbdc03b05213c7265ce4f2807ac305302c0838e488ad63f1c9e5d12cfb93cf5c1b939197de53c241f39e1aa707383f5983f029e509a3928bd074610d6b79b1f7c5043f9831dcaf7a178731bcb6277139c64d41173aee0ffec1f5db0a5624e70c7010720074f9334c9eeed85b99f0b2ecd7e557c20f9e7f770a34ba10eb17e5e7e120207ebe756b5aed30091e78dbf801f19e177568a66f8a52310927493dcd900d38479490d0fb41d336384af00a697066109d1257e04d9d7257f8b545d931ed4a9d588fd8f23fce1dbabb25402ad3af1bdd6a7ae76904be94b74cf954ef89c779f3753005a2ce6fb6ac8aede03e6bab9a168912d7f1e0c93076da55ae0e36aa2fd0cbe0eac1e62ef624071897178fd2aa289b9d6fa54bf113e347b0d1541284c28feaee7cbf17bb6620a5b2a9180d80c4b9427e5e967e5c0bfaa234b2a6219dcb9cbbe8d14e3d206a2137e835734c7763a72e102273a2a89f3c7b2413e0ad4a583db0b4d9237d8db9202f043eef866a487eb5ca1e413d8094015da0aeae998eac80bf1cba1bc71bb1c5bc1468701714e2f537d0abc330a9c657865f5e6cf6580ce88d42b7034d8d08499ba0ab65f708f6841a8b6c849a09035d496b2e37fc13f2364bf6c7846b46ec927a8cc5dbdbe76b1ab1b0458f7a7a4256b4372e92a61e25a489618e6768dce2db1b44eff1d919ad84f4f268bf148fd17b073c53ec149abecf6d1d68f7897d95cfbb0f6ffd3c52991b53719f9f3283d42a7b131c368de3fa03ddaf781a576ec6d9eaf94ea1ade11fe28945c09f48b94b35bc401817e2de20e63ac27d0e6c5e848fbe41f228f1037ed21a84510c1587f08099f5689541085366588023ea99fe8c91bdf5e71910d953912138613d1447728a4d2a980e4ca2fed915931ee183311eaea864d9ed081c7fd566c9c04ca7979013d2278d1967dc19228e68ac5a3e4830f7143c87d0a6bda64effc831c7020e82e454f2c49371671969848f859fd038f7dcb8e35ce024d3f94af85b9447fc767ba6a365a4abc2bc088b987026b1ea67aa4b752d13269497bd3d1af107fdf1bb0eeb026482bd81e652f51884c26300e7c60ac5f746bd5d7baa5be2c4feb695fbd48d8501e8a1eb87eff2ab2b64df6d4f3e904fbc3defe6a8c0647dc5187dd9ec2512d23ee8d86926d495128fe78e0eff66d5229d7f83c37cf4aaf911b45ed79dd45ee56d5029d221d449b30545373b0babf799310cf867ec30ef04c7266edcade2d4428e4af99dd3683d809ef778f87b67183df643a58e105b4158742a9c3d8e2cc1e25b0bfa8bd4b83abe3817fd6d11b9c7fc079ada90cb844732b1dc4e02de84ac1b281d341afefa5602d9ecaf55bb2fb2e992e24afdb9e5cf33a3d0c320643a557d6692f56fd053b867b2775c62ad3b37ba0bd6bbbfa5b23f5c4333565ab0bf30aad39a097fa0804b7fd2f5558bfa05aa8baec979c5786b6c8184085d6c03441076f42f42d050b1f652aa486afc818d4f1a4bdcc38856a1a0a3f1bbde59b0a5f2c77e4ee40e0c4d4ac50c2c815abbc84157c22fc2f117aac8887a4efc1ee07b6d11768a941e824c62c761093ddc6c6d906d546a8c7b6c3d28bb53a577bb1036270ab5689adb61ef0e9f7ce27edca286cccd9130f7dbbdb5f282403d403243b02459550e2584aff79604d68297fac21dea02d584fdfe09a7d3be0f452d855d9253bc649cdce2e431dcc8559b764d8f7042a203412d0e6d901c8f631600f6c8467ddd81a02eecfc93fa63528554f43f13e2b956549b12efa5ba8128ff1ef3f3c00e5e48253d98d8c740a7089e729e8ba8d36c31a440c625ee7f13b199f7630dde599c4f423be1dfe2effc0724d89563dffdf4d2d45315c99aaa51e7f144e0782830b5bef69f8091e13a11c9a2a54604fc1a20dba4e37ccb49673bcd091e3d68a6caa6da7fb1a9430dc34d4bde4ee3e5ea41645833e70fc8de2e26c6179f38b1faf39155f655136b5ee8531f3213c7f9a185e348a54e439cc56dd3b8fabc6a02b5590ab669991daf52c7816acf4c409919d3c2d9d9d2a27959f1a7b8345934cf20035752fe561fd2535ad80447803931552b84c95c03c813d435a4eec478233063b2d0ecfdde0176aa10ba87dc0e7c5ee1837320262f3f483deb6f8deec2e22100f63ec550df70ca2964f298266c30adbabc16f923b6091c20faf18457a1502337c3fb8966be3fc17cf159ff60efb293c0c7ec7e9a40f5c6af1593cdca453dcfb95d6387c844236981025dc84354f21bafe33b8b7ab64532d03d7e451ffc560534a6eebae42483fc16c93a30229419421232797054452a14b08e4855a84a5128f66135939b0337c1bf31d86f301420c500153e6e197eacb50c01d90ffe8cc36cec6904322db35b90e68b790039547732440c1c3a785bb1c878db42cf66ee2cbb062b4a4c6df754eedb2153b1f510c6a25f8e57c2df7ac25cfa0ead7d7c02916f585fe1ec643765b72173b2876da11baafc304300e3d89cb6692c51f8c80f522d833ad98245abde36de42c1f125e984000b03ccc3c24ee9179ee87337c6abcac2007721b3d5059a3af8e9508dfaa530c065d9c73db7742bcfdd0b546f0056b7f8109d498dad873c88c112681821bf8451b272b3b822da33c924032a5ce73747b32a0e2c61c9128e0d7378461db7be88fed9a1d892faab49727c297ad32786a2f89caf82bbab35240c04ac956d2e3eae3125ea3409e6b1cdd26b1118cab4108d49f6b6d3340e9a108ef01dcb7cb44491bf870c44a815a97ea4f82159831e77bd1efdeae79bec229fbe8bc526201d49d317fc6b847d347cc0321d02e86b502ec2c095f1e44d18f2e521454e2de09043fb32f53ca8863ba7d32a25f42bad43d8a3d00307e7ad9a0187ef7eea96204508a86b014513b354e824382886faf64b59b9a5036355ca19e1213c7177edbab8ffdc1fee84407db79e186f709dd714051dd5937336c6c41bb8ebd6df9892307e7db5987c84bd6fbcecd07a7430a056db04e08547f138039792a55d2d169c51c917e5017040084f17d22faf0765fc9ebe08e1c0c2d52b3e50396cc564d529dbc3da1a62c0882e1dfca0fcd322987960b26b0d688e8871fd4d0a1a4fd4c8d95c1ea72c3d2c32414eea53cde0cc6f62ea790a49c56675c628cd99a5946d32527b1838b9d051775a3be016374f4dd41ace6b6f71c97931ff1f816c3e8063f672188071f4c3d6d360fdccc4a8f2221f5d2b6c54b0e79bf96ed6399638bab59ef46501bb0ae8dd204260084bc900cac1b9fd0e72c4ae974b9281aba9d7005a7b38f00712fb18335b263545dc3e1c4a1ef569bc496e357fcf70a4b51c5639e2232445b520c7d2c4b636a99db86f540330915b40d0aa38d35507031b9b23afbc3622c5406005ec8813b4fa5280aa4446a14e62fc93dae57992f3dd54b20d279857f2f644eec8479a8912e3b37c084ad1b84429327ad22aff0916dba43829bde68ab09b2037bdc0da424094d781d33e52ff25c194655b574b58930b6079614059128c19a9010922673e08c1d3160c21bee8067a02bb30567fd333067005233bfce341480c1aa196b3ad3be6d04e3ea9917cc027290dbaea79aa086e98dc53980fed9b1270fd1337f3dfa2847fb83a30dc0e2213ddbeda08d2c4bb2e82a70a55c5f0e1d746e28ac01a1bc8c6fe6bdcf40342e6891fc9d2910a17a93e282bfd836b78ff85adb87c64712856ab4c89467b2e0ed0681d59f1cbd9ac64d1aa25a7ee3e9a51d663e83cab7de7085ceb40d44b36b72d6e1ff9060950dedecedc73bd1cbb335b0662d9b3c86aba0faa7c6d217ec4706bf8141a823b7d604e2e9c9e52e8e364e9c3a6e7134eafbd79d3c775b39eee86e18c9f00bc04b21346d8267dde0155ee50eed87967cc9753a7aadd902868a655b14a228bc2cbf8937d58fb40dc70f6e8c3c9541c1df0deadf02fa76cd945d37643f3b41a822f1f25aa89f0eb9d13716bd8dece564ae71dbaf8f2c265bd1f0871d8141db9c37aadba086f1d254da8632e8a3a4b968e2b802d009c45b9f75829dfbe4d46b8ab03f2193a49323cec3feb755b66fb138ca8646a157603d01d20a3c9a46bda5d9f185de0fe8f428443fc1a2274d2232841ceeb1b0c6c1c742571aff8975f482797d3f70f68b305c3402ec66fa834801b123964761323ab1b90083bb09d1850d00e3298db5fc5c7d2a704a2e9b52119dbec46f2b409ece60bf2551974bf2993511fe7a4b6c0946eea256fd4114b22eda4ed4517670e9859d1c124a2a4514d82b35ee05e8b31fc5debb7c1c0984cf638ead25c550a7630d5048aad293b12f54427471df9f5899568d02abfd08411642a71da5d7260b9820bc32aef13962c6c432aad9640b0c6596c23a51632948b821627dc2bb9b57bdc8629460c916aa88df57bec0dffb43370a168f5f43b6a28cb68e84f5fb02eff0a9871e57dbcab9c8573b5fe05526cd8ad5256692c0e3edb1469ee9593f8ff647d487cb51f0b3c355190fd301393a74a8f1427c9ea6291cfdd42d2e8b1eec0d6661fe1b74471adf8c7fe53ac1c500eb43b4fa89ffb803a364ad0cd34805aee87ab4e0d4dd5137251d27a0aa7c6f25685b4118ef931ef6a4a2312cffd9dcead12acd443355b27017f6a1bf3ad3e23f535ea0c16ed7d58feabb326357bc99a6d36ad697e697c312c916011bb2650bca43812cf27ec6d1112feb9dc5875f7db72c8500b1b6e1845b111b164e7768d70b839e000e9c47fde648504e5aaf645e9e85ba4e9948c4c6ce3dead0dd8f3d4be360e771d629a3df45533fcaa136bcbbbf0e3dadd7baec96a7f5edde5eb186f855bb8eff5358557e995896bdbbe9d1bc04b5f9b121075719ee753f9ce2d68434e006e81a295", @typed={0x6, 0x3e, 0x0, 0x0, @str=')\x00'}, @nested={0x24, 0xe5, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @pid=r3}, @typed={0xb, 0x139, 0x0, 0x0, @str='$\'{:${\x00'}, @typed={0xb, 0x19, 0x0, 0x0, @str='ipcomp\x00'}]}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r5}]}, 0x10d4}, {&(0x7f0000002b80)={0x2f0, 0x1a, 0x800, 0x70bd29, 0x25dfdbfc, "", [@nested={0xc, 0x37, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@remote}]}, @generic="4ce4b8da1798e03448df3567e47ba710c379064a7823f23165c044864cab073a7e4e7ce3884fc0488acf3edec3b31f2598ee1501cd958954ddcc86a4cbbeb826a7052a696a20aa5921f9caddf4abe9a2b782f6236dfc", @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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", @generic="a1e819494fe260a6086b3abbd0d1311654d2e2c2b829d700df7372d7c12d4647f4519adcfa26e884e738bfd59a083d678152de0046795d6cfdffab1caec2f39cdd11007dbbd7e449e4eb83180ffbfa3c0f24babe8d408c1bca13afbdb771bf4e42d1e3a6217fd553", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r6}, @generic="b4848e76a6f3332ba2d8adc01cf33ac03ff705fc464628d9b7f1eb6d57817ba8821d1d1745879d0a70fac8", @nested={0xc0, 0x123, 0x0, 0x1, [@typed={0x4, 0x135}, @nested={0x4, 0xa4}, @generic="97a8dfbfd0c2f25d4a11045d849b9c534238939bd0a0bbdfc333af7cd22c03e09f5aaae0ba2fb697e94c66fc7057775c5f4dbfecbca26808a09c572f17c0b2cd612c9f95fbe99b2456e81d441f927aa02411c0866b49fc99cd8974a557b69a24c0d83ea7b9df0e2ced63293fbbb396887a1cbbf5f163ff2380f6ce89ab9720c442860563b315e50442de6f5f0de147c31aeeed6008c817f81869014561494f9dbf31f77d30f56f2b69feff1874255d8bdcdaf24a"]}, @typed={0x8, 0x146, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x19, 0x0, 0x0, @uid}]}, 0x2f0}, {&(0x7f0000002e80)={0x54, 0x26, 0x4, 0x70bd29, 0x25dfdbfb, "", [@typed={0x1b, 0x2e, 0x0, 0x0, @str='net/ip_vs_stats_percpu\x00'}, @typed={0x9, 0xb, 0x0, 0x0, @str='*)%%\x00'}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@broadcast}]}, 0x54}], 0x3, &(0x7f0000003180)=[@rights={{0x28, 0x1, 0x1, [r10, r0, r1, r6, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}], 0x68, 0x4000850}, 0x0)

1.826195843s ago: executing program 5 (id=2348):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x24000048, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffd, @remote, 0x9}, 0x1c)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
fchdir(0xffffffffffffffff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

805.653408ms ago: executing program 5 (id=2352):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast1}})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x1010, r0, 0x2000)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0)

604.064951ms ago: executing program 5 (id=2355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d94000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="64f30f00d83ef30f6fb5799e0f01c42e2e2ef30f093667663667676726660f383046380f090f18d90fc75c09baf80c66b8544b8d8766f6efeffc0c66b8f2ffffff66efbaf80c66b8c0669d8966efbafc0c66ed", 0x53}], 0x1, 0xa9, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xac}}, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) (async)
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

475.656843ms ago: executing program 3 (id=2358):
mmap$KVM_VCPU(&(0x7f00003fe000/0xc00000)=nil, 0x0, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {}, {0x0, @struct, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000400)={r2, 0x2, 0x0, [0x7ff, 0x7, 0xfffffffffffffffc, 0x5, 0x6e5], [0xfffffffffffff800, 0x17d, 0x49a25039, 0x5, 0xb, 0x2, 0x2, 0x8, 0xfffffffffffffff6, 0x40, 0x9, 0x6, 0x401, 0x4, 0xfffffffffffff6b8, 0xa8, 0x8001, 0x1, 0xa2, 0x9, 0x6, 0x6, 0x24b, 0x2, 0x1, 0x4ba, 0x6, 0x8, 0x8, 0x2, 0xffffffff, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x9, 0x9649, 0x5, 0x7a44, 0xfffffffffffffffc, 0xffff, 0x7, 0x6, 0x200, 0xff, 0x1, 0x6, 0x0, 0x5, 0xeb, 0x4, 0x2fa0000000000000, 0x0, 0x4, 0x64, 0x6, 0x8000, 0x9, 0x800, 0x9, 0x2, 0x6, 0x100000000, 0x7, 0x0, 0x7, 0x7, 0x7, 0x9, 0x0, 0x7, 0x9a, 0x4, 0x10001, 0x9, 0x2, 0x7, 0x8, 0x727ae7f4, 0x6, 0x7248, 0x1, 0x4, 0x5, 0x7fffffff, 0xfffffffffffffffd, 0xa1, 0x7df, 0x7fffffff, 0xe9f, 0x9dd, 0x0, 0x8000000000000001, 0x5, 0xffffffffffffa395, 0x7fff, 0x4, 0x3, 0x3, 0x8, 0x3, 0x3, 0xff, 0xffff, 0x1, 0xffffffff, 0x8001, 0x5, 0x643b, 0x480000000, 0x8, 0x10, 0x971, 0x9, 0x3, 0x6, 0x7, 0x6, 0x4]})
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000840)=0x2000000) (async)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x100, 0x4, 0x2}, 0x18)
mknodat(r3, &(0x7f0000000900)='./file0\x00', 0x4, 0x949) (async)
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000940)={[0x27d, 0x80000001, 0x921, 0x1, 0xcf8, 0xb816, 0x5, 0xe0000000000000, 0x7fffffff, 0xe, 0x0, 0x10, 0x80, 0x9, 0x81, 0x6], 0x2, 0x100c84}) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000a00), 0x66a9, 0xa0c40)
close(r5) (async)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000a40)={{0xaf4f, 0x100}, 0x100, './file0\x00'}) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020, 0x0, <r7=>0x0}, 0x2020) (async)
fstat(r4, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c80)={0x0, <r10=>0x0}, &(0x7f0000002cc0)=0xc) (async)
stat(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async)
statx(r3, &(0x7f0000002dc0)='./file0\x00', 0x4000, 0x100, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x0) (async)
getresgid(&(0x7f0000002fc0)=<r14=>0x0, &(0x7f0000003000), &(0x7f0000003040)) (async)
r15 = geteuid()
write$FUSE_DIRENTPLUS(r6, &(0x7f0000003080)={0x370, 0x0, r7, [{{0x4, 0x2, 0xfff, 0x5b00, 0x4, 0x101, {0x4, 0xf797, 0x100, 0x7, 0x7, 0x6, 0xfffffffe, 0x4, 0x4, 0x2000, 0x400, 0xffffffffffffffff, r9, 0x5, 0x6}}, {0x6, 0x1, 0x15, 0x9, '/dev/bus/usb/00#/00#\x00'}}, {{0x6, 0x0, 0x0, 0x4, 0x7ff, 0x6, {0x2, 0x5, 0x2888, 0x8, 0x8, 0x8, 0x19b6, 0xf, 0x1df, 0x7000, 0x8, r10, 0xffffffffffffffff, 0x200, 0xff}}, {0x1, 0x7c, 0x1, 0xfffffffe, '.'}}, {{0x4, 0x1, 0x7f, 0x9, 0xff, 0x9, {0x5, 0x81, 0x8, 0x8e, 0x9, 0x8, 0xa, 0xff, 0x8, 0xc000, 0x0, r11, r12, 0x8000, 0x1}}, {0x1, 0x7, 0x15, 0x6fe, '/dev/bus/usb/00#/00#\x00'}}, {{0x1, 0x2, 0xcb49, 0x1, 0x9, 0xfffff499, {0x5, 0x9a8, 0x2, 0x1, 0x424, 0x4, 0x0, 0x4, 0x2, 0xa000, 0x7, r13, r14, 0x200, 0x13}}, {0x1, 0x0, 0x15, 0xafa8, '/dev/bus/usb/00#/00#\x00'}}, {{0x0, 0x1, 0x5, 0x8, 0x5, 0x2, {0x3, 0x0, 0x6, 0x38198b8c, 0x81, 0x7, 0x0, 0x6a, 0x480, 0xc000, 0x40, r15, 0x0, 0x3, 0x8}}, {0x1, 0xc9, 0x15, 0xb, '/dev/bus/usb/00#/00#\x00'}}]}, 0x370) (async)
r16 = syz_open_dev$hiddev(&(0x7f0000003400), 0x6, 0x4201)
ioctl$HIDIOCGUSAGES(r16, 0xd01c4813, &(0x7f0000003440)={{0x3, 0x200, 0x136, 0x0, 0x9, 0x9}, 0xec, [0x10200000, 0x2, 0x3f, 0x7fffffff, 0x4, 0x10000, 0x6, 0xfffffffa, 0x7c, 0xb1da, 0x3, 0xc, 0x6, 0x7, 0x7fffffff, 0x70, 0x9, 0x10000, 0x7, 0x5, 0x8000, 0x4, 0xfff, 0xff, 0x4, 0x81, 0x1, 0xfffffffd, 0x8f8, 0x343, 0x3, 0x0, 0x4, 0xffffff80, 0x1, 0x7, 0xf, 0x46d, 0x0, 0x25, 0x1, 0x18d, 0xdb4b, 0x101, 0xaf34, 0x5, 0x0, 0x4, 0x47692e3f, 0x7, 0x5, 0x3, 0x772c, 0x26, 0x101, 0xa00000, 0x34, 0x1, 0x80000000, 0x2, 0x4, 0x8, 0x3, 0x3, 0xe, 0x9b7, 0x0, 0x5, 0x5, 0x9, 0x31d, 0x3, 0xffffffff, 0x100, 0x10000, 0xb79, 0x4000000, 0x4, 0x40, 0x6, 0x38, 0x6, 0x8, 0xfff, 0x7, 0x3, 0x1, 0xc67e, 0x2, 0xfffff8d4, 0xfffffff8, 0xffffffff, 0x3, 0x1, 0x3c, 0xc98f, 0x2, 0x8, 0x293, 0x6, 0x15, 0x1, 0x7f, 0x0, 0x2, 0x0, 0x8, 0x238, 0x0, 0x1, 0x0, 0xf3cc, 0x5, 0x8, 0x8000, 0x7, 0xe13, 0x0, 0x0, 0x1, 0x80, 0x2, 0x40, 0x2, 0x4, 0x9, 0x0, 0x200, 0x8, 0xddaa, 0x3c, 0x90da, 0x4, 0x9, 0x1000, 0xe, 0x0, 0x8, 0xfffffffc, 0x2, 0xfffffff7, 0x35c3e8e8, 0xffff, 0x0, 0xffffff48, 0x4, 0x2, 0x1, 0xd394, 0x0, 0x5, 0x0, 0x5, 0x8, 0x1, 0x9, 0x80000000, 0x2, 0xffffff80, 0x2491, 0xbb1c, 0x5, 0x7f, 0x2, 0x8, 0x0, 0xcd3, 0x1, 0x2, 0x0, 0x5, 0x8001, 0x1, 0x0, 0x3ff, 0xe9f, 0xe, 0x5, 0x0, 0x401, 0x96, 0x9a4, 0x7d926207, 0x2582, 0x10, 0x3, 0xb5bb, 0x7, 0x5, 0x3, 0x46, 0x2, 0x4, 0x200, 0xe, 0x1, 0x1, 0x5, 0x4d, 0x1, 0x3, 0xf536, 0x4, 0x2, 0x5, 0x1, 0x5, 0x0, 0xc, 0xf, 0x9, 0xcd, 0x7ff, 0x6, 0x4, 0xfff, 0x5, 0x3, 0x2, 0x1, 0x100, 0xfffffff7, 0xc, 0x3ff, 0xfff, 0x5, 0x7, 0x1, 0x2, 0x0, 0x9, 0xd, 0x3, 0x3, 0x8, 0xa, 0x329d4ea1, 0xfff, 0x4, 0x80000001, 0x5, 0xe65, 0xff, 0x10000, 0x101, 0x4, 0x8, 0x6, 0xff, 0x5, 0x9, 0xe41d, 0x8001, 0x1, 0x5, 0x8001, 0x6, 0x4, 0x0, 0x5, 0x8001, 0x100, 0x1, 0x0, 0x4, 0x0, 0x0, 0xf, 0x7, 0x2, 0x3, 0x6, 0x3, 0x8, 0x5, 0x1000, 0x3, 0x4, 0x6, 0x3, 0x7, 0x80000001, 0x6, 0x2c, 0x8, 0xffff8001, 0x7fffffff, 0x8, 0xfffffffd, 0xffffffff, 0x6, 0x5, 0xc4, 0x8, 0x0, 0x7, 0x8001, 0x5, 0x9, 0xfffffffa, 0x8, 0x81, 0xfffffff7, 0x8d2d, 0x8, 0x4, 0x5, 0x6, 0xe98, 0x82, 0x3, 0x2, 0x3, 0x1, 0x4, 0x2, 0x8, 0x4, 0x10, 0xff, 0x1, 0x1acb477d, 0xfffffff8, 0xffff, 0x2, 0x0, 0x1, 0x0, 0x2, 0x10001, 0x247b, 0xfffffff7, 0xb, 0xffffff29, 0x8cd, 0x5, 0x10, 0x9, 0x40, 0x3, 0x4, 0x4, 0x9, 0x5, 0x8001, 0x3ff, 0x4, 0x4, 0x2, 0x3, 0x4, 0x7, 0xfffffff8, 0x1, 0xffffffff, 0xe87, 0x5, 0x1000, 0x7, 0x9, 0x7fffffff, 0x1, 0x7ff, 0x2, 0x4, 0x9, 0x1ff, 0xffffc6bb, 0x4, 0x8, 0x1, 0x81, 0x5, 0x4, 0x3, 0x7, 0x901, 0x9, 0x8, 0x40b, 0x5, 0xc, 0x0, 0xb, 0x3, 0x6, 0x6, 0x6, 0x101, 0x200, 0x4, 0x6, 0xd, 0xfffffffa, 0x9, 0x8, 0x40, 0x40, 0x0, 0xfffffffb, 0x8, 0x9, 0xf705, 0x9, 0x2, 0x1, 0xbb6, 0x2, 0x1, 0x400, 0x3, 0xead, 0x4, 0x3, 0x7a, 0x8a24, 0xfffffdd9, 0xf, 0xffffffb8, 0x7, 0xf, 0x80, 0x80, 0x2, 0x6, 0x6, 0x4, 0x800, 0x4e60, 0x75f, 0x6, 0x8, 0x7, 0x7ff, 0x7b, 0x200, 0x400, 0x0, 0x1, 0x800, 0x80000000, 0xb, 0xfff, 0x3, 0x1, 0xc0, 0x5, 0x7642, 0x6, 0x1000, 0x8, 0x4, 0x2, 0x3, 0xdc, 0x9, 0xf, 0x800, 0x4, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x80000000, 0xfc, 0x9, 0x6, 0x3, 0x7, 0x0, 0x4, 0x5, 0x9, 0x5, 0x8, 0x0, 0xc5aec7b, 0xa1, 0x401, 0x6, 0x3, 0x400d, 0x1, 0x3ff, 0x68eb, 0x5, 0x63acf115, 0xd, 0x8, 0x1ece, 0x1, 0x40, 0x9e3, 0x3ff, 0xfdd, 0x0, 0xf3c5, 0x4, 0x5, 0x8, 0x8, 0x7, 0x6, 0x1a, 0x7, 0x0, 0x3, 0x1, 0x82, 0x1, 0x0, 0x9, 0xffff, 0x100, 0x4, 0x101, 0x3, 0x5c, 0xe7, 0x9380, 0xff, 0xe2, 0x755, 0x5, 0xb5, 0x9c90, 0xfffffffc, 0xb, 0xfffffff5, 0xfff, 0x4, 0x1, 0xa8d5, 0x401, 0x10, 0x0, 0x9, 0x3, 0x90, 0x9, 0x3, 0x5, 0x4, 0x3e9, 0xa, 0xe252, 0xc37, 0xa6fb, 0x100, 0x3, 0x5, 0x2, 0x400, 0x5, 0x7, 0x2, 0x120d2bf8, 0x2f1, 0x10000, 0x4, 0x7, 0xfffffc00, 0x1, 0x0, 0x7, 0x4, 0x7f, 0x7fff, 0x2, 0x6, 0x0, 0x28fc, 0x6, 0x80000000, 0x9, 0x10, 0xdb3, 0x2, 0xfff, 0x101, 0xbd7, 0x10, 0xb, 0xe, 0x1, 0x7fff, 0xada8, 0x9, 0x5, 0xffffffff, 0x3, 0xfffff649, 0x1, 0x5, 0xc, 0x7, 0x3, 0x9, 0x3, 0x7, 0xfffffffe, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x80, 0x6, 0x5, 0x8, 0xf, 0x2, 0x18400000, 0x9, 0xe, 0x9, 0xffff, 0x1000, 0x3, 0x0, 0x7, 0x2, 0x9, 0x5, 0x1000, 0x4, 0x8, 0x4, 0x4, 0x2, 0x8, 0x1, 0x84, 0xfffffff3, 0x7ff, 0x7, 0x80, 0xc, 0x3, 0x4, 0x5, 0xffff8000, 0x362, 0x6, 0x4, 0x7ff, 0x200, 0x6, 0x2, 0x9, 0xffffffff, 0xfffffb81, 0xc, 0xd2b, 0x0, 0x38aa, 0x9b, 0x7, 0x5, 0x200, 0x24, 0xfff, 0x7fff, 0x12e8, 0x101, 0x6, 0x4, 0xffffffff, 0x3ff, 0x9, 0x1, 0x2, 0x2c2, 0x66, 0x2, 0x1000, 0x9, 0xfffffffd, 0x9, 0x0, 0x7f, 0xff, 0x2, 0xbd78, 0xfffffffb, 0x2, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7f, 0x4, 0x9, 0x5, 0x7, 0x2e26c00, 0x5, 0xfffffffb, 0x4d, 0x0, 0x3, 0x4, 0x0, 0x100, 0x1, 0x9, 0x9, 0x101, 0x7fff, 0x5, 0x7, 0x74e, 0x7, 0x8, 0x800, 0x6000000, 0xfff, 0x3, 0x4, 0x4, 0x9f, 0x10001, 0x3, 0x9, 0x40, 0x3, 0x40, 0x8000, 0x2, 0x4, 0x6, 0x1, 0x0, 0x5, 0x1, 0x10001, 0x1, 0x3, 0x1, 0x76, 0x484, 0x6449, 0x10001, 0x6, 0x9, 0xb, 0x12, 0x7, 0x60, 0x2, 0xbb3a, 0x9, 0x6, 0x7, 0x71e, 0x0, 0x1b, 0x401, 0x3, 0x1, 0x5, 0x2, 0x8, 0x80, 0x2, 0x1, 0x5, 0x33, 0x6, 0x4bb, 0x6, 0x7, 0x4a, 0x0, 0x8, 0x8, 0x5, 0x2, 0x4f, 0x98b5, 0x7, 0x5, 0x5, 0x25, 0x2, 0xf56, 0xfffffff9, 0x1, 0x8, 0x401, 0x8, 0x0, 0x10000, 0xde, 0x586, 0x9, 0xf, 0x80000001, 0x444e88c, 0x2, 0xfb4c, 0x4, 0x80, 0xda2c, 0xfd, 0xfff, 0x3, 0x8000, 0x8, 0x9f, 0xfffffff8, 0x200, 0xe1, 0x6, 0x557, 0x3, 0x3ff, 0x1, 0x1, 0xc6, 0x7, 0x1, 0x9, 0x4, 0x5, 0x8, 0x3, 0x6, 0x6, 0xfffffff4, 0x30, 0x80000000, 0xf, 0x40, 0x4, 0x9, 0x80000001, 0x5, 0x1, 0xff, 0x100, 0x2, 0x1, 0x7, 0x7, 0x200000, 0x4, 0x709, 0x2, 0x9, 0x20000000, 0x4, 0x40, 0xfcc9, 0x2, 0x7, 0x5, 0x8001, 0x3, 0x9, 0x40, 0x34e, 0x5, 0x7, 0x7, 0x1720000, 0x1ff, 0x7, 0xffffffff, 0x1, 0x3, 0x0, 0x1, 0x8, 0x4, 0x3, 0x742, 0xff, 0x1a8d, 0xfffffffd, 0xbc20, 0x3, 0x8, 0x8, 0x1, 0xffffffff, 0x9, 0x4, 0x0, 0x9e, 0xda8, 0x1, 0x7, 0x7, 0xebdf, 0x0, 0x3, 0x3, 0x4, 0x1, 0x6, 0x6, 0x3, 0x2, 0x680da17f, 0x1, 0x80, 0x6, 0x40, 0x0, 0x0, 0x7ff, 0xa53d, 0x6, 0xfffffffc, 0x8000, 0xfffff390, 0x5, 0x66, 0x5, 0x8, 0xa98d, 0x7, 0x800, 0x1000, 0xfe, 0xffffffff, 0x1, 0x9, 0x2, 0x1, 0x10, 0x9, 0x80000001, 0xba, 0x81, 0x58cc, 0x0, 0xffffffff, 0x400, 0xffffffff, 0xe, 0x10001, 0x9, 0xc4, 0x800, 0x3, 0x3f8, 0x0, 0x6f1, 0x9, 0x4, 0x3, 0x7, 0x6, 0x7fffffff, 0x4, 0x6, 0x7fff, 0xb95b, 0xfffffff9, 0x2, 0xf86, 0x8f, 0x9, 0x6, 0xd, 0xfffffff2, 0x7fffffff, 0xa8c, 0x13a, 0x7, 0x7, 0x9, 0x42e3, 0xf5, 0x2a, 0x1, 0xb96a, 0x5, 0x3, 0xe23, 0x8, 0x4, 0x1, 0x7, 0xbb, 0x4, 0x7, 0x5, 0x8, 0x80000001, 0x5, 0x3, 0x5, 0xffffffff, 0x9, 0x17e, 0x3, 0x5, 0x8001, 0x3844, 0x5a, 0x4, 0x7, 0x3ff, 0x1000, 0x4ad9, 0x8000, 0x9, 0x0, 0xfffffffc, 0x0, 0x4b777fb1, 0x0, 0x5, 0x0, 0x1, 0x10001, 0x7, 0xffff]}) (async)
memfd_create(&(0x7f0000004480)='\x00', 0x1)
mount$bpf(0x0, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500), 0x44, &(0x7f0000004540)={[{@mode={'mode', 0x3d, 0xb6}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x1}}], [{@subj_role}, {@obj_type={'obj_type', 0x3d, '\\'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, ')'}}]}) (async)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000004600)={0x2, r16}) (async)
mount$overlay(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x1000006, &(0x7f00000046c0)={[{@verity_on}, {@default_permissions}, {@metacopy_off}, {@userxattr}, {@metacopy_off}, {@verity_on}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfstransmute}, {@euid_eq={'euid', 0x3d, r8}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '6@.-,[-#/!!,@&,\xda}^)'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'fsmagic'}}, {@audit}, {@appraise}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004800)={[{0x2d, 'cpuset'}, {0x2d, 'rdma'}, {0x2b, 'perf_event'}, {0x2d, 'cpuacct'}]}, 0x23)

474.317833ms ago: executing program 3 (id=2359):
syslog(0xa, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

474.081493ms ago: executing program 4 (id=2360):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getpeername(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xffffffffffffff32}}, 0x10}], 0x0, 0x0, 0x0})

473.809783ms ago: executing program 4 (id=2361):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe1, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x70, 0x1, 0x7, 0x8}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})

416.528754ms ago: executing program 4 (id=2362):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0)
r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x81000)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x4e20, @multicast1}})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x1)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

398.163424ms ago: executing program 4 (id=2363):
prctl$PR_MCE_KILL(0x26, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x10)
readv(r1, &(0x7f0000006240)=[{&(0x7f0000005100)=""/4096, 0x1000}], 0x1)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000050002081000418e0fff0004fcff", 0x58}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000080)={0x1, 0x200, 0x93})
ptrace(0x10, r2)
ptrace$poke(0x5, r2, &(0x7f0000000000), 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f00000003c0)={0x20000000, &(0x7f0000000100), &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/52, 0x34, &(0x7f0000000240)=""/60, &(0x7f0000000280)=[r2, r2], 0x6, {r3}}, 0xffffff96)
capget(&(0x7f0000000340)={0x20071026, r5}, &(0x7f0000000380)={0x2, 0xe, 0x7f, 0x5, 0x2})
syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=<r6=>0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write(r6, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='wg0\x00')
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x2)

326.250935ms ago: executing program 4 (id=2364):
openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
bind$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

268.327257ms ago: executing program 4 (id=2365):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7)
getpeername$packet(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000380))
pread64(r0, &(0x7f0000000000)=""/212, 0xd4, 0x2)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', <r4=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast2, r4}, 0xc)

0s ago: executing program 7 (id=2366):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xe4\xee3\x12\\e}\xac\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\UL\x18\x99]\xaba\x003\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\x19|\x82\xb7\x83\xdc+\xb2\xe7\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0x2000, 0x0, 0x0, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26}, {}, {0xd000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000})
ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000040))
bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc)
r6 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
connect$vsock_stream(r6, &(0x7f0000000480)={0x28, 0x0, 0x2710, @local}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0x800, 0x4, 0x36, 0x55, 0x7ff, 0x81, 0x3, 0x9, 0x5, 0x9dc1, 0x4, 0x5, 0x5, 0x4, 0x3, 0x7], 0xeeee0000, 0x1014})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xaf\x85\xfe\xb0\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xb2;8\xd4}\xd2\xb7\xa5\xfc\vzlC\x95\xa98\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L\xab+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\x89\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\xactf\xcb\x96,\xf7\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,\xe0\xfe\xcb\xdb\x86\xe7L\xde^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x99\x15\x87\x14\x13\x18\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\xb1\x96\r\x94\xb1\x1c\x04<\xcd\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KM9+\xc4:I%,!\xfa\xee\xf9\x92;\\e)p\"\xed\x1c\x15h7\xc0\xd95\xda\xb9\xb5\x06\x92\xb6m\x9d^\xa5>\xc0l\xca\x03\xf0m.A]\xc1\xcd\xa8\xad(\xdb\xfc0\xd1\x06Hln\xee\xdc\x91\xefOl,\x87%yUa\a\x9a\x17\a\x00\x00\x00\xb9\x84c\xa7I\xa9F\xa1\x0f]\xe6\xf1\x90\xeb\xb9\xff\x95\x99~]\xa3Q8F\xbbs\\k\xd6=\x80p\xaf\xcc}\xa9g\xa3\xcd\x1b\xba\xc4\xaarC\xf50(\x05~?\xe6T\xf0\x11\r\xa5\x1e\xc9\xa0\xc0\x8b\xf2\x84\xad\x93V#\xfd\xefx\xf7\x00'/878)

kernel console output (not intermixed with test programs):

[   T10] usb 5-1: Product: syz
[  158.044360][   T10] usb 5-1: Manufacturer: syz
[  158.048968][   T10] usb 5-1: SerialNumber: syz
[  158.054226][   T10] usb 5-1: config 0 descriptor??
[  158.060305][   T10] usb 5-1: bad CDC descriptors
[  158.260754][  T306] usb 5-1: USB disconnect, device number 33
[  158.786512][   T36] audit: type=1400 audit(7002952001.057:459): avc:  denied  { mounton } for  pid=5304 comm="syz.4.1710" path="/239/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  158.951871][   T36] audit: type=1400 audit(7002952001.227:460): avc:  denied  { create } for  pid=5313 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  159.003822][ T5322] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1716'.
[  159.190110][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  159.340083][   T10] usb 5-1: Using ep0 maxpacket: 32
[  159.346602][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  159.355012][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  159.363702][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  159.372709][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.382441][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.392531][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  159.405801][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  159.415611][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.424516][   T10] usb 5-1: config 0 descriptor??
[  159.630831][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.631673][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  159.641704][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.910587][  T306] usb 5-1: USB disconnect, device number 34
[  159.918778][  T306] usblp0: removed
[  159.985526][ T5340] overlayfs: failed to clone upperpath
[  160.123333][ T5349] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  160.171742][ T5353] /dev/rnullb0: Can't lookup blockdev
[  160.201857][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'.
[  160.390716][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.397824][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.404931][ T5368] bridge_slave_0: entered allmulticast mode
[  160.411579][ T5368] bridge_slave_0: entered promiscuous mode
[  160.418231][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.425332][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.432563][ T5368] bridge_slave_1: entered allmulticast mode
[  160.438955][ T5368] bridge_slave_1: entered promiscuous mode
[  160.451867][   T12] bridge_slave_1: left allmulticast mode
[  160.457534][   T12] bridge_slave_1: left promiscuous mode
[  160.463221][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.471022][   T12] bridge_slave_0: left allmulticast mode
[  160.476751][   T12] bridge_slave_0: left promiscuous mode
[  160.482512][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.490553][   T12] tipc: Resetting bearer <eth:gre0>
[  160.510591][   T12] tipc: Disabling bearer <eth:gre0>
[  160.582699][   T12] tipc: Disabling bearer <udp:syz1>
[  160.588108][   T12] tipc: Disabling bearer <udp:syz2>
[  160.593502][   T12] tipc: Left network mode
[  160.600907][   T12] veth1_macvtap: left promiscuous mode
[  160.606437][   T12] veth0_vlan: left promiscuous mode
[  160.656261][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.663426][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.670802][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.677858][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.699759][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.707727][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.718160][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.725346][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.735134][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.742227][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.768820][ T5368] veth0_vlan: entered promiscuous mode
[  160.781659][ T5368] veth1_macvtap: entered promiscuous mode
[  160.795561][ T5379] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  160.920189][  T315] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  161.071096][  T315] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  161.079431][  T315] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  161.079885][   T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  161.088640][  T315] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  161.106318][  T315] usb 5-1: config 220 has no interface number 2
[  161.112734][  T315] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  161.125969][  T315] usb 5-1: config 220 interface 0 has no altsetting 0
[  161.132816][  T315] usb 5-1: config 220 interface 76 has no altsetting 0
[  161.139689][  T315] usb 5-1: config 220 interface 1 has no altsetting 0
[  161.147930][  T315] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  161.157372][  T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.165533][  T315] usb 5-1: Product: syz
[  161.169723][  T315] usb 5-1: Manufacturer: syz
[  161.174365][  T315] usb 5-1: SerialNumber: syz
[  161.241040][   T10] usb 4-1: config index 0 descriptor too short (expected 2319, got 36)
[  161.249459][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.259753][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 4
[  161.268812][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  161.278064][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.287172][   T10] usb 4-1: config 0 descriptor??
[  162.659357][ T5453] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.1763'.
[  163.457896][   T36] audit: type=1400 audit(7002952005.727:461): avc:  denied  { create } for  pid=5484 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  163.477777][   T36] audit: type=1400 audit(7002952005.727:462): avc:  granted  { setsecparam } for  pid=5484 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  163.686006][  T315] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  163.692586][  T315] usb 5-1: No valid video chain found.
[  163.695563][ T5493] overlayfs: missing 'lowerdir'
[  163.698396][  T315] usb 5-1: selecting invalid altsetting 0
[  163.715818][  T315] usb 5-1: USB disconnect, device number 35
[  163.860943][   T10] usb 4-1: USB disconnect, device number 15
[  163.883551][   T36] audit: type=1400 audit(7002952006.157:463): avc:  denied  { setattr } for  pid=5497 comm="syz.3.1777" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  164.069502][  T315] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  164.220585][  T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  164.231832][  T315] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  164.241002][  T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.249027][  T315] usb 5-1: Product: syz
[  164.253278][  T315] usb 5-1: Manufacturer: syz
[  164.257887][  T315] usb 5-1: SerialNumber: syz
[  164.263453][  T315] usb 5-1: config 0 descriptor??
[  164.479068][  T315] usb 5-1: USB disconnect, device number 36
[  164.550828][ T5507] netlink: 'syz.5.1779': attribute type 46 has an invalid length.
[  164.587596][ T5515] cgroup: Unknown subsys name 'measure'
[  164.596940][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  164.605135][ T5515] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  164.616810][ T5515] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 4294967200)
[  164.616834][ T5515] rust_binder: Error while translating object.
[  164.629577][ T5515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  164.635780][ T5515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  165.072068][ T5521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.081841][ T5521] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  165.100429][ T5523] binder: Unknown parameter '@'
[  165.115213][   T36] audit: type=1326 audit(7002952007.388:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.5.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990f38e929 code=0x0
[  165.278241][   T36] audit: type=1400 audit(7002952007.548:465): avc:  denied  { shutdown } for  pid=5527 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.449313][  T315] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  165.600738][  T315] usb 6-1: unable to get BOS descriptor or descriptor too short
[  165.609207][  T315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  165.619205][  T315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  165.629169][  T315] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.644425][  T315] usb 6-1: string descriptor 0 read error: -22
[  165.650708][  T315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.659801][  T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.668685][ T5526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.675970][ T5526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.683863][  T315] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  165.886048][ T5526] bridge0: entered allmulticast mode
[  165.891692][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'.
[  165.900663][ T5526] bridge_slave_1: left allmulticast mode
[  165.906345][ T5526] bridge_slave_1: left promiscuous mode
[  165.912048][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.919849][ T5526] bridge_slave_0: left allmulticast mode
[  165.925503][ T5526] bridge_slave_0: left promiscuous mode
[  165.931221][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.940216][ T5526] bridge0 (unregistering): left allmulticast mode
[  166.151876][ T5535] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  166.151899][ T5535] rust_binder: Error while translating object.
[  166.164202][ T5535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  166.170614][ T5535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:779
[  166.191169][ T5538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:781
[  166.281104][ T5543] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.290761][ T5543] rust_binder: Write failure EINVAL in pid:787
[  166.398215][ T5547] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.406104][ T5547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  166.412672][ T5547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:791
[  166.422517][ T5548] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.464897][ T5552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  166.554237][   T36] audit: type=1400 audit(7002952008.828:466): avc:  denied  { read } for  pid=5561 comm="syz.1.1796" name="/" dev="configfs" ino=1660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.576358][   T36] audit: type=1400 audit(7002952008.828:467): avc:  denied  { open } for  pid=5561 comm="syz.1.1796" path="/" dev="configfs" ino=1660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.598528][   T36] audit: type=1400 audit(7002952008.828:468): avc:  denied  { write } for  pid=5561 comm="syz.1.1796" name="/" dev="configfs" ino=1660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.629260][  T563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  166.629931][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  166.656465][ T5566] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  166.656487][ T5566] rust_binder: Error while translating object.
[  166.668889][ T5566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  166.675241][ T5566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[  166.685487][ T5568] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.685492][ T5567] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  166.685508][ T5567] rust_binder: Error while translating object.
[  166.719910][ T5567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  166.719949][ T5567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[  166.789161][   T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  166.959154][   T45] usb 5-1: Using ep0 maxpacket: 16
[  166.965617][   T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.977160][   T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.986943][   T45] usb 5-1: config 0 interface 0 has no altsetting 0
[  166.993588][   T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  167.003006][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.011684][   T45] usb 5-1: config 0 descriptor??
[  167.287529][   T36] audit: type=1400 audit(7002952009.558:469): avc:  denied  { getopt } for  pid=5571 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  167.287753][ T5572] tmpfs: Unknown parameter ''
[  167.348199][   T36] audit: type=1400 audit(7002952009.618:470): avc:  denied  { search } for  pid=5573 comm="syz.1.1800" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  167.424905][   T45] hid (null): unknown global tag 0x6c
[  167.430380][   T45] hid (null): unknown global tag 0xe
[  167.435721][   T45] hid (null): unknown global tag 0xc
[  167.999038][   T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  168.102321][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.106958][  T312] usb 6-1: USB disconnect, device number 15
[  168.109499][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.124114][ T5601] bridge_slave_0: entered allmulticast mode
[  168.130531][ T5601] bridge_slave_0: entered promiscuous mode
[  168.137110][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.144586][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.150418][ T5606] 9pnet_fd: Insufficient options for proto=fd
[  168.152103][ T5601] bridge_slave_1: entered allmulticast mode
[  168.164387][ T5601] bridge_slave_1: entered promiscuous mode
[  168.168967][   T45] usb 4-1: Using ep0 maxpacket: 32
[  168.175745][ T5606] SELinux: failed to load policy
[  168.176730][   T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  168.189242][   T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  168.189623][   T46] bridge_slave_1: left allmulticast mode
[  168.197897][   T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  168.197934][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  168.204255][   T46] bridge_slave_1: left promiscuous mode
[  168.212704][   T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  168.223077][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.228742][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  168.258010][   T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  168.258205][   T46] bridge_slave_0: left allmulticast mode
[  168.267201][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.275167][   T46] bridge_slave_0: left promiscuous mode
[  168.285313][ T5610] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  168.286428][ T5610] rust_binder: Error while translating object.
[  168.287211][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.295604][ T5610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.308373][ T5610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[  168.318068][   T45] usb 4-1: config 0 descriptor??
[  168.362062][ T5614] rust_binder: Error while translating object.
[  168.362104][ T5614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.368352][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[  168.475443][ T5617] wg2: entered promiscuous mode
[  168.489514][ T5617] wg2: entered allmulticast mode
[  168.536505][   T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  168.562157][   T46] veth0_vlan: left promiscuous mode
[  168.616147][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.623269][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.632398][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.639516][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.668754][ T5601] veth0_vlan: entered promiscuous mode
[  168.680875][ T5601] veth1_macvtap: entered promiscuous mode
[  168.711423][ T5622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'.
[  168.739046][ T1946] usb 4-1: USB disconnect, device number 16
[  168.745795][ T1946] usblp0: removed
[  168.749577][  T315] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  168.900135][  T315] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  168.908236][  T315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.918429][  T315] usb 6-1: config 0 has no interface number 0
[  168.924599][  T315] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  168.937807][  T315] usb 6-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  168.946922][  T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.955704][  T315] usb 6-1: config 0 descriptor??
[  168.965970][ T4221] udevd[4221]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  168.981794][  T312] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  169.118905][  T312] usb 2-1: device descriptor read/64, error -71
[  169.210440][  T315] usb 6-1: USB disconnect, device number 16
[  169.334629][ T5630] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.368895][  T312] usb 2-1: device descriptor read/64, error -71
[  169.416433][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  169.416452][   T36] audit: type=1400 audit(7002952011.688:472): avc:  denied  { append } for  pid=5631 comm="syz.3.1820" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  169.452508][  T315] usb 5-1: USB disconnect, device number 37
[  169.639056][  T312] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  169.758757][ T5645] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1823'.
[  169.788816][  T312] usb 2-1: device descriptor read/64, error -71
[  170.048828][  T312] usb 2-1: device descriptor read/64, error -71
[  170.147045][ T5657] rust_binder: Error while translating object.
[  170.147105][ T5657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  170.153620][ T5657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:104
[  170.168859][  T312] usb usb2-port1: attempt power cycle
[  170.469944][  T433] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  170.528718][  T312] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  170.548711][  T306] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  170.549812][  T312] usb 2-1: device descriptor read/8, error -71
[  170.618712][  T433] usb 4-1: Using ep0 maxpacket: 32
[  170.625007][  T433] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  170.633542][  T433] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  170.642222][  T433] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  170.651414][  T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  170.661216][  T433] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  170.670969][  T433] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  170.684172][  T433] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  170.693305][  T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.702371][  T312] usb 2-1: device descriptor read/8, error -71
[  170.708830][  T433] usb 4-1: config 0 descriptor??
[  170.710261][  T306] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  170.718702][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  170.724763][  T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.743355][  T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.753164][  T306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  170.767605][  T306] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  170.776790][  T306] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  170.784935][  T306] usb 6-1: Manufacturer: syz
[  170.790400][  T306] usb 6-1: config 0 descriptor??
[  170.888891][   T10] usb 5-1: Using ep0 maxpacket: 32
[  170.895213][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  170.903570][   T10] usb 5-1: config 0 has no interface number 0
[  170.911475][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  170.920786][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.929355][   T10] usb 5-1: Product: syz
[  170.933674][   T10] usb 5-1: Manufacturer: syz
[  170.938306][   T10] usb 5-1: SerialNumber: syz
[  170.943017][  T433] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  170.953847][  T312] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  170.963527][   T10] usb 5-1: config 0 descriptor??
[  170.969601][   T10] smsc95xx v2.0.0
[  170.989700][  T312] usb 2-1: device descriptor read/8, error -71
[  171.008221][  T306] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  171.016394][  T306] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  171.025396][  T306] appleir 0003:05AC:8243.000B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  171.119644][  T312] usb 2-1: device descriptor read/8, error -71
[  171.125016][  T306] usb 4-1: USB disconnect, device number 17
[  171.132683][  T306] usblp0: removed
[  171.228738][  T312] usb usb2-port1: unable to enumerate USB device
[  171.779874][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  171.798597][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  171.807988][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  171.828598][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  171.838364][   T10] usb 5-1: USB disconnect, device number 38
[  171.897542][ T5692] binder: Unknown parameter 'fscontext?}'
[  171.933209][ T5694] binder: Unknown parameter '��m�!�H���W�zRR�S��'
[  172.007287][ T5702] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  172.032518][ T5704] can: request_module (can-proto-0) failed.
[  172.368710][   T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  172.428511][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.430223][ T5713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  172.436717][ T5713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:65
[  172.512186][ T5716] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.521951][ T5716] rust_binder: Error while translating object.
[  172.528565][ T5716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  172.534777][   T10] usb 2-1: Invalid ep0 maxpacket: 64
[  172.534820][ T5716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67
[  172.549596][  T306] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  172.668449][   T10] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  172.708815][  T306] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  172.723988][  T306] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  172.733115][  T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  172.741563][  T306] usb 5-1: Product: syz
[  172.745762][  T306] usb 5-1: Manufacturer: syz
[  172.750411][  T306] usb 5-1: SerialNumber: syz
[  172.755598][  T306] usb 5-1: config 0 descriptor??
[  172.761486][  T306] cdc_acm 5-1:0.0: Zero length descriptor references
[  172.768194][  T306] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[  172.821961][   T10] usb 2-1: Invalid ep0 maxpacket: 64
[  172.827720][   T10] usb usb2-port1: attempt power cycle
[  172.848741][   T36] audit: type=1400 audit(7002952015.129:473): avc:  denied  { audit_read } for  pid=5723 comm="syz.5.1849" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  172.858188][ T5724] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  172.888018][ T5726] rust_binder: Write failure EFAULT in pid:127
[  172.964448][  T312] usb 5-1: USB disconnect, device number 39
[  173.168403][   T10] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  173.188712][   T10] usb 2-1: Invalid ep0 maxpacket: 64
[  173.304727][ T5728] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.305376][ T5729] rust_binder: Error in use_page_slow: ESRCH
[  173.311909][ T5729] rust_binder: use_range failure ESRCH
[  173.318022][ T5729] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  173.323592][   T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  173.323875][ T5729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  173.339201][ T5729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:71
[  173.348855][ T1946] usb 6-1: USB disconnect, device number 17
[  173.348857][   T10] usb 2-1: Invalid ep0 maxpacket: 64
[  173.369220][   T10] usb usb2-port1: unable to enumerate USB device
[  173.478363][ T1946] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  173.639626][ T1946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  173.650664][ T1946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.660476][ T1946] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.673388][ T1946] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.682490][ T1946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.691420][ T1946] usb 6-1: config 0 descriptor??
[  173.728355][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  173.878530][   T10] usb 5-1: Using ep0 maxpacket: 32
[  173.884899][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  173.893371][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  173.902332][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  173.911352][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  173.921044][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  173.930819][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  173.943826][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  173.952903][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.961723][   T10] usb 5-1: config 0 descriptor??
[  174.153437][ T5735] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  174.154063][ T5735] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 93)
[  174.160592][ T5735] rust_binder: Error while translating object.
[  174.171068][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  174.171080][ T5735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  174.188015][ T5735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75
[  174.304941][ T1946] usbhid 6-1:0.0: can't add hid device: -71
[  174.320063][ T1946] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  174.329036][ T1946] usb 6-1: USB disconnect, device number 18
[  174.369783][    T9] usb 5-1: USB disconnect, device number 40
[  174.378843][    T9] usblp0: removed
[  174.458483][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  174.608209][   T10] usb 4-1: Using ep0 maxpacket: 32
[  174.614839][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  174.623060][   T10] usb 4-1: config 0 has no interface number 0
[  174.629200][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  174.637369][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  174.646456][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.654479][   T10] usb 4-1: Product: syz
[  174.658678][   T10] usb 4-1: Manufacturer: syz
[  174.663285][   T10] usb 4-1: SerialNumber: syz
[  174.668572][   T10] usb 4-1: config 0 descriptor??
[  174.674372][   T10] smsc75xx v1.0.0
[  175.002751][ T5755] rust_binder: Write failure EINVAL in pid:139
[  175.068276][ T5760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.077496][ T5760] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  175.084926][ T5760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.190732][ T5765] fuse: Bad value for 'group_id'
[  175.202687][ T5765] fuse: Bad value for 'group_id'
[  175.239696][   T36] audit: type=1400 audit(7002952017.519:474): avc:  denied  { create } for  pid=5768 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  175.260372][   T36] audit: type=1400 audit(7002952017.519:475): avc:  denied  { write } for  pid=5768 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  175.281009][   T36] audit: type=1400 audit(7002952017.519:476): avc:  denied  { nlmsg_write } for  pid=5768 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  175.301860][   T36] audit: type=1400 audit(7002952017.539:477): avc:  denied  { mounton } for  pid=5770 comm="syz.4.1866" path="/proc/825/cgroup" dev="proc" ino=30365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  175.326693][ T5776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:828
[  175.328695][ T5769] cgroup: Invalid name
[  175.338129][  T306] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  175.363618][ T5778] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1868'.
[  175.427670][ T5780] binder: Unknown parameter 'defcontext01777777777777777777777'
[  175.490776][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  175.501919][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  175.508532][  T306] usb 6-1: Using ep0 maxpacket: 32
[  175.512037][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  175.518082][  T306] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 202, changing to 11
[  175.527373][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  175.548082][  T306] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  175.548160][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  175.568115][  T306] usb 6-1: config 1 interface 0 has no altsetting 0
[  175.573043][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  175.586253][  T306] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40
[  175.587961][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  175.596789][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.607831][   T10] usb 4-1: USB disconnect, device number 18
[  175.616438][  T306] usb 6-1: Product: 业೔ᇠ淫艹䅷侕츨믪횓꺖ꏃἋ旫㜸拂릡똲秓䄤撉悂䭌ﰅ堛ご᧎ᛋ睭읖ಬ岾ꅴ舫⹄賦ლ倦햼ዑ᧤在⛎ꍳ铩计筱踟覀ᛄ쉁〟㐚甫㡻䂘㉶焐ꃹ͡ᩧ酸襦뢠韜쌷⩎赑腦챙੖壈젚쾱잜ᵱꙂᓖ蟢蓺촶傲･톭ᬻ瓁ꍠ潅᛺甛탎黟
[  175.651699][  T306] usb 6-1: Manufacturer: о
[  175.656298][  T306] usb 6-1: SerialNumber: syz
[  175.863556][ T5760] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  175.867712][  T306] usbhid 6-1:1.0: can't add hid device: -71
[  175.881593][  T306] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  175.891017][  T306] usb 6-1: USB disconnect, device number 19
[  176.018590][   T36] audit: type=1326 audit(7002952018.299:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150a78e929 code=0x0
[  176.124972][ T5791] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.285898][ T5798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:839
[  176.409551][ T5800] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  176.427490][ T5800] rust_binder: Error while translating object.
[  176.453210][ T5800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  176.465041][ T5800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[  176.538003][  T306] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  176.717949][  T306] usb 5-1: Using ep0 maxpacket: 32
[  176.724220][  T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.735715][  T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.746905][  T306] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  176.761188][  T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.778127][  T306] usb 5-1: config 0 descriptor??
[  177.187802][  T306] smartjoyplus 0003:0925:8866.000C: global environment stack underflow
[  177.196588][  T306] smartjoyplus 0003:0925:8866.000C: item 0 1 1 11 parsing failed
[  177.206723][  T306] smartjoyplus 0003:0925:8866.000C: parse failed
[  177.213313][  T306] smartjoyplus 0003:0925:8866.000C: probe with driver smartjoyplus failed with error -22
[  177.227908][ T1946] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  177.378934][ T1946] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  177.389865][ T1946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.400941][ T1946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.410792][ T1946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  177.424628][ T1946] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  177.433770][ T1946] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  177.441918][ T1946] usb 4-1: Manufacturer: syz
[  177.447146][ T1946] usb 4-1: config 0 descriptor??
[  177.587470][   T36] audit: type=1400 audit(7002952019.859:479): avc:  denied  { lock } for  pid=5826 comm="syz.5.1885" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  177.618057][  T306] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  177.618757][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'.
[  177.636005][ T5829] rust_binder: Write failure EFAULT in pid:163
[  177.652430][   T36] audit: type=1400 audit(7002952019.929:480): avc:  denied  { unlink } for  pid=5830 comm="syz.5.1887" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  177.757860][  T306] usb 2-1: device descriptor read/64, error -71
[  177.861796][ T1946] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  177.869241][ T1946] appleir 0003:05AC:8243.000D: No inputs registered, leaving
[  177.878371][ T1946] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  177.967841][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  177.997837][  T306] usb 2-1: device descriptor read/64, error -71
[  178.117856][    T9] usb 6-1: Using ep0 maxpacket: 16
[  178.121114][ T1946] usb 4-1: USB disconnect, device number 19
[  178.125881][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.140000][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  178.149124][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.157850][    T9] usb 6-1: config 0 descriptor??
[  178.237771][  T306] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  178.367812][  T306] usb 2-1: device descriptor read/64, error -71
[  178.567154][    T9] appleir 0003:05AC:8241.000E: unknown main item tag 0x2
[  178.577725][    T9] appleir 0003:05AC:8241.000E: item fetching failed at offset 4/5
[  178.585852][    T9] appleir 0003:05AC:8241.000E: parse failed
[  178.592819][    T9] appleir 0003:05AC:8241.000E: probe with driver appleir failed with error -22
[  178.607019][    T9] usb 6-1: USB disconnect, device number 20
[  178.607763][  T306] usb 2-1: device descriptor read/64, error -71
[  178.648469][ T5846] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  178.657324][ T5846] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  178.685862][ T5844] kvm: pic: non byte write
[  178.737820][  T306] usb usb2-port1: attempt power cycle
[  178.790807][ T5858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.027677][ T1946] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  179.057772][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  179.077768][  T306] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  179.098931][  T306] usb 2-1: device descriptor read/8, error -71
[  179.167680][ T1946] usb 4-1: device descriptor read/64, error -71
[  179.207694][    T9] usb 6-1: Using ep0 maxpacket: 32
[  179.214221][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.224085][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  179.233285][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.238874][  T306] usb 2-1: device descriptor read/8, error -71
[  179.242310][    T9] usb 6-1: config 0 descriptor??
[  179.273821][   T10] usb 5-1: USB disconnect, device number 41
[  179.356779][   T36] audit: type=1400 audit(7002952021.629:481): avc:  denied  { ioctl } for  pid=5862 comm="syz.4.1898" path="socket:[31184]" dev="sockfs" ino=31184 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  179.407317][ T5867] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.407648][ T1946] usb 4-1: device descriptor read/64, error -71
[  179.477679][  T306] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  179.498735][  T306] usb 2-1: device descriptor read/8, error -71
[  179.628674][  T306] usb 2-1: device descriptor read/8, error -71
[  179.657423][    T9] magicmouse 0003:05AC:0265.000F: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0
[  179.657661][ T1946] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  179.737692][  T306] usb usb2-port1: unable to enumerate USB device
[  179.807608][ T1946] usb 4-1: device descriptor read/64, error -71
[  179.857045][ T5853] 
: renamed from bond_slave_0
[  179.867716][ T5853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.876268][ T5853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.909336][  T306] usb 6-1: USB disconnect, device number 21
[  180.047607][ T1946] usb 4-1: device descriptor read/64, error -71
[  180.157651][ T1946] usb usb4-port1: attempt power cycle
[  180.251996][ T5872] SELinux: security_context_str_to_sid () failed with errno=-22
[  180.260409][   T36] audit: type=1400 audit(7002952022.539:482): avc:  denied  { remount } for  pid=5871 comm="syz.4.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  180.497469][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  180.497469][ T1946] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  180.522614][ T5891] binder: Unknown parameter 'sebSx'
[  180.528586][ T1946] usb 4-1: device descriptor read/8, error -71
[  180.627472][    T9] usb 5-1: device descriptor read/64, error -71
[  180.668478][ T1946] usb 4-1: device descriptor read/8, error -71
[  180.867463][    T9] usb 5-1: device descriptor read/64, error -71
[  180.907484][ T1946] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  180.928501][ T1946] usb 4-1: device descriptor read/8, error -71
[  181.058634][ T1946] usb 4-1: device descriptor read/8, error -71
[  181.107440][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  181.167518][ T1946] usb usb4-port1: unable to enumerate USB device
[  181.247399][    T9] usb 5-1: device descriptor read/64, error -71
[  181.497373][    T9] usb 5-1: device descriptor read/64, error -71
[  181.607579][    T9] usb usb5-port1: attempt power cycle
[  181.709867][   T36] audit: type=1400 audit(7002952023.990:483): avc:  denied  { read } for  pid=5903 comm="syz.5.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  181.762134][   T36] audit: type=1400 audit(7002952024.040:484): avc:  denied  { ioctl } for  pid=5903 comm="syz.5.1909" path="socket:[31665]" dev="sockfs" ino=31665 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  181.786769][   T36] audit: type=1400 audit(7002952024.040:485): avc:  denied  { getopt } for  pid=5903 comm="syz.5.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  181.811002][ T5908] incfs: Can't find or create .incomplete dir in ./file0
[  181.818232][ T5908] incfs: mount failed -17
[  181.910684][ T5914] binder: Unknown parameter 'iax'
[  181.910815][ T5915] binder: Unknown parameter 'iax'
[  181.947356][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  181.968456][    T9] usb 5-1: device descriptor read/8, error -71
[  182.098712][    T9] usb 5-1: device descriptor read/8, error -71
[  182.337271][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  182.358480][    T9] usb 5-1: device descriptor read/8, error -71
[  182.488323][    T9] usb 5-1: device descriptor read/8, error -71
[  182.597339][    T9] usb usb5-port1: unable to enumerate USB device
[  182.644717][ T5924] rust_binder: Read failure Err(EAGAIN) in pid:110
[  182.644952][ T5925] rust_binder: Read failure Err(EAGAIN) in pid:110
[  182.676008][ T5929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115
[  182.797240][  T306] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  182.857317][   T36] audit: type=1400 audit(7002952025.140:486): avc:  denied  { ioctl } for  pid=5939 comm="syz.3.1922" path="socket:[31744]" dev="sockfs" ino=31744 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  182.865582][ T5940] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  182.885857][ T5940] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  182.892436][ T5940] rust_binder: Error while translating object.
[  182.901337][ T5940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  182.907579][ T5940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[  182.927737][ T5942] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  182.938156][ T5943] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  182.965717][   T36] audit: type=1400 audit(7002952025.240:487): avc:  denied  { watch watch_reads } for  pid=5949 comm="syz.3.1925" path="/44/bus" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  182.995643][  T306] usb 6-1: Using ep0 maxpacket: 16
[  183.001205][   T36] audit: type=1400 audit(7002952025.250:488): avc:  denied  { write } for  pid=5949 comm="syz.3.1925" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  183.025546][  T306] usb 6-1: config 0 has no interfaces?
[  183.032698][  T306] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  183.042130][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.045496][ T5958] rust_binder: Write failure EFAULT in pid:144
[  183.050328][  T306] usb 6-1: Product: syz
[  183.061028][  T306] usb 6-1: Manufacturer: syz
[  183.065661][  T306] usb 6-1: SerialNumber: syz
[  183.066545][ T5960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  183.071193][ T5961] rust_binder: Error in use_page_slow: ESRCH
[  183.071600][  T306] usb 6-1: config 0 descriptor??
[  183.080843][ T5961] rust_binder: use_range failure ESRCH
[  183.089212][ T5961] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  183.094763][ T5961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  183.102815][ T5961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:146
[  183.357169][  T306] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  183.456522][   T10] usb 6-1: USB disconnect, device number 22
[  183.517124][  T306] usb 4-1: Using ep0 maxpacket: 32
[  183.523378][  T306] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.534935][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  183.546114][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  183.557305][  T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  183.566349][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.574992][  T306] usb 4-1: config 0 descriptor??
[  183.580290][ T5964] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  183.588131][  T306] hub 4-1:0.0: USB hub found
[  183.788979][  T306] hub 4-1:0.0: 2 ports detected
[  183.970258][ T5974] SELinux: security_context_str_to_sid () failed with errno=-22
[  184.002293][ T5977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217
[  184.107831][ T5977] rust_binder: Read failure Err(EFAULT) in pid:217
[  184.190096][ T5983] bpf: Bad value for 'uid'
[  184.212328][   T36] audit: type=1400 audit(7002952026.490:489): avc:  denied  { execmem } for  pid=5982 comm="syz.4.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  184.266765][ T5983] fuse: Bad value for 'user_id'
[  184.271710][ T5983] fuse: Bad value for 'user_id'
[  184.324314][ T5985] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  184.357057][    T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  184.497319][    T9] usb 6-1: device descriptor read/64, error -71
[  184.626985][   T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  184.737074][    T9] usb 6-1: device descriptor read/64, error -71
[  184.776999][   T10] usb 5-1: Using ep0 maxpacket: 32
[  184.783346][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  184.791745][   T10] usb 5-1: config 0 has no interface number 0
[  184.800481][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  184.809596][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.817624][   T10] usb 5-1: Product: syz
[  184.821803][   T10] usb 5-1: Manufacturer: syz
[  184.826401][   T10] usb 5-1: SerialNumber: syz
[  184.831859][   T10] usb 5-1: config 0 descriptor??
[  184.837714][   T10] smsc95xx v2.0.0
[  184.976969][    T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  185.106982][    T9] usb 6-1: device descriptor read/64, error -71
[  185.238220][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  185.249254][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  185.346954][    T9] usb 6-1: device descriptor read/64, error -71
[  185.402209][  T306] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  185.402330][  T433] usb 4-1: USB disconnect, device number 24
[  185.457037][    T9] usb usb6-port1: attempt power cycle
[  185.806875][    T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  185.827921][    T9] usb 6-1: device descriptor read/8, error -71
[  185.957930][    T9] usb 6-1: device descriptor read/8, error -71
[  185.959982][ T5991] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.986450][   T36] audit: type=1400 audit(7002952028.260:490): avc:  denied  { create } for  pid=5992 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  186.197099][    T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  186.217762][    T9] usb 6-1: device descriptor read/8, error -71
[  186.306833][   T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  186.347829][    T9] usb 6-1: device descriptor read/8, error -71
[  186.456794][   T45] usb 4-1: Using ep0 maxpacket: 8
[  186.456992][    T9] usb usb6-port1: unable to enumerate USB device
[  186.463907][   T45] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  186.481318][   T45] usb 4-1: config 1 interface 0 has no altsetting 0
[  186.489463][   T45] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.40
[  186.498588][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.506602][   T45] usb 4-1: Product: ᐄ
[  186.510808][   T45] usb 4-1: Manufacturer: ࠒ
[  186.515528][   T45] usb 4-1: SerialNumber: 皭
[  186.726097][   T45] usbhid 4-1:1.0: can't add hid device: -71
[  186.732173][   T45] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  186.741086][   T45] usb 4-1: USB disconnect, device number 25
[  187.072251][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[  187.083299][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  187.092510][   T10] usb 5-1: USB disconnect, device number 46
[  187.285721][ T6014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174
[  187.297497][ T6017] overlayfs: failed to resolve './file1': -2
[  187.317755][ T6017] overlay: Unknown parameter 'mounts'
[  187.406698][   T45] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  187.558665][   T45] usb 6-1: not running at top speed; connect to a high speed hub
[  187.567449][   T45] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  187.578525][   T45] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.591572][   T45] usb 6-1: config 1 interface 0 has no altsetting 0
[  187.600533][   T45] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.40
[  187.601064][ T6026] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  187.609839][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.611493][ T6026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  187.616286][   T45] usb 6-1: Product: syz
[  187.624383][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  187.634817][   T45] usb 6-1: Manufacturer: syz
[  187.638044][ T6026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:866
[  187.645735][   T45] usb 6-1: SerialNumber: syz
[  187.665341][ T6011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  187.796787][   T10] usb 4-1: Using ep0 maxpacket: 16
[  187.803209][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.814213][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  187.827215][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  187.836319][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.845554][   T10] usb 4-1: config 0 descriptor??
[  187.878501][   T45] usbhid 6-1:1.0: can't add hid device: -71
[  187.884514][   T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  187.893648][   T45] usb 6-1: USB disconnect, device number 27
[  187.906578][    T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  188.036603][    T9] usb 5-1: device descriptor read/64, error -71
[  188.051593][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.060135][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.068329][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.076925][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.085010][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.093735][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.101862][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.110452][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.119001][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.127592][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.276541][    T9] usb 5-1: device descriptor read/64, error -71
[  188.339827][   T10] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  188.347893][   T10] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  188.359503][   T10] microsoft 0003:045E:07DA.0010: no inputs found
[  188.365869][   T10] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  188.392451][ T6031] Invalid ELF header magic: != ELF
[  188.516547][    T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  188.646496][    T9] usb 5-1: device descriptor read/64, error -71
[  188.740707][   T10] usb 4-1: USB disconnect, device number 26
[  188.786601][ T5675] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  188.886488][    T9] usb 5-1: device descriptor read/64, error -71
[  188.916486][ T5675] usb 6-1: device descriptor read/64, error -71
[  188.996576][    T9] usb usb5-port1: attempt power cycle
[  189.156513][ T5675] usb 6-1: device descriptor read/64, error -71
[  189.336437][    T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  189.367538][    T9] usb 5-1: device descriptor read/8, error -71
[  189.396442][ T5675] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  189.460103][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'.
[  189.469963][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'.
[  189.479681][ T6062] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  189.479705][ T6062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  189.488910][ T6062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:199
[  189.499514][    T9] usb 5-1: device descriptor read/8, error -71
[  189.536416][ T5675] usb 6-1: device descriptor read/64, error -71
[  189.580716][ T6065] tc_dump_action: action bad kind
[  189.766364][    T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  189.776476][ T5675] usb 6-1: device descriptor read/64, error -71
[  189.787424][    T9] usb 5-1: device descriptor read/8, error -71
[  189.886471][ T5675] usb usb6-port1: attempt power cycle
[  189.917420][    T9] usb 5-1: device descriptor read/8, error -71
[  190.026435][    T9] usb usb5-port1: unable to enumerate USB device
[  190.226321][ T5675] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  190.247401][ T5675] usb 6-1: device descriptor read/8, error -71
[  190.380412][ T5675] usb 6-1: device descriptor read/8, error -71
[  190.559736][ T6076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213
[  190.573185][ T6078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  190.582553][ T6078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:215
[  190.592068][ T6078] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  190.601371][ T6078] rust_binder: Read failure Err(EFAULT) in pid:215
[  190.622460][ T6080] cgroup: Unknown parameter './binderfs/binder0'
[  190.636389][ T5675] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  190.657297][ T5675] usb 6-1: device descriptor read/8, error -71
[  190.693401][ T6082] kvm: kvm [6081]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x4000002a) = 0x0
[  190.793476][ T5675] usb 6-1: device descriptor read/8, error -71
[  190.899912][ T6096] fuse: Bad value for 'fd'
[  190.906481][ T5675] usb usb6-port1: unable to enumerate USB device
[  190.963667][ T6101] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.070653][ T6106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6106 comm=syz.4.1979
[  191.090241][ T6106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6106 comm=syz.4.1979
[  191.146189][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  191.296172][    T9] usb 4-1: Using ep0 maxpacket: 32
[  191.302553][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  191.311894][    T9] usb 4-1: config 1 has no interface number 1
[  191.318192][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  191.331361][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7
[  191.344099][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.353428][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.361642][    T9] usb 4-1: Product: syz
[  191.365929][    T9] usb 4-1: Manufacturer: syz
[  191.370781][    T9] usb 4-1: SerialNumber: syz
[  191.581349][    T9] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  191.590154][    T9] usb 4-1: found format II with max.bitrate = 0, frame size=7
[  191.598142][    T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  191.607862][    T9] usb 4-1: USB disconnect, device number 27
[  191.627151][ T4221] udevd[4221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  191.645856][ T6114] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock
[  191.762563][ T6133] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.793078][ T6140] rust_binder: Write failure EFAULT in pid:896
[  192.133106][ T6143] binder: Unknown parameter 'rw�'
[  192.228950][ T6149] overlay: ./bus is not a directory
[  192.359788][ T6154] rust_binder: Error while translating object.
[  192.359830][ T6154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  192.376293][ T6154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233
[  192.486055][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  192.657050][    T9] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[  192.665285][    T9] usb 5-1: config 0 has no interface number 1
[  192.671653][    T9] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  192.681856][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  192.693493][    T9] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  192.702585][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  192.710383][ T6166] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  192.719321][    T9] usb 5-1: SerialNumber: syz
[  192.724746][    T9] usb 5-1: config 0 descriptor??
[  192.932307][    T9] usb 5-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  192.939375][    T9] usb 5-1: No valid video chain found.
[  192.947708][    T9] usb 5-1: USB disconnect, device number 51
[  193.400955][ T6178] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  193.408334][ T6178] rust_binder: Write failure EINVAL in pid:240
[  193.477136][ T6186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245
[  193.640513][ T6203] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  193.695922][ T6206] batadv_slave_0: entered promiscuous mode
[  193.708042][ T6206] binder: Bad value for 'max'
[  193.721901][ T6205] batadv_slave_0: left promiscuous mode
[  193.925928][   T45] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  193.975904][   T10] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  194.075875][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  194.127527][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  194.136254][   T10] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  194.147119][   T10] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  194.160025][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  194.168103][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  194.177209][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.185212][   T10] usb 6-1: Product: 琡ᐉ봫戭絓৘楔㒳ꁁ메⊫﫶肋ᣔ背ᖊꀎᜓ︂鱨纄궃倓㛴됄퓋㛺鄖㎶刎ᨲ쭛窨連雱톜숅ᣅ즐联闔꬛됌뺨棜᮪寕瑝鐚褧
[  194.203695][   T10] usb 6-1: Manufacturer: 兄혓࣎谥喭㉔Ⴧ鸩싘㐩哼
[  194.211276][   T10] usb 6-1: SerialNumber: ᐄ
[  194.215875][   T45] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  194.224510][ T6209] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  194.231774][ T6209] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  194.280375][ T6211] netlink: 'syz.3.2018': attribute type 4 has an invalid length.
[  194.288232][ T6211] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2018'.
[  194.300307][   T36] audit: type=1400 audit(7002952036.581:491): avc:  denied  { map } for  pid=6210 comm="syz.3.2018" path="socket:[33814]" dev="sockfs" ino=33814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  194.342724][ T6213] fuse: Unknown parameter 'g
'
[  194.365864][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  194.371508][   T45] usb usb5-port1: attempt power cycle
[  194.440930][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.449640][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.460883][   T10] usb 6-1: USB disconnect, device number 32
[  194.585888][  T306] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  194.715985][  T306] usb 4-1: device descriptor read/64, error -71
[  194.725854][   T45] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  194.746165][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  194.875860][   T45] usb 5-1: new low-speed USB device number 55 using dummy_hcd
[  194.896267][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  194.901701][   T45] usb usb5-port1: unable to enumerate USB device
[  194.955819][  T306] usb 4-1: device descriptor read/64, error -71
[  194.972660][ T6215] binder: Unknown parameter 'fscontext?}'
[  195.195708][  T306] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  195.325714][  T306] usb 4-1: device descriptor read/64, error -71
[  195.565738][  T306] usb 4-1: device descriptor read/64, error -71
[  195.675812][  T306] usb usb4-port1: attempt power cycle
[  196.015645][  T306] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  196.036791][  T306] usb 4-1: device descriptor read/8, error -71
[  196.166745][  T306] usb 4-1: device descriptor read/8, error -71
[  196.405643][  T306] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  196.426757][  T306] usb 4-1: device descriptor read/8, error -71
[  196.531178][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.538521][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.545649][ T6244] bridge_slave_0: entered allmulticast mode
[  196.551903][ T6244] bridge_slave_0: entered promiscuous mode
[  196.559421][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.566501][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.566689][  T306] usb 4-1: device descriptor read/8, error -71
[  196.573583][ T6244] bridge_slave_1: entered allmulticast mode
[  196.586061][ T6244] bridge_slave_1: entered promiscuous mode
[  196.636379][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.643466][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.650826][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.657889][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.679259][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.685685][  T306] usb usb4-port1: unable to enumerate USB device
[  196.692874][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.702875][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.710054][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.720680][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.727816][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.764849][ T6244] veth0_vlan: entered promiscuous mode
[  196.782875][ T6244] veth1_macvtap: entered promiscuous mode
[  197.096346][ T6263] netlink: 'syz.6.2037': attribute type 4 has an invalid length.
[  197.119271][ T6265] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  197.143786][ T6268] rust_binder: Write failure EFAULT in pid:12
[  197.157454][ T6270] rust_binder: Write failure EINVAL in pid:14
[  197.279910][ T6276] rust_binder: Got transaction with invalid offset.
[  197.286181][ T6276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  197.292807][ T6276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[  197.317125][ T6278] overlayfs: conflicting lowerdir path
[  197.362537][ T6278] rust_binder: Error in use_page_slow: ESRCH
[  197.362565][ T6278] rust_binder: use_range failure ESRCH
[  197.369452][ T6278] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  197.372722][ T6282] overlay: Unknown parameter 'subj_user'
[  197.375177][ T6278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  197.385358][ T6280] rust_binder: Error while translating object.
[  197.389098][   T36] audit: type=1400 audit(7002952039.672:492): avc:  denied  { transition } for  pid=6279 comm="syz.3.2044" path="/86/file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  197.403226][ T6282] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  197.404858][ T6278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:22
[  197.428449][ T6280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  197.436987][   T36] audit: type=1400 audit(7002952039.672:493): avc:  denied  { entrypoint } for  pid=6279 comm="syz.3.2044" path="/86/file0" dev="tmpfs" ino=476 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  197.464960][ T6280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:256
[  197.479615][   T36] audit: type=1400 audit(7002952039.672:494): avc:  denied  { share } for  pid=6279 comm="syz.3.2044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  197.508664][   T36] audit: type=1400 audit(7002952039.672:495): avc:  denied  { noatsecure } for  pid=6279 comm="syz.3.2044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  197.542792][ T6288] 9pnet_fd: Insufficient options for proto=fd
[  197.576220][ T6292] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2049'.
[  197.636756][ T6293] cgroup: fork rejected by pids controller in /syz3
[  197.716362][ T6402] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2051'.
[  197.759285][  T305] bridge_slave_1: left allmulticast mode
[  197.766220][ T6404] binder: Unknown parameter 'St��7'
[  197.767262][  T305] bridge_slave_1: left promiscuous mode
[  197.778791][ T6402] incfs: Error accessing: ./file0.
[  197.787374][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.806055][  T305] bridge_slave_0: left allmulticast mode
[  197.811862][ T6402] incfs: mount failed -20
[  197.817225][  T305] bridge_slave_0: left promiscuous mode
[  197.825204][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.963430][  T305] veth1_macvtap: left promiscuous mode
[  197.969732][ T6415] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2056'.
[  197.979930][  T305] veth0_vlan: left promiscuous mode
[  198.135415][  T544] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  198.146120][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.153641][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.169712][ T6414] bridge_slave_0: entered allmulticast mode
[  198.180932][ T6414] bridge_slave_0: entered promiscuous mode
[  198.190771][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.203284][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.215568][ T6414] bridge_slave_1: entered allmulticast mode
[  198.226428][ T6414] bridge_slave_1: entered promiscuous mode
[  198.254068][ T6427] exFAT-fs (rnullb0): invalid boot record signature
[  198.260894][ T6427] exFAT-fs (rnullb0): failed to read boot sector
[  198.267695][ T6427] exFAT-fs (rnullb0): failed to recognize exfat type
[  198.306338][  T544] usb 6-1: config 0 has no interfaces?
[  198.313677][  T544] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.334488][  T544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.358841][  T544] usb 6-1: config 0 descriptor??
[  198.388042][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.395173][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.402521][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.409659][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.434858][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.442705][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.466962][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.474079][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.496178][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.503371][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.538592][ T6414] veth0_vlan: entered promiscuous mode
[  198.552322][ T6414] veth1_macvtap: entered promiscuous mode
[  198.729612][  T544] usb 6-1: USB disconnect, device number 33
[  198.745329][    T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  198.905414][    T9] usb 5-1: Using ep0 maxpacket: 32
[  198.911761][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  198.923488][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  198.934884][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  198.946393][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  198.955494][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.964117][    T9] usb 5-1: config 0 descriptor??
[  198.969578][ T6436] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  198.977015][   T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  198.978051][    T9] hub 5-1:0.0: USB hub found
[  199.135291][   T45] usb 4-1: Using ep0 maxpacket: 16
[  199.141799][   T45] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  199.150115][   T45] usb 4-1: config 0 has no interface number 0
[  199.156751][   T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  199.166969][   T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  199.180297][   T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  199.189954][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.198279][    T9] hub 5-1:0.0: 2 ports detected
[  199.198510][   T45] usb 4-1: Product: syz
[  199.207520][   T45] usb 4-1: Manufacturer: syz
[  199.212160][   T45] usb 4-1: SerialNumber: syz
[  199.221657][   T45] usb 4-1: config 0 descriptor??
[  199.227037][ T6444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  199.234358][ T6444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  199.293978][   T36] audit: type=1326 audit(7002952041.572:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.5.2073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990f38e929 code=0x0
[  199.442762][ T6444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  199.450079][ T6444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  199.727343][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'.
[  199.727343][   T36] audit: type=1400 audit(7002952042.012:497): avc:  denied  { nlmsg_read } for  pid=6474 comm="syz.6.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  199.860563][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.869320][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.879221][   T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  199.889569][   T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  199.901615][   T45] asix 4-1:0.251: probe with driver asix failed with error -71
[  199.910544][   T45] usb 4-1: USB disconnect, device number 32
[  199.965176][  T306] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  200.126527][  T306] usb 7-1: unable to get BOS descriptor or descriptor too short
[  200.135006][  T306] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  200.145355][  T306] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  200.155870][  T306] usb 7-1: New USB device found, idVendor=0525, idProduct=b4a8, bcdDevice= 0.40
[  200.165018][  T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.173152][  T306] usb 7-1: Product: syz
[  200.177410][  T306] usb 7-1: Manufacturer: 䡢斠谦垽먂ៃ區얮︅ꏜꑂ™Ѽナ쟼₤ﭱ뤉淤蘴 ்ꧦ㭟롒䬱婟唋ᶻ됚晴涸♺❑﹚ﶷ蠈礧瓶롆븍甗蟋仆旄⊧頾넂﯅춳監欃䜕쯎⅔蝡伛꾻উ톅䀜⃧毥䗱恻䌜掏衑賖⦯肆Ȇ鸜ూ攮걎저
[  200.203059][  T306] usb 7-1: SerialNumber: syz
[  200.498598][  T306] usb 7-1: USB disconnect, device number 2
[  200.655059][ T5675] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  200.805137][ T5675] usb 4-1: Using ep0 maxpacket: 8
[  200.811529][ T5675] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  200.820732][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.830010][ T5675] usb 4-1: config 0 descriptor??
[  200.846449][   T36] audit: type=1400 audit(7002952043.132:498): avc:  denied  { accept } for  pid=6521 comm="syz.5.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  200.942819][   T36] audit: type=1400 audit(7002952043.222:499): avc:  denied  { setcheckreqprot } for  pid=6530 comm="syz.5.2096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  201.013049][  T312] usb 5-1: USB disconnect, device number 56
[  201.143079][ T6536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47
[  201.185028][   T45] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  201.215326][ T6539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  201.215359][ T6539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50
[  201.252164][ T6542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer.
[  201.335013][   T45] usb 6-1: device descriptor read/64, error -71
[  201.441295][ T5675] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  201.451363][ T5675] asix 4-1:0.0: probe with driver asix failed with error -61
[  201.511638][ T6546] SELinux: failed to load policy
[  201.562928][ T6549] rust_binder: Write failure EFAULT in pid:955
[  201.585000][   T45] usb 6-1: device descriptor read/64, error -71
[  201.835027][   T45] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  201.964941][   T45] usb 6-1: device descriptor read/64, error -71
[  202.149871][ T5675] usb 4-1: USB disconnect, device number 33
[  202.185334][ T6562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.185430][ T6562] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  202.189526][ T6564] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.192015][ T6562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  202.206776][   T45] usb 6-1: device descriptor read/64, error -71
[  202.217163][ T6562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:13
[  202.225799][ T6562] rust_binder: Error while translating object.
[  202.235200][ T6562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  202.241675][ T6562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13
[  202.267614][ T6569] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  202.284460][ T6569] rust_binder: Write failure EINVAL in pid:60
[  202.284729][ T6569] rust_binder: Write failure EFAULT in pid:60
[  202.322575][ T6575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  202.328983][   T45] usb usb6-port1: attempt power cycle
[  202.343952][ T6575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64
[  202.362168][ T6577] rust_binder: Write failure EFAULT in pid:66
[  202.416811][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'.
[  202.481340][ T6595] rust_binder: Write failure EINVAL in pid:22
[  202.481360][ T6597] rust_binder: Write failure EINVAL in pid:22
[  202.485095][ T6598] tipc: Started in network mode
[  202.498626][ T6598] tipc: Node identity ac14140f, cluster identity 4711
[  202.505667][ T6598] tipc: New replicast peer: 255.255.255.255
[  202.511869][ T6598] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.546711][   T36] audit: type=1400 audit(7002952044.832:500): avc:  granted  { setsecparam } for  pid=6609 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  202.694851][   T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  202.715938][   T45] usb 6-1: device descriptor read/8, error -71
[  202.845898][   T45] usb 6-1: device descriptor read/8, error -71
[  203.084877][   T45] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  203.105960][   T45] usb 6-1: device descriptor read/8, error -71
[  203.235941][   T45] usb 6-1: device descriptor read/8, error -71
[  203.345059][   T45] usb usb6-port1: unable to enumerate USB device
[  203.502239][ T6640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  203.502273][ T6640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54
[  203.540811][ T6647] rust_binder: Write failure EFAULT in pid:62
[  203.624709][   T10] tipc: Node number set to 2886997007
[  203.646839][ T6659] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[  203.799556][ T6665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  203.799585][ T6665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80
[  203.938139][  T305] bridge_slave_1: left allmulticast mode
[  203.953205][  T305] bridge_slave_1: left promiscuous mode
[  203.959291][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.972261][  T305] bridge_slave_0: left allmulticast mode
[  203.984663][  T305] bridge_slave_0: left promiscuous mode
[  203.990856][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.058330][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  204.128713][  T305] tipc: Disabling bearer <udp:syz2>
[  204.134175][  T305] tipc: Left network mode
[  204.141295][  T305] veth1_macvtap: left promiscuous mode
[  204.146950][  T305] veth0_vlan: left promiscuous mode
[  204.222896][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.230115][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.237285][ T6691] bridge_slave_0: entered allmulticast mode
[  204.244353][ T6691] bridge_slave_0: entered promiscuous mode
[  204.250854][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.257952][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.265162][ T6691] bridge_slave_1: entered allmulticast mode
[  204.271593][ T6691] bridge_slave_1: entered promiscuous mode
[  204.302227][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'.
[  204.341348][ T6699] netlink: 'syz.3.2155': attribute type 4 has an invalid length.
[  204.366954][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.374066][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.381401][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.388506][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.412124][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.419666][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.429323][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.436449][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.446292][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.453370][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.480936][ T6691] veth0_vlan: entered promiscuous mode
[  204.492234][ T6691] veth1_macvtap: entered promiscuous mode
[  204.737774][   T36] audit: type=1400 audit(7002952047.022:501): avc:  denied  { accept } for  pid=6713 comm="syz.7.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.739365][ T6714] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  204.817005][ T6722] rust_binder: Error while translating object.
[  204.817033][ T6722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  204.823340][ T6722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:22
[  204.858785][ T6728] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  204.867837][ T6728] rust_binder: Error while translating object.
[  204.878628][ T6728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  204.886073][ T6728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[  205.037601][ T6745] kvm: pic: level sensitive irq not supported
[  205.147590][   T45] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  205.165018][   T45] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  205.427631][ T6785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64
[  205.527230][   T36] audit: type=1400 audit(7002952047.813:502): avc:  denied  { rename } for  pid=6796 comm="syz.4.2184" name="file0" dev="tmpfs" ino=1796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  205.565856][ T6794] random: crng reseeded on system resumption
[  205.871457][ T6807] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  205.871489][ T6807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  205.880655][ T6807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:76
[  206.097558][   T36] audit: type=1400 audit(7002952048.383:503): avc:  granted  { setsecparam } for  pid=6813 comm="syz.7.2189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  206.131484][  T563] Bluetooth: hci0: command 0x1003 tx timeout
[  206.137858][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  206.183116][ T6816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84
[  206.183520][ T6816] rust_binder: Error while translating object.
[  206.199787][ T6816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  206.210667][ T6816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84
[  206.278448][ T6823] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2193'.
[  206.324511][ T6826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  206.324606][ T6826] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  206.353336][ T6828] binder: Bad value for 'stats'
[  206.444396][ T5675] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  206.511563][   T36] audit: type=1400 audit(7002952048.793:504): avc:  denied  { setattr } for  pid=6832 comm="syz.4.2197" name="RAW" dev="sockfs" ino=39366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  206.549427][ T6842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:987
[  206.556460][ T6844] rust_binder: Write failure EINVAL in pid:104
[  206.566632][ T6846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  206.585639][ T6849] SELinux:  policydb string length 14080 does not match expected length 8
[  206.600841][ T6849] SELinux: failed to load policy
[  206.622088][ T6851] netlink: 'syz.7.2203': attribute type 4 has an invalid length.
[  206.625900][ T5675] usb 4-1: not running at top speed; connect to a high speed hub
[  206.639749][ T6851] erofs: (device loop7): erofs_read_superblock: cannot find valid erofs superblock
[  206.649725][ T5675] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  206.663248][ T5675] usb 4-1: config 1 interface 0 has no altsetting 0
[  206.675108][ T5675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  206.685533][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.694581][ T5675] usb 4-1: Product: syz
[  206.699182][ T5675] usb 4-1: Manufacturer: syz
[  206.704035][ T5675] usb 4-1: SerialNumber: syz
[  206.715433][  T312] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  206.723427][   T36] audit: type=1400 audit(7002952049.003:505): avc:  denied  { append } for  pid=6856 comm="syz.7.2206" name="pfkey" dev="proc" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  206.729275][  T312] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  206.753899][ T6865] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  206.785703][ T6866] fido_id[6866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  206.966242][ T6818] rust_binder: Error while translating object.
[  206.966290][ T6818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  206.972720][ T6818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[  206.985468][ T5675] usb 4-1: USB disconnect, device number 34
[  207.062206][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2213'.
[  207.085783][ T6888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422
[  207.295186][ T6900] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  207.499280][ T6911] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  207.513011][ T6911] rust_binder: Write failure EINVAL in pid:129
[  207.677446][ T6916] rust_binder: Write failure EFAULT in pid:134
[  207.677674][ T6917] rust_binder: Write failure EFAULT in pid:134
[  207.692041][ T6916] lo: entered promiscuous mode
[  207.703508][ T6917] lo: left promiscuous mode
[  207.750981][ T6926] binder: Bad value for 'max'
[  207.769697][   T36] audit: type=1400 audit(7002952050.053:506): avc:  denied  { shutdown } for  pid=6927 comm="syz.3.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  207.805359][ T6930] binder: Unknown parameter '�'
[  207.811036][ T6930] binder: Unknown parameter '�'
[  207.831354][ T6934] 9p filesystem being mounted at /49/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  207.842302][   T36] audit: type=1400 audit(7002952050.123:507): avc:  denied  { setattr } for  pid=6933 comm="syz.3.2228" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  207.864023][   T36] audit: type=1400 audit(7002952050.123:508): avc:  denied  { write } for  pid=6933 comm="syz.3.2228" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  207.884838][   T36] audit: type=1326 audit(7002952050.123:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5087b8e929 code=0x7ffc0000
[  207.908324][   T36] audit: type=1326 audit(7002952050.123:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5087b8e929 code=0x7ffc0000
[  207.994168][  T312] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  208.074186][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  208.145352][  T312] usb 8-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  208.155668][  T312] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.165283][  T312] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  208.174402][  T312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  208.182469][  T312] usb 8-1: SerialNumber: syz
[  208.204288][   T10] usb 4-1: device descriptor read/64, error -71
[  208.228340][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  208.234953][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  208.395377][  T312] usb 8-1: 0:2 : does not exist
[  208.400355][  T312] usb 8-1: unit 5: unexpected type 0x0a
[  208.407786][  T312] usb 8-1: USB disconnect, device number 2
[  208.415743][ T4221] udevd[4221]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  208.444101][   T10] usb 4-1: device descriptor read/64, error -71
[  208.684088][   T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  208.814068][   T10] usb 4-1: device descriptor read/64, error -71
[  209.054053][   T10] usb 4-1: device descriptor read/64, error -71
[  209.164127][   T10] usb usb4-port1: attempt power cycle
[  209.274010][   T45] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  209.423982][   T45] usb 8-1: Using ep0 maxpacket: 32
[  209.430344][   T45] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  209.438736][   T45] usb 8-1: config 0 has no interface number 0
[  209.444884][   T45] usb 8-1: config 0 interface 184 has no altsetting 0
[  209.453125][   T45] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  209.462241][   T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.470299][   T45] usb 8-1: Product: syz
[  209.474516][   T45] usb 8-1: Manufacturer: syz
[  209.479135][   T45] usb 8-1: SerialNumber: syz
[  209.484473][   T45] usb 8-1: config 0 descriptor??
[  209.490417][   T45] smsc75xx v1.0.0
[  209.504008][   T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  209.525248][   T10] usb 4-1: device descriptor read/8, error -71
[  209.655323][   T10] usb 4-1: device descriptor read/8, error -71
[  209.764238][   T36] kauditd_printk_skb: 69 callbacks suppressed
[  209.764260][   T36] audit: type=1326 audit(7002952052.053:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.793725][   T36] audit: type=1326 audit(7002952052.053:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.834172][   T36] audit: type=1326 audit(7002952052.123:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.893951][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  209.914330][   T36] audit: type=1326 audit(7002952052.203:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.937916][   T36] audit: type=1326 audit(7002952052.223:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.961934][   T36] audit: type=1326 audit(7002952052.223:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  209.962346][   T10] usb 4-1: device descriptor read/8, error -71
[  209.985621][   T36] audit: type=1326 audit(7002952052.243:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  210.014764][   T36] audit: type=1326 audit(7002952052.243:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  210.038132][   T36] audit: type=1326 audit(7002952052.273:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  210.091449][   T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  210.102397][   T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  210.114595][   T36] audit: type=1326 audit(7002952052.403:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.3.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5087b8e52b code=0x7ffc0000
[  210.144430][   T10] usb 4-1: device descriptor read/8, error -71
[  210.210762][ T6967] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  210.210790][ T6967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  210.219436][ T6967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:434
[  210.254038][   T10] usb usb4-port1: unable to enumerate USB device
[  210.274083][  T563] Bluetooth: hci0: command 0x1003 tx timeout
[  210.274455][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  210.663853][  T312] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  210.793880][  T312] usb 5-1: device descriptor read/64, error -71
[  210.917058][   T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  210.934593][   T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  210.939720][ T6979] rust_binder: Write failure EINVAL in pid:157
[  210.945224][   T45] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  210.961018][   T45] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  210.970836][   T45] usb 8-1: USB disconnect, device number 3
[  211.043819][  T312] usb 5-1: device descriptor read/64, error -71
[  211.079980][ T6986] 9p filesystem being mounted at /54/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  211.283765][  T312] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  211.413761][  T312] usb 5-1: device descriptor read/64, error -71
[  211.433837][   T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  211.494644][ T6992] incfs: Backing dir is not set, filesystem can't be mounted.
[  211.502350][ T6992] incfs: mount failed -2
[  211.583797][   T45] usb 4-1: Using ep0 maxpacket: 16
[  211.594524][   T45] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  211.602874][   T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.613138][   T45] usb 4-1: config 0 has no interface number 0
[  211.623896][   T45] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  211.633024][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.641377][   T45] usb 4-1: Product: syz
[  211.645642][   T45] usb 4-1: Manufacturer: syz
[  211.650685][   T45] usb 4-1: SerialNumber: syz
[  211.656477][   T45] usb 4-1: config 0 descriptor??
[  211.662500][   T45] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  211.663799][  T312] usb 5-1: device descriptor read/64, error -71
[  211.669010][   T45] usb 4-1: No valid video chain found.
[  211.783818][  T312] usb usb5-port1: attempt power cycle
[  211.865183][   T45] usb 4-1: USB disconnect, device number 39
[  212.123709][  T312] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  212.144736][  T312] usb 5-1: device descriptor read/8, error -71
[  212.274806][  T312] usb 5-1: device descriptor read/8, error -71
[  212.513689][  T312] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  212.534747][  T312] usb 5-1: device descriptor read/8, error -71
[  212.664750][  T312] usb 5-1: device descriptor read/8, error -71
[  212.773764][  T312] usb usb5-port1: unable to enumerate USB device
[  212.803624][   T45] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  212.953561][   T45] usb 8-1: Using ep0 maxpacket: 32
[  212.960419][   T45] usb 8-1: config 4 has an invalid interface number: 1 but max is 0
[  212.968635][   T45] usb 8-1: config 4 has no interface number 0
[  212.974780][   T45] usb 8-1: config 4 interface 1 has no altsetting 0
[  212.982661][   T45] usb 8-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=f5.00
[  212.991784][   T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.999825][   T45] usb 8-1: Product: syz
[  213.004061][   T45] usb 8-1: Manufacturer: syz
[  213.008666][   T45] usb 8-1: SerialNumber: syz
[  213.216115][ T7010] rust_binder: Write failure EFAULT in pid:155
[  213.219194][   T45] usb 8-1: USB disconnect, device number 4
[  213.933470][ T5675] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  214.087965][ T5675] usb 4-1: Using ep0 maxpacket: 32
[  214.099391][ T5675] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  214.113240][ T5675] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  214.122648][  T312] usb 5-1: new low-speed USB device number 61 using dummy_hcd
[  214.130331][ T5675] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  214.149741][ T5675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.166556][ T7022] kvm: pic: non byte write
[  214.171214][ T5675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  214.181786][ T7022] random: crng reseeded on system resumption
[  214.203426][ T5675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  214.226562][ T5675] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  214.235944][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.250009][ T5675] usb 4-1: config 0 descriptor??
[  214.273455][  T312] usb 5-1: device descriptor read/64, error -71
[  214.499500][ T5675] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  214.514075][  T312] usb 5-1: device descriptor read/64, error -71
[  214.702597][ T1946] usb 4-1: USB disconnect, device number 40
[  214.711147][ T1946] usblp0: removed
[  214.743373][   T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  214.783332][  T312] usb 5-1: new low-speed USB device number 62 using dummy_hcd
[  214.913322][   T10] usb 6-1: Using ep0 maxpacket: 32
[  214.919910][   T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  214.928778][   T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  214.937513][  T312] usb 5-1: device descriptor read/64, error -71
[  214.944214][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  214.953527][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.963556][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  214.973319][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  214.986464][   T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  214.995564][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.007602][   T10] usb 6-1: config 0 descriptor??
[  215.203323][  T312] usb 5-1: device descriptor read/64, error -71
[  215.222523][   T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  215.262582][   T10] usb 6-1: USB disconnect, device number 38
[  215.275766][   T10] usblp0: removed
[  215.323954][  T312] usb usb5-port1: attempt power cycle
[  215.434288][ T7048] FAT-fs (rnullb0): bogus number of reserved sectors
[  215.441094][ T7048] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  215.535312][ T7064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193
[  215.570610][ T7069] SELinux: failed to load policy
[  215.597174][ T7071] binder: Bad value for 'defcontext'
[  215.616753][ T7074] rust_binder: Failed copying remainder into alloc: EFAULT
[  215.616774][ T7074] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  215.624072][ T7074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  215.632372][ T7074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:201
[  215.683278][  T312] usb 5-1: new low-speed USB device number 63 using dummy_hcd
[  215.712035][ T7082] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  215.714384][  T312] usb 5-1: device descriptor read/8, error -71
[  215.722108][ T7081] rust_binder: Error in use_page_slow: ESRCH
[  215.725046][ T7081] rust_binder: use_range failure ESRCH
[  215.731087][ T7081] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  215.736674][ T7081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  215.744731][ T7081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208
[  215.789799][ T7092] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  215.833227][ T1946] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  215.854879][  T312] usb 5-1: device descriptor read/8, error -71
[  215.984881][ T1946] usb 8-1: No LPM exit latency info found, disabling LPM.
[  215.992476][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2283'.
[  216.001963][ T1946] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x1 is Bulk; changing to Interrupt
[  216.011896][ T1946] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  216.024886][ T1946] usb 8-1: config 1 interface 0 has no altsetting 0
[  216.093231][  T312] usb 5-1: new low-speed USB device number 64 using dummy_hcd
[  216.114295][  T312] usb 5-1: device descriptor read/8, error -71
[  216.244288][  T312] usb 5-1: device descriptor read/8, error -71
[  216.353278][  T312] usb usb5-port1: unable to enumerate USB device
[  216.743780][ T7113] loop2: detected capacity change from 0 to 7
[  216.785603][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  216.785622][   T36] audit: type=1400 audit(7002952059.074:597): avc:  denied  { execheap } for  pid=7119 comm="syz.4.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  216.819655][ T7122] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.837973][ T7122] rust_binder: Error while translating object.
[  216.845304][ T7122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  216.851575][ T7122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1030
[  216.857505][ T7124] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  216.970301][ T7128] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2294'.
[  217.100746][ T7140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.121914][ T7145] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.128467][ T7144] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.135347][ T7145] rust_binder: Error while translating object.
[  217.142069][ T7145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  217.148570][ T7145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043
[  217.263071][    T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  217.360177][ T7155] /dev/rnullb0: Can't open blockdev
[  217.794217][    T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  217.802700][    T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  217.811907][    T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  217.822637][    T9] usb 6-1: config 220 has no interface number 2
[  217.829602][    T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  217.843170][    T9] usb 6-1: config 220 interface 0 has no altsetting 0
[  217.850064][    T9] usb 6-1: config 220 interface 76 has no altsetting 0
[  217.857334][    T9] usb 6-1: config 220 interface 1 has no altsetting 0
[  217.865960][    T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  217.876422][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.884723][    T9] usb 6-1: Product: syz
[  217.889143][    T9] usb 6-1: Manufacturer: syz
[  217.894243][    T9] usb 6-1: SerialNumber: syz
[  218.513779][ T1946] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  218.533025][ T1946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.542734][ T1946] usb 8-1: Product: ࠓ
[  218.547220][ T1946] usb 8-1: Manufacturer: ٙ⚐紮뢦₩웦覔촏䕺꒨퓵퓒匥Ё궹䅻핶獂಴Ꞻꕪ氽霶첯敨뼦ૺ诼ˏ閝翢像ꮽ䙢୉閩㡯ᓬ蒔룴欳椇▞訑觩傒奈攝ឧﶓ䋵쟪睝醼燓ꤘ슦叉혅澐揜얫魽乄㌙왠申ꌲ븧ϭ鐖
[  218.606451][ T7171] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  218.608572][ T1946] usb 8-1: can't set config #1, error -71
[  218.609250][ T7171] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 238)
[  218.625322][ T1946] usb 8-1: USB disconnect, device number 5
[  218.626378][ T7171] rust_binder: Error while translating object.
[  218.642408][ T7171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  218.648870][ T7171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1066
[  218.780326][ T7178] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  218.813484][ T7178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1073
[  219.363709][ T7183] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  219.652759][   T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  219.884567][   T10] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024
[  219.907412][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  219.923550][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  219.942700][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.961159][   T10] usb 4-1: Product: 倊
[  219.971030][   T10] usb 4-1: Manufacturer: Л
[  219.984848][   T10] usb 4-1: SerialNumber: ю
[  220.000328][ T7183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  220.027873][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2310'.
[  220.037466][ T7189] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  220.037494][ T7189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  220.047522][ T7189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1078
[  220.054739][    T9] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  220.074456][ T7192] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2312'.
[  220.083929][    T9] usb 6-1: No valid video chain found.
[  220.089485][    T9] usb 6-1: selecting invalid altsetting 0
[  220.110548][    T9] usb 6-1: USB disconnect, device number 39
[  220.209728][ T7183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232
[  220.214126][   T10] usb 4-1: USB disconnect, device number 41
[  220.229241][  T312] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  220.372709][  T312] usb 8-1: device descriptor read/64, error -71
[  220.403688][    T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  220.554248][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  220.562289][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  220.570803][    T9] usb 6-1: config 1 has an invalid interface number: 121 but max is 0
[  220.579054][    T9] usb 6-1: config 1 has no interface number 0
[  220.585195][    T9] usb 6-1: config 1 interface 121 has no altsetting 0
[  220.593580][    T9] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51
[  220.602877][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.610889][    T9] usb 6-1: Product: syz
[  220.615170][    T9] usb 6-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩࿿ꔲ킄ᢩ辬졘⫡ǯ㨥节질⛸䫕ྃﱵ薶琇Ꮔ胬൛牌쓵壎結栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏
[  220.632879][  T312] usb 8-1: device descriptor read/64, error -71
[  220.639148][    T9] usb 6-1: SerialNumber: syz
[  220.733823][   T36] audit: type=1400 audit(7002952063.024:598): avc:  denied  { lock } for  pid=7210 comm="syz.3.2318" path="socket:[41784]" dev="sockfs" ino=41784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.845925][ T7192] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2312'.
[  220.855063][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2312'.
[  220.869313][    T9] usb_ehset_test 6-1:1.121: probe with driver usb_ehset_test failed with error -32
[  220.878830][  T312] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  220.887247][    T9] usb 6-1: USB disconnect, device number 40
[  221.022610][  T312] usb 8-1: device descriptor read/64, error -71
[  221.273486][  T312] usb 8-1: device descriptor read/64, error -71
[  221.392683][  T312] usb usb8-port1: attempt power cycle
[  221.732515][  T312] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  221.756272][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'.
[  221.763811][  T312] usb 8-1: device descriptor read/8, error -71
[  221.766553][ T7220] overlay: Unknown parameter 'dont_appraise'
[  221.778430][ T7220] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.893719][  T312] usb 8-1: device descriptor read/8, error -71
[  221.985513][ T7224] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.988002][   T36] audit: type=1400 audit(7002952064.274:599): avc:  denied  { map } for  pid=7223 comm="syz.3.2322" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  222.057826][ T7227] x_tables: duplicate underflow at hook 1
[  222.064219][   T36] audit: type=1400 audit(7002952064.355:600): avc:  denied  { mount } for  pid=7226 comm="syz.3.2323" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  222.065293][ T7227] x_tables: duplicate underflow at hook 1
[  222.142506][  T312] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  222.157819][ T7232] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q�
[  222.163694][  T312] usb 8-1: device descriptor read/8, error -71
[  222.196721][   T36] audit: type=1400 audit(7002952064.485:601): avc:  denied  { mounton } for  pid=7231 comm="syz.3.2324" path="/80/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  222.224688][   T36] audit: type=1400 audit(7002952064.515:602): avc:  denied  { unmount } for  pid=6414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  222.239076][ T7235] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.306234][  T312] usb 8-1: device descriptor read/8, error -71
[  222.422549][  T312] usb usb8-port1: unable to enumerate USB device
[  222.562414][   T45] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  222.712465][   T45] usb 4-1: Using ep0 maxpacket: 32
[  222.718821][   T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  222.732132][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  222.743320][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  222.755548][   T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  222.764726][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.773433][   T45] usb 4-1: config 0 descriptor??
[  222.778742][ T7239] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  222.786739][   T45] hub 4-1:0.0: USB hub found
[  222.987245][   T45] hub 4-1:0.0: 2 ports detected
[  223.194246][   T36] audit: type=1400 audit(7002952065.485:603): avc:  denied  { create } for  pid=7246 comm="syz.7.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  223.200890][ T7247] tipc: Started in network mode
[  223.218894][ T7247] tipc: Node identity 4, cluster identity 4711
[  223.225151][ T7247] tipc: Node number set to 4
[  223.247170][ T7252] binder: Bad value for 'max'
[  223.254598][ T7254] rust_binder: Error while translating object.
[  223.254641][ T7254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  223.261088][ T7254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185
[  223.295062][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7262 comm=syz.4.2335
[  223.315922][ T7264] rust_binder: Write failure EINVAL in pid:189
[  223.319839][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7262 comm=syz.4.2335
[  223.342170][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7262 comm=syz.4.2335
[  223.346878][ T7269] netlink: 'syz.7.2337': attribute type 6 has an invalid length.
[  223.472360][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  223.472359][  T563] Bluetooth: hci0: command 0x1003 tx timeout
[  223.642288][  T306] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  223.803561][  T306] usb 8-1: Using ep0 maxpacket: 32
[  223.809853][  T306] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  223.818284][  T306] usb 8-1: config 0 has no interface number 0
[  223.826035][  T306] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  223.835395][  T306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.843569][  T306] usb 8-1: Product: syz
[  223.847865][  T306] usb 8-1: Manufacturer: syz
[  223.852712][  T306] usb 8-1: SerialNumber: syz
[  223.862494][  T306] usb 8-1: config 0 descriptor??
[  223.868378][  T306] smsc95xx v2.0.0
[  224.047330][   T36] audit: type=1400 audit(7002952066.335:604): avc:  denied  { accept } for  pid=7280 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  224.068067][ T7281] sit0: entered promiscuous mode
[  224.074569][ T7281] netlink: 'syz.4.2341': attribute type 1 has an invalid length.
[  224.082755][ T7281] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2341'.
[  224.116847][   T36] audit: type=1400 audit(7002952066.405:605): avc:  denied  { execute } for  pid=7282 comm="syz.4.2342" path="/dev/binderfs/binder0" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  224.141649][ T7283] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  224.179517][ T7285] rust_binder: Error while translating object.
[  224.187673][ T7285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  224.194483][ T7285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1121
[  224.240099][ T7289] binder: Unknown parameter 'st'
[  224.270148][   T36] audit: type=1326 audit(7002952066.555:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.7.2339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd97118e929 code=0x0
[  224.270277][  T306] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  224.309530][ T7291] 9p filesystem being mounted at /370/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  224.324847][ T7291] kvm: user requested TSC rate below hardware speed
[  224.332748][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7291 comm=syz.4.2346
[  224.345638][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7291 comm=syz.4.2346
[  224.352065][  T306] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  224.362555][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7291 comm=syz.4.2346
[  224.380760][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7291 comm=syz.4.2346
[  224.983417][ T7299] binder: Bad value for 'stats'
[  224.988520][  T306] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  225.002344][  T306] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32
[  225.061850][ T7301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  225.061888][ T7301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1130
[  225.122651][ T7304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1133
[  225.141967][ T7304] rust_binder: Read failure Err(EFAULT) in pid:1133
[  225.353087][ T1946] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[  225.378572][ T7239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  225.378840][ T7239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260
[  225.492150][ T1946] usb 4-1: USB disconnect, device number 42
[  225.708987][ T7311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1138
[  225.716678][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'.
[  225.799387][   T36] audit: type=1400 audit(7002952068.085:607): avc:  denied  { unmount } for  pid=846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  225.824213][ T7316] 9pnet_fd: Insufficient options for proto=fd
[  225.832218][ T7316] rust_binder: Error while translating object.
[  225.832265][ T7316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  225.838548][ T7316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1141
[  225.849056][ T7316] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  225.902643][ T7322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1143
[  226.192298][ T5675] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  226.351946][ T5675] usb 4-1: Using ep0 maxpacket: 32
[  226.358293][ T5675] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  226.366720][ T5675] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  226.375470][ T5675] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  226.384469][  T312] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  226.392105][ T5675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  226.401791][ T5675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  226.411708][ T5675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  226.412628][ T1946] usb 8-1: USB disconnect, device number 10
[  226.425126][ T5675] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  226.439915][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.452855][ T5675] usb 4-1: config 0 descriptor??
[  226.456138][ T7349] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5:
[  226.456138][ T7349] attempt to add with overflow
[  226.465708][   T36] audit: type=1400 audit(7002952068.755:608): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  226.475757][ T7349] ------------[ cut here ]------------
[  226.501783][ T7349] kernel BUG at rust/helpers/bug.c:7!
[  226.507583][ T7349] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  226.514558][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.7.2366 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  226.528025][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  226.538129][ T7349] RIP: 0010:rust_helper_BUG+0x8/0x10
[  226.543462][ T7349] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 8d 0a 42 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 c7 ce 0b 94 90 90 90 90 90 90 90 90 90
[  226.563102][ T7349] RSP: 0018:ffffc90003b173f0 EFLAGS: 00010246
[  226.569209][ T7349] RAX: 000000000000008c RBX: 1ffff92000762e80 RCX: 22a9693c97536500
[  226.577229][ T7349] RDX: ffffc900045dd000 RSI: 0000000000008838 RDI: 0000000000008839
[  226.585243][ T7349] RBP: ffffc90003b173f0 R08: ffffc90003b170e7 R09: 1ffff92000762e1c
[  226.593238][ T7349] R10: dffffc0000000000 R11: fffff52000762e1d R12: 0000000000000000
[  226.601248][ T7349] R13: dffffc0000000000 R14: ffffc90003b17420 R15: ffffc90003b17450
[  226.609264][ T7349] FS:  00007fd9720666c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  226.618228][ T7349] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.624849][ T7349] CR2: 00007ffe475b4030 CR3: 000000012fcfe000 CR4: 00000000003526b0
[  226.632860][ T7349] DR0: 0000800000000000 DR1: 0000000000000008 DR2: 0000000000000000
[  226.640861][ T7349] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  226.648868][ T7349] Call Trace:
[  226.652170][ T7349]  <TASK>
[  226.655135][ T7349]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  226.662634][ T7349]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  226.667180][ T5675] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  226.670657][ T7349]  ? kernel_text_address+0xa9/0xe0
[  226.670692][ T7349]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  226.690311][  T312] usb 5-1: device descriptor read/64, error -71
[  226.700041][ T7349]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  226.700085][ T7349]  ? preempt_schedule_irq+0x9c/0x100
[  226.717861][ T7349]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  226.725120][ T7349]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  226.733118][ T7349]  ? raw_irqentry_exit_cond_resched+0x33/0x40
[  226.739324][ T7349]  ? irqentry_exit+0x4a/0x60
[  226.743930][ T7349]  ? sysvec_apic_timer_interrupt+0x50/0x90
[  226.749778][ T7349]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  226.755941][ T7349]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0
[  226.765854][ T7349]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  226.776477][ T7349]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  226.787122][ T7349]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0
[  226.799385][ T7349]  ? mas_wr_store_type+0x8eb/0x1ad0
[  226.804594][ T7349]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10
[  226.817368][ T7349]  ? mas_preallocate+0x56e/0xc60
[  226.822319][ T7349]  ? __cfi_mas_preallocate+0x10/0x10
[  226.827610][ T7349]  ? kasan_save_alloc_info+0x40/0x50
[  226.832908][ T7349]  ? __asan_memset+0x39/0x50
[  226.837511][ T7349]  mmap_region+0x136b/0x1bc0
[  226.842203][ T7349]  ? __cfi_mmap_region+0x10/0x10
[  226.847159][ T7349]  ? __futex_queue+0x19a/0x340
[  226.851944][ T7349]  ? __kasan_check_read+0x15/0x20
[  226.856974][ T7349]  ? arch_get_unmapped_area_topdown+0x232/0x8d0
[  226.863266][ T7349]  ? file_mmap_ok+0x147/0x1a0
[  226.867985][ T7349]  do_mmap+0xb6d/0x13c0
[  226.872176][ T7349]  ? __cfi_do_mmap+0x10/0x10
[  226.876789][ T7349]  ? down_write_killable+0xe9/0x2d0
[  226.882005][ T7349]  ? __cfi_down_write_killable+0x10/0x10
[  226.887749][ T7349]  vm_mmap_pgoff+0x38f/0x4e0
[  226.892369][ T7349]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  226.897499][ T7349]  ? __fget_files+0x2c5/0x340
[  226.902198][ T7349]  ksys_mmap_pgoff+0x166/0x1e0
[  226.906978][ T7349]  __x64_sys_mmap+0x121/0x140
[  226.911676][ T7349]  x64_sys_call+0x13bf/0x2ee0
[  226.916367][ T7349]  do_syscall_64+0x58/0xf0
[  226.920800][ T7349]  ? clear_bhb_loop+0x50/0xa0
[  226.925482][ T7349]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  226.931381][ T7349] RIP: 0033:0x7fd97118e929
[  226.935824][ T7349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.955439][ T7349] RSP: 002b:00007fd972066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  226.963865][ T7349] RAX: ffffffffffffffda RBX: 00007fd9713b5fa0 RCX: 00007fd97118e929
[  226.971842][ T7349] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000
[  226.979815][ T7349] RBP: 00007fd971210b39 R08: 0000000000000003 R09: 0000000000000000
[  226.987794][ T7349] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  226.995856][ T7349] R13: 0000000000000000 R14: 00007fd9713b5fa0 R15: 00007ffe475b3c18
[  227.003850][ T7349]  </TASK>
[  227.006874][ T7349] Modules linked in:
[  227.011119][ T7349] ---[ end trace 0000000000000000 ]---
[  227.016600][   T10] usb 4-1: USB disconnect, device number 43
[  227.020045][   T10] usblp0: removed
[  227.025292][ T7349] RIP: 0010:rust_helper_BUG+0x8/0x10
[  227.032320][ T7349] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 8d 0a 42 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 c7 ce 0b 94 90 90 90 90 90 90 90 90 90
[  227.052077][ T7349] RSP: 0018:ffffc90003b173f0 EFLAGS: 00010246
[  227.058282][ T7349] RAX: 000000000000008c RBX: 1ffff92000762e80 RCX: 22a9693c97536500
[  227.066373][ T7349] RDX: ffffc900045dd000 RSI: 0000000000008838 RDI: 0000000000008839
[  227.074597][ T7349] RBP: ffffc90003b173f0 R08: ffffc90003b170e7 R09: 1ffff92000762e1c
[  227.082958][ T7349] R10: dffffc0000000000 R11: fffff52000762e1d R12: 0000000000000000
[  227.091123][ T7349] R13: dffffc0000000000 R14: ffffc90003b17420 R15: ffffc90003b17450
[  227.099472][ T7349] FS:  00007fd9720666c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  227.108550][ T7349] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.115285][ T7349] CR2: 00007f990f581178 CR3: 000000012fcfe000 CR4: 00000000003526b0
[  227.123404][ T7349] DR0: 0000800000000000 DR1: 0000000000000008 DR2: 0000000000000000
[  227.131433][ T7349] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  227.139562][ T7349] Kernel panic - not syncing: Fatal exception
[  227.145977][ T7349] Kernel Offset: disabled
[  227.150573][ T7349] Rebooting in 86400 seconds..