last executing test programs:

5m34.258593128s ago: executing program 32 (id=831):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x8, {0x8000004, 0x0, 0x1, 0x0, 0x1, 0x102, {0x1, 0x8bdf, 0x1, 0x7, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4000, 0x8000, r2, 0x0, 0x102}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000003b40)="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", 0x2000, &(0x7f0000005b40)={&(0x7f00000002c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0xe, 0x200000, 0x887, 0x0, 0x7f, 0xfffffffe, 0x0, 0x0, 0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="100d00000000b00a869233072df22d585839109b775101bae50de951453cf014f31b4ec8af575d46376f0327654eff9b96834c35a2a1a330f572037ca2283136d1f438d887407a44cee3baf0e801fec72b1a6ec21058929228407b1593965ea80bbc54048438c6de1dba7ae82f90f9e376d4f480e6cd8609e6454a5e0c8ab0af71143e29b51d6d554bb10d99e9"], 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000005c00)="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", 0x2000, &(0x7f0000001740)={&(0x7f0000000940)={0x50, 0x0, 0x31e2ab04, {0x7, 0x2b, 0x2, 0x200, 0x2, 0x96, 0x1, 0x3, 0x0, 0x0, 0x8, 0xdf}}, &(0x7f0000000840)={0x18, 0xffffffffffffffda, 0xf, {0x2}}, &(0x7f00000009c0)={0x18, 0x0, 0x2, {0x80200000000}}, &(0x7f0000000a00)={0x18, 0x0, 0x8000000000000000, {0x6}}, &(0x7f0000000a40)={0x18, 0xffffffffffffffda, 0x20000, {0x1ff}}, &(0x7f0000000a80)={0x28, 0xffffffffffffffc5, 0x100000000000000, {{0xaa4, 0x3, 0x1, r4}}}, &(0x7f0000000ac0)={0x60, 0x0, 0x5, {{0x2, 0x2, 0x8, 0x9, 0xb07, 0x100, 0xfffff7bc, 0x7}}}, &(0x7f0000000b40)={0x18, 0xfffffffffffffff5, 0x0, {0x4}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="11e0ffffff"], &(0x7f0000000bc0)={0x20, 0x0, 0x10001, {0x0, 0x6}}, &(0x7f0000000c00)={0x78, 0x0, 0x2, {0xae, 0x3, 0x0, {0x4, 0x6, 0x6e, 0x8, 0xffffffffffffffff, 0x3, 0x800, 0x2, 0xe7, 0x1000, 0xd7ea, r2, r3, 0x8001, 0x1}}}, &(0x7f0000000c80)={0x90, 0x0, 0x0, {0x0, 0x2, 0xffffffffffffffff, 0x5f8a3a2e, 0x849, 0x3, {0x4, 0x2, 0x2b, 0x0, 0x9e, 0x9, 0x9, 0x6, 0x0, 0xa000, 0x7fff, r2, r3, 0x2, 0x2}}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="b0000000daffffff040000001e0000000200000000000000010000000000000005000000020000006675736500000000060000000000000005000000000000000300000005000000402e3a00000000000300000000000000ffffffffffffffff0300000006bfcd02cf055d35f4e736030000005d2d2d000000000006000000000000000500000000000000010000000a0000000000000000000000010000000000000000000004000000000100000004"], &(0x7f0000000ec0)={0x5b8, 0xfffffffffffffffe, 0xffffffffffff7778, [{{0x0, 0x1, 0x1, 0x7f, 0x400, 0x7, {0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x3, 0x9a, 0x1, 0x2000, 0x2, r2, r3, 0x5}}, {0x1, 0xe, 0x7, 0x1000, '##\x96]*{)'}}, {{0x0, 0x3, 0x6769, 0x5, 0x101, 0xb24, {0x5, 0x8000000000000001, 0xdd, 0x6, 0x76, 0x401, 0x7, 0x6, 0xf6, 0x6000, 0x6, 0x0, 0x0, 0xe, 0x7fffffff}}, {0x4, 0x3, 0x7, 0xf, '\x85\x8b\x0e-\x88\xf1\x00'}}, {{0x1, 0x1, 0xffff, 0x8, 0xcf5a, 0x0, {0x4, 0x7f, 0x73, 0x0, 0x4, 0xd4de, 0x9, 0x5, 0xffff, 0x6000, 0x1d1f19e0, r2, r3, 0xc94, 0x86b}}, {0x4, 0x81, 0x4, 0x4dbc759, '@$@{'}}, {{0x6, 0x3, 0x7, 0x1, 0x9, 0xc, {0x5, 0x2, 0x9, 0x6, 0x3, 0x3, 0x3bd, 0x1, 0xfffffffd, 0xa000, 0x6, r2, r3, 0xf678, 0x6}}, {0x2, 0x3, 0xb, 0x6, '/proc/self\x00'}}, {{0x4, 0x1, 0xff, 0x6, 0x9, 0x4, {0x0, 0x5, 0x9, 0x10000, 0x3, 0xa5, 0x3ff, 0x200, 0x5dd9f35a, 0x1000, 0x8, 0x0, r3, 0x9c, 0xc6f3}}, {0x3, 0x5, 0x5, 0x9, 'fuse\x00'}}, {{0x1, 0x2, 0x3, 0x725a, 0xffffff7b, 0xb7, {0x0, 0x9c, 0x9, 0xa, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6000, 0x7, r2, r3, 0x9, 0x6}}, {0x4, 0x3, 0x0, 0x9}}, {{0x3, 0x1, 0x7, 0xfffffffffffffff7, 0x200, 0xc375, {0x6, 0x0, 0x80, 0x9, 0x8, 0x7, 0x0, 0x0, 0xfffffbff, 0xa000, 0x375, r2, r3, 0x9, 0xffff}}, {0x5, 0x3798, 0xd, 0x6, '/dev/rnullb0\x00'}}, {{0x2, 0x1, 0xae0, 0x8, 0x6, 0xf, {0x1, 0xcd, 0x7, 0x1, 0x80000000, 0x1, 0x0, 0x1, 0x794, 0x4000, 0x8, r2, r3, 0x7, 0x1}}, {0x2, 0x99a, 0x0, 0x5}}, {{0x1, 0x0, 0x401, 0x2, 0xa, 0x1, {0x3, 0x8000000000000001, 0xffff, 0x6, 0x6, 0x8001, 0xfffffff1, 0x6, 0x3, 0x2000, 0x8, 0x0, r3, 0x5, 0xb}}, {0x6, 0x7fffffff, 0xb, 0x1, '/proc/self\x00'}}]}, &(0x7f0000001480)={0xa0, 0x0, 0x9, {{0x0, 0x2, 0x7, 0x40, 0x2, 0x4, {0x0, 0x8000000000000000, 0x4, 0x5, 0x8, 0xe, 0x2, 0x400, 0x7ff, 0xc000, 0x2, r2, r3, 0x6, 0x6}}, {0x0, 0x3}}}, &(0x7f0000001540)={0x20, 0xfffffffffffffff5, 0x98, {0x0, 0x0, 0xa5, 0xc}}, &(0x7f0000001600)={0x130, 0x0, 0x9, {0x1, 0x3ff, 0x0, '\x00', {0x200, 0xffff, 0x3184, 0x4, r2, r3, 0x8000, '\x00', 0x341f, 0xa, 0x7, 0x80000001, {0x8, 0x8001}, {0xe8, 0x80000000}, {0x3585, 0x80000000}, {0x23, 0x9}, 0x5, 0x19, 0xd, 0x9}}}})

5m18.022906478s ago: executing program 33 (id=1115):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={@broadcast, 0x1, 0x0, 0x60, 0x0, [{@multicast2}, {@broadcast}, {@dev}, {@local}, {@dev}, {@dev}]}}) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x300, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r2, &(0x7f0000007640), 0x0, 0x814) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0xc98f, 0x3, 0x0, 0x0, 0xc07}}, 0x120)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0})

4m50.616398059s ago: executing program 34 (id=1334):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/95, 0xffffff51)
read(r0, &(0x7f00000004c0)=""/92, 0x1001)
close(r0)

3m13.469974869s ago: executing program 5 (id=2961):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="7774617473030000000000000000"])
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)={0x1, 0x0, @d}, 0x18, r1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)

3m13.323657332s ago: executing program 5 (id=2962):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd64}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4004080)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r0, 0x720, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x40081)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r6)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc6f4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$inet(0x2, 0x80000, 0x2)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0xfffffffffffffffd, 0x20004804)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r6)
sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c051}, 0x8)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4400, 0x0)
ioctl$BLKIOMIN(r10, 0x1278, &(0x7f0000000d00))
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x13c, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0xc804)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r6)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r13, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40001)
syz_genetlink_get_family_id$nfc(&(0x7f0000001100), r6)

3m13.247867203s ago: executing program 5 (id=2963):
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}})
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0xffffffff, 0x0, 0x0, 0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_int(r4, 0x0, 0x15, 0x0, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r6, 0x2000009)
sendfile(r3, r6, 0x0, 0x7ffff004)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x5411, 0x0)
close(r1)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x7, 0x8, 0x0, 0x4, 0x8000, 0x8, 0x3, 0x5, 0x101, 0x4, 0x2, 0x4, 0x8, 0x6b39, 0x8], 0x1000, 0x101200})
close(r2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006)

3m13.169647705s ago: executing program 5 (id=2964):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
fremovexattr(r3, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
close_range(r4, r4, 0x0)
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040), &(0x7f0000000180), 0x2, 0x2)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x4000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000080)={0xeeef0000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000000c0)={0x6000, 0x7000})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
process_vm_readv(r8, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0xfffffffffffffffd})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

3m12.940059918s ago: executing program 5 (id=2965):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x101, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x18, 0xe68, @l2={'ib', 0x3a, 'pimreg\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

3m12.702940252s ago: executing program 5 (id=2967):
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/95, 0xffffff51)
unshare(0x8000400)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, 0x0)
r4 = accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000040)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0xa00, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async)
read(r0, &(0x7f0000000180)=""/95, 0xffffff51) (async)
unshare(0x8000400) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, 0x0) (async)
accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000040)=0x60) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0xa00, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x8) (async)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async)

3m2.892655455s ago: executing program 35 (id=2914):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6001, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/95, 0xffffff51)

2m57.590043733s ago: executing program 36 (id=2967):
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/95, 0xffffff51)
unshare(0x8000400)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, 0x0)
r4 = accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000040)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0xa00, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async)
read(r0, &(0x7f0000000180)=""/95, 0xffffff51) (async)
unshare(0x8000400) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, 0x0) (async)
accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000040)=0x60) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0xa00, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x8) (async)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async)

2m54.987737817s ago: executing program 4 (id=3038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x908, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009f78fd0c762630f5abd67b1f5ab8f07ee8269b90128f71cfd4dce7e18e7e1acdf212d5a2001833812233f964046e3c25212fc748ab375550e86426130dc023f206ab749f9957f8f1c8fdf5a603d46f5ac918b90dc25161b6a59ec1d91c34fda10fce0b22b29ec5faa4ad2e7d6cf732cea2fc4d8498351eb491dd941b", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2501000000100002800c000180080001000700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004)

2m54.876123849s ago: executing program 4 (id=3039):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
symlinkat(&(0x7f0000000340)='./file0/file0\x00', r1, &(0x7f0000000380)='./file0\x00')
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNGETFILTER(r2, 0x801054db, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10482, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x100000002000c)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x4010, r3, 0x0)

2m54.739862041s ago: executing program 4 (id=3043):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac054182000000000001090224000100000000090400000103000000092100000007220500090581030000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000a00)={0x40, 0x30, 0x11, {0x11, 0xf, "b4de389fadd599cb9286690595295c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d43769895c42c07f4c6c6e1d2670987830677f51c50f30a439b8696e0472c8c522cd13b469ebdfa10be5a65acdcb1e8c185c7c8008acead9d6bf02f02f8889a4173710bde2d463ac24fd606c5f7b9fb0e5298a9483c79e2b302ddf9b7a4c3542c184fe1053f77ff00f794", @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, <r5=>0x0}, 0xfffffeb4)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0xc1da, 0x804a080, 0x0, 0x3, 0x1, 0xfffffffc, 0x0, 0x0, 0x20, 0x3}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r7=>0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0x10000})
ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000080)={0x0, 0x1, 0x2fe, 0x0, 0x0, 0x1, 0x0})
lseek(r8, 0x4, 0x0)
io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x3000}])
socket$inet6_tcp(0xa, 0x1, 0x0)

2m53.864096966s ago: executing program 4 (id=3050):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000))
io_setup(0xe4, &(0x7f0000000000)=<r2=>0x0)
io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)

2m53.816605686s ago: executing program 4 (id=3053):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010626bd7000fbdbdf2509000000180004801300010062726f6164636173742d2c696e6b00007a184635a9cb9fda134a15567ae7cfe5f17f5312660369566ab2"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010626bd7000fbdbdf2509000000180004801300010062726f6164636173742d2c696e6b00007a184635a9cb9fda134a15567ae7cfe5f17f5312660369566ab2"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) (async)

2m53.692526178s ago: executing program 4 (id=3054):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x4, 0x1, &(0x7f0000000040)="fc5647ab"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1000007, 0x2012, r5, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
syz_clone(0x20004000, &(0x7f0000000340)="63cdbfa6e76db12e13de3d9b516330f814d0babe4d34f9eecfa5", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="57e5c006365d24ee081812")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]})
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async)
sendmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}}], 0x2, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) (async)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) (async)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040805)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2m38.534841901s ago: executing program 37 (id=3054):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x4, 0x1, &(0x7f0000000040)="fc5647ab"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1000007, 0x2012, r5, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
syz_clone(0x20004000, &(0x7f0000000340)="63cdbfa6e76db12e13de3d9b516330f814d0babe4d34f9eecfa5", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="57e5c006365d24ee081812")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]})
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async)
sendmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}}], 0x2, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) (async)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) (async)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040805)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2m26.212276186s ago: executing program 9 (id=3294):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000280)=0x60) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) (async)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000140)) (async, rerun: 64)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async)
r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r11, 0x41007701, &(0x7f0000000000)='#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a') (async)
ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000}) (async, rerun: 32)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r9, 0x4068aea3, &(0x7f0000000180)) (async, rerun: 32)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x8000) (async)
ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0) (async)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x268d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3}, 0xe)

2m25.395840089s ago: executing program 9 (id=3302):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x3, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x3, 0x4)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000040))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f00000023c0)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1, &(0x7f0000000100)=[{&(0x7f0000002440)=""/169, 0xa9}], 0x1, 0x0) (async)
process_vm_readv(r4, &(0x7f00000023c0)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1, &(0x7f0000000100)=[{&(0x7f0000002440)=""/169, 0xa9}], 0x1, 0x0)
prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) (async)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'ip6erspan0\x00', {0xfffffffe}, 0x3})

2m25.311780341s ago: executing program 9 (id=3304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c000180140003"], 0x50}}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x6, 0xffffffffffffffff, 0xf58a, 0x5, 0xce9, 0xfff, 0x6, 0x4, 0x80, 0x2, 0x5, 0xa, 0x26d9, 0x2d, 0xdd3, 0x2882], 0x10000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x4e22, @multicast1}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

2m24.982808156s ago: executing program 9 (id=3310):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2045010, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r6 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x22, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]})
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000e40)={0xf2, 0x100072}, 0x20)
write$UHID_INPUT(r9, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000", [0x800000000]}})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000001440))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0})

2m24.680186131s ago: executing program 9 (id=3315):
mount$binderfs(&(0x7f00000021c0), &(0x7f0000000100)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40)
bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x9, 0x0, 0x2b, r2}, 0x10)

2m24.636160702s ago: executing program 9 (id=3316):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f0000000440)=[@request_death={0x400c630e, 0x2}, @clear_death, @clear_death, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/28, 0x1c, 0x2, 0x11}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x57, 0x0, &(0x7f0000000500)="294cc7c79d6366010bb906db2411ec4780b9e35a7564650faac475e8273d63c43d46e42c31b48ac0c0b59712c39ea77098c2570f1ecfa270da599c349c3961d94a7e753da36727b3fc158328197b77cd6a34046417f806"})
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10)
close(r1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000f65000/0x1000)=nil, 0x1000}, 0x2})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x800)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2m9.506298483s ago: executing program 38 (id=3316):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f0000000440)=[@request_death={0x400c630e, 0x2}, @clear_death, @clear_death, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/28, 0x1c, 0x2, 0x11}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x57, 0x0, &(0x7f0000000500)="294cc7c79d6366010bb906db2411ec4780b9e35a7564650faac475e8273d63c43d46e42c31b48ac0c0b59712c39ea77098c2570f1ecfa270da599c349c3961d94a7e753da36727b3fc158328197b77cd6a34046417f806"})
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10)
close(r1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000f65000/0x1000)=nil, 0x1000}, 0x2})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x800)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2m7.383905039s ago: executing program 8 (id=3441):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r1, 0x0, 0x0, 0x8e000, &(0x7f00000000c0)={0xa, 0x4e22, 0x5f, @local, 0x5}, 0x1c) (async)
r2 = dup2(r1, r1)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
dup2(r2, r3) (async)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000013c0), 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x48, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x1201, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)

2m7.275047041s ago: executing program 8 (id=3443):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
kcmp(r2, r3, 0x6, r1, r1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
read(r0, &(0x7f0000000280)=""/112, 0x70)

2m7.237274492s ago: executing program 8 (id=3445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x4, 0x0, &(0x7f00000002c0)="3fe2479d"})

2m7.111824974s ago: executing program 8 (id=3446):
sched_setscheduler(0x0, 0x1, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) (async)
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726b6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f69643dcec41b07acbf19ba41697e4683fd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async)
r3 = socket$inet6(0xa, 0x80002, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x99b33000) (async)
mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x43) (async)
setreuid(0xee00, 0x0) (async)
r9 = getuid()
chown(&(0x7f0000000180)='./file0\x00', r9, 0xffffffffffffffff) (async)
getuid()

2m7.086952804s ago: executing program 8 (id=3447):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async)
io_setup(0x7, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[]) (rerun: 64)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async, rerun: 32)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 32)
close_range(r2, r0, 0x2) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f0000008280)={0x2020}, 0xffffffa3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x45809000) (async)
r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x0, 0x6}) (async, rerun: 32)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) (async, rerun: 32)
read(r2, 0x0, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/96, 0x0, 0xeeee0000}) (rerun: 32)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

2m6.960101006s ago: executing program 8 (id=3449):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001600)=""/4096, 0x1000, 0x5f, 0xf2, 0x644, 0x8, 0x1}}, 0x120)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
io_setup(0x7, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[])
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
close_range(r2, r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x45809000)
r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
read(r2, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

1m51.612870691s ago: executing program 39 (id=3449):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001600)=""/4096, 0x1000, 0x5f, 0xf2, 0x644, 0x8, 0x1}}, 0x120)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
io_setup(0x7, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[])
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
close_range(r2, r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x45809000)
r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
read(r2, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

1m47.612531608s ago: executing program 1 (id=3578):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x420c03, 0x0)
mmap(&(0x7f00007c0000/0x4000)=nil, 0x4000, 0x3000002, 0x8010, r0, 0xfcd1e000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80801, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRES64=r1])
syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
eventfd(0x6)
r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4b90, 0x100)
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000040)={0x32, 0x3, 0x5, 0x9, "b7e25589c0de58501b6e94a4ddf32ea0846f7a293fde3635aef200"})
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r11, &(0x7f0000003840)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r11, 0x40045402, &(0x7f0000000180)=0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, 0x0, 0x0)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000280)=&(0x7f00000000c0))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0xfffffffe, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xeeee8000})

1m46.631419864s ago: executing program 1 (id=3586):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x30, r3, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')

1m46.447710207s ago: executing program 1 (id=3588):
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, <r1=>0x0}, &(0x7f0000005180)=0xc)
setfsgid(r1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000dc0), 0xfffffffffffffffb, 0x402)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x0, 0x30, r3, 0x572d3000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000001200))
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x4)
ppoll(&(0x7f00000000c0)=[{r4, 0x2093}], 0x1, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x50040)
readv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/249, 0xffffffffffffffbf}, {&(0x7f0000000300)=""/187}], 0x1)
r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000002c0)=0xe, 0x80800)
recvmmsg(r8, &(0x7f0000007380)=[{{&(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/4, 0x4}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/142, 0x8e}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/135, 0x87}, {&(0x7f0000000480)=""/88, 0x58}], 0x7, &(0x7f0000000a40)=""/101, 0x65}, 0x6}, {{&(0x7f0000000ac0)=@l2tp6, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/80, 0x50}, {&(0x7f0000000bc0)=""/242, 0xf2}, {&(0x7f0000000cc0)=""/185, 0xb9}], 0x3, &(0x7f0000000dc0)}, 0x100}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/17, 0x11}], 0x1, &(0x7f0000000e80)=""/212, 0xd4}, 0x100}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/140, 0x8c}, {&(0x7f00000010c0)=""/157, 0x9d}, {&(0x7f0000001180)=""/35, 0x23}], 0x3, &(0x7f00000075c0)=""/134, 0x86}, 0x8}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/71, 0x47}, {&(0x7f0000002380)=""/87, 0x57}, {&(0x7f0000002400)=""/52, 0x34}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/105, 0x69}, {&(0x7f00000034c0)=""/185, 0xb9}], 0x7, &(0x7f0000003600)=""/100, 0x64}, 0x6}, {{&(0x7f0000003680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/238, 0xee}, {&(0x7f0000004800)=""/219, 0xdb}, {&(0x7f0000004900)=""/135, 0x87}, {&(0x7f00000049c0)=""/36, 0x24}], 0x5, &(0x7f0000004a80)=""/137, 0x89}, 0x8}, {{&(0x7f0000004b40)=@nfc_llcp, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004bc0)=""/134, 0x86}, {&(0x7f0000004c80)=""/172, 0xac}, {&(0x7f0000004d40)=""/84, 0x54}, {&(0x7f0000004dc0)=""/33, 0x21}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x5, &(0x7f0000005e80)=""/40, 0x28}, 0x1}, {{&(0x7f0000005ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000005f40)=""/159, 0x9f}, {&(0x7f0000006000)=""/249, 0xf9}, {&(0x7f0000006100)=""/66, 0x42}, {&(0x7f0000006180)=""/10, 0xa}, {&(0x7f00000061c0)=""/19, 0x13}, {&(0x7f0000006200)=""/177, 0xb1}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x7, &(0x7f0000007340)=""/2, 0x2}, 0x2}], 0x8, 0x0, &(0x7f0000007580)={0x0, 0x3938700})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x414400, 0x0)

1m44.864135654s ago: executing program 1 (id=3607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x6d]}}]})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="e01400002d00010000000000fbdbdf251d010900cc141380c814"], 0x14e0}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000060402ec19ecd9030005000000000002"], 0x50}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCNOTTY(r5, 0x5422)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240088d1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000c000180080001000a0000000400018000"/28], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1m44.797483115s ago: executing program 1 (id=3609):
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0xfffffffffffffffb, 0x0, 0x0, 0x1, 0x0, {0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x20000001, 0x3ff, 0x6000, 0x2, r4, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x809000}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r5)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r8], 0x48}}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0})

1m44.5039445s ago: executing program 1 (id=3613):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000004c0)={0x2, 0x66f04ba4})
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0xbc, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x7}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/57, 0x39, 0x0, 0x17}, @fda={0x66646185, 0x7, 0x0, 0x1f}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1103, 0x1}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @dead_binder_done, @free_buffer], 0x9, 0x0, &(0x7f0000000040)="ae69c3a22f93e3df8d"})
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, 0x0, 0x0)
r9 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

1m43.414684408s ago: executing program 3 (id=3632):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x2000001, {{0xa, 0x4e24, 0xfffffffc, @mcast2, 0xfffffffb}}, {{0xa, 0x0, 0x82, @local, 0x5}}}, 0x158)

1m43.29652841s ago: executing program 3 (id=3633):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x144}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x100)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x1, 0x200, 0x9, 0x8, 0x400, 0x5})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})

1m41.44500005s ago: executing program 3 (id=3643):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
epoll_create(0x8)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

1m41.302696333s ago: executing program 3 (id=3644):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x803, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000580)=""/176, 0xb0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x20000003}, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r3, 0xc008aeba, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/271, 0x10f, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x803, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async)
getdents(r1, &(0x7f0000000580)=""/176, 0xb0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x20000003}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_SET_PIT2(r3, 0xc008aeba, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/271, 0x10f, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) (async)

1m40.976878448s ago: executing program 3 (id=3647):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000004)

1m40.758641102s ago: executing program 3 (id=3651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x200, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m40.646858304s ago: executing program 40 (id=3651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x200, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m29.514157839s ago: executing program 41 (id=3613):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000004c0)={0x2, 0x66f04ba4})
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0xbc, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x7}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/57, 0x39, 0x0, 0x17}, @fda={0x66646185, 0x7, 0x0, 0x1f}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1103, 0x1}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @dead_binder_done, @free_buffer], 0x9, 0x0, &(0x7f0000000040)="ae69c3a22f93e3df8d"})
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, 0x0, 0x0)
r9 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

3.139902582s ago: executing program 6 (id=4512):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0xa, 0x7)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200})
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x2)
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000380)={0x8001, 0x3, 0x6, 0x8000, 0x12, "7218e0592acbb406"})
syz_clone(0x2100, &(0x7f00000003c0)="ff55", 0x2, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="fbad7afe09fa7028426dd65ae9ff6862e515ef999d2bc11ef70ee41809e63957f84560776a0576ef1d8bcb57b9c5d46f42819e503244506dd405a46538dca3edd409576185f5b4cdb1a82eee6c4bbf0042f2c88db2747d3a12ec14647ed6bf9fe8d4888a26cd5192459505def27f43608b56e9541a4e17e78b061c640a868eaa2b5605f94f8839498771e73835d85b63b4b7766091f9b011e9e906e8c008e40bd351f9f53643215007cfc0d7cef6cdd880dd60a3e2d862158306692205ab9f10ace0470cf282938f835a3131a3242544472ec1")
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="9d4176812a", 0x5}], 0x1, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}, 0x5)

2.996494455s ago: executing program 6 (id=4514):
r0 = epoll_create(0x66b)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000000})
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28802, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

2.555970871s ago: executing program 0 (id=4515):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netpci0\x00', &(0x7f0000000000)=@ethtool_cmd={0x40, 0x3, 0xb034, 0x400, 0x9, 0x5, 0x8, 0x2, 0x4, 0x4, 0x7f, 0x4, 0x9, 0x5, 0x2, 0x6, [0x1, 0xfdd]}})

2.553338081s ago: executing program 0 (id=4516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$TUNGETDEVNETNS(r0, 0xff05, 0x0)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

2.520440452s ago: executing program 6 (id=4517):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (fail_nth: 15)

2.483734443s ago: executing program 7 (id=4518):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2b, 'perf_event'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2b, 'io'}]}, 0x2b)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}], 0x2)
sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x8, 0x1, 0x1, 0x0, 0xfff, 0xfffffff9, 0xaa, 0x1, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa08, &(0x7f00000001c0)={&(0x7f00000b0000/0x2000)=nil, 0x2000})

2.299927345s ago: executing program 0 (id=4519):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fffa18105e04da0700000000000109022400010000000009040000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000006, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000240)={0x2, r4})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0xf1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0xf1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"})
openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x80b82, 0x0)

1.958321101s ago: executing program 6 (id=4520):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x1, 0xfffffffffffffff8}}, 0x28)

1.820279593s ago: executing program 7 (id=4521):
lgetxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=""/56, 0x38)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
creat(&(0x7f00000004c0)='./file1\x00', 0x51)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.702197334s ago: executing program 6 (id=4523):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000200)={0x14, r1, 0x40d, 0x70bd2a, 0x0, {0x22}}, 0x14}}, 0x4000000) (fail_nth: 14)

1.514314237s ago: executing program 6 (id=4524):
r0 = socket(0x11, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xe, 0x2, 0x7, 0xf0, 0x2000223b, 0x4a, 0x80000001, 0x8, 0x3, 0x80000400, 0x3fd, 0x8, 0xa, 0x0, 0x7, 0xfffefffb, 0x5281, 0x8f9, 0x6af, 0x6, 0x96b3, 0x40, 0x9}})
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x9cc6d000)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0xe, 0x2012, 0xffffffffffffffff, 0x6000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000480)={0x34, 0xb, 0x7, 0xe, 0xa, 0xb8, 0x2, 0x9d, 0xffffffffffffffff})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
setuid(0xee00)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r7, 0x89a0, 0x0)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock '], 0xe)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x68, 0x0, &(0x7f0000000280)="726167e417fceb9c8d626caeadf4e3646ae42af680456bc3bffc9eb4217ec62ae8b4614950c4b225fece1558d32c74d47da463869cbd88ae507ce3c46a15bf3668d0ff2bee50037121d0f0285f62e8c86502ad094489a5680116e83edde6e66f1d38bb450aedd415"})
prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x1, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1.287005431s ago: executing program 7 (id=4525):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000140))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000015c0)={'veth0_to_hsr\x00', &(0x7f0000001500)=@ethtool_rx_ntuple={0x35, {0x8, @tcp_ip4_spec={@local, @private=0xa010102, 0x4e24, 0x4e21, 0x3}, @esp_ip4_spec={@empty, @remote, 0x4, 0x3}, 0x3266, 0x81, 0x3, 0x7, 0xffffffffffffffff}}})
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

980.073866ms ago: executing program 7 (id=4526):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff})
prctl$PR_CAPBSET_DROP(0x18, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup3(r4, r3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f00000053c0)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182", 0x6, 0xfffffffffffffffe) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121101, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r11, 0x29, 0x1d, 0x0, &(0x7f0000000040))
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x2000, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

841.174677ms ago: executing program 2 (id=4527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4000004)

775.865778ms ago: executing program 2 (id=4528):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x7, 0x5})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r2 = gettid()
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x606201, 0x80)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd700008c3550c1e73909680004650a88bfcdbdf250e00040008000b000700000008003b000300000008002b000000070008003a0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x1010}, 0x40)
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2df, 0x80)
ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000040))
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
close_range(r0, r0, 0x2)
process_madvise(r7, 0x0, 0x0, 0x14, 0x0)
r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = syz_open_procfs$userns(0x0, &(0x7f0000000100))
mount_setattr(r8, &(0x7f00000000c0)='./file0/file0\x00', 0x1000, &(0x7f0000000140)={0xf8, 0x300086, 0x180000, {r9}}, 0x20)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000000000000f8ffffffffffffff000000f8ffffffffffffff090000000800"/49], 0x31)

684.08997ms ago: executing program 2 (id=4529):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
chdir(0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000012c0)={0x103fc, 0x0, 0x3000, 0x1000, &(0x7f0000fe3000/0x1000)=nil})
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x280000a)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x1000, [0x8, 0x3, 0xfffffffffffffffc, 0x5bcb, 0x0, 0x1], 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000240)=0x78)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x5, 0x4)
pread64(r4, &(0x7f0000001300)=""/194, 0xc2, 0x6)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x6, 0x0)
timerfd_create(0x0, 0x80800)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c6314}], 0x0, 0x0, 0x0})

683.83507ms ago: executing program 7 (id=4530):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2b, 'perf_event'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2b, 'io'}]}, 0x2b)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}], 0x2)
sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x8, 0x1, 0x1, 0x0, 0xfff, 0xfffffff9, 0xaa, 0x1, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa08, &(0x7f00000001c0)={&(0x7f00000b0000/0x2000)=nil, 0x2000})

597.896051ms ago: executing program 2 (id=4531):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x1, 0xfffffffffffffff8}}, 0x28)

561.811142ms ago: executing program 2 (id=4532):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000200)={0x14, r1, 0x40d, 0x70bd2a, 0x0, {0x22}}, 0x14}}, 0x4000000) (fail_nth: 15)

483.872283ms ago: executing program 2 (id=4533):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x58000, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x9}) (async)
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8000) (async)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (rerun: 64)
ioctl$IOC_PR_RESERVE(r5, 0x401070c9, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) (rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x40, 0x2}, 0xff15, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400340, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x6, 0x9, 0x0, 0x0, 0xf}) (async, rerun: 64)
read(r7, &(0x7f00000002c0)=""/200, 0x39) (async, rerun: 64)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000400)={[{0x3, 0xc003, 0x1, 0x5, 0xfd, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x8000}, {0x804, 0x1, 0x5, 0x45, 0x29, 0x4, 0x2, 0xff, 0x4, 0x4, 0x0, 0x7b, 0x20c}, {0x1, 0x4, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x14, 0x7, 0x6}], 0x849}) (async, rerun: 32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) (rerun: 32)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r11, 0x0) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xfffffffffffffffd, 0x2bf9, 0x1, 0x2, 0x0, 0x400, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4], 0x2000, 0x2c0242})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x2, 0xfffffff0, 0x0, 0x80000000, 0x3f0, 0x8001, 0xe}]})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

403.730134ms ago: executing program 0 (id=4534):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @remote})
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffc64, &(0x7f0000000b40)={&(0x7f0000000200)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbff, {0x22}}, 0x14}}, 0x4000000)

362.343615ms ago: executing program 7 (id=4535):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x190})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
close(0x3) (fail_nth: 1)

195.82µs ago: executing program 0 (id=4536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700000000000000, 0x880}, 0x4000004)

0s ago: executing program 0 (id=4537):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r1}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

368.159176][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  368.307504][    T9] hub 1-1:0.0: 2 ports detected
[  368.521618][T11709] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  368.633600][T11712] fuse: Invalid rootmode
[  368.729350][T11714] rust_binder: Error while translating object.
[  368.729385][T11714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  368.735607][T11714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:345
[  368.813192][T11717] rust_binder: Write failure EFAULT in pid:348
[  368.826110][ T1773] usb 8-1: new low-speed USB device number 25 using dummy_hcd
[  368.902437][T11719] block device autoloading is deprecated and will be removed.
[  368.917337][T11719] syz.2.4009: attempt to access beyond end of device
[  368.917337][T11719] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  368.966065][ T1773] usb 8-1: device descriptor read/64, error -71
[  369.206194][ T1773] usb 8-1: device descriptor read/64, error -71
[  369.296212][  T350] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  369.446284][ T1773] usb 8-1: new low-speed USB device number 26 using dummy_hcd
[  369.449456][  T350] usb 3-1: config 0 has an invalid interface number: 137 but max is 0
[  369.462110][  T350] usb 3-1: config 0 has no interface number 0
[  369.468233][  T350] usb 3-1: config 0 interface 137 has no altsetting 0
[  369.478446][  T350] usb 3-1: New USB device found, idVendor=356d, idProduct=b432, bcdDevice=39.60
[  369.487599][  T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.495619][  T350] usb 3-1: Product: syz
[  369.499828][  T350] usb 3-1: Manufacturer: syz
[  369.504449][  T350] usb 3-1: SerialNumber: syz
[  369.510940][  T350] usb 3-1: config 0 descriptor??
[  369.586366][ T1773] usb 8-1: device descriptor read/64, error -71
[  369.742929][  T350] cdc_acm 3-1:0.137: Zero length descriptor references
[  369.752379][  T350] cdc_acm 3-1:0.137: probe with driver cdc_acm failed with error -22
[  369.766529][  T350] usb 3-1: USB disconnect, device number 31
[  369.834315][T11733] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  369.846534][ T1773] usb 8-1: device descriptor read/64, error -71
[  369.847760][T11733] SELinux: failed to load policy
[  369.898410][   T36] kauditd_printk_skb: 648 callbacks suppressed
[  369.898429][   T36] audit: type=1400 audit(1750468477.416:59760): avc:  denied  { read write } for  pid=11737 comm="syz.6.4015" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  369.929594][T11738] fuse: Bad value for 'rootmode'
[  369.951399][   T36] audit: type=1400 audit(1750468477.456:59761): avc:  denied  { read write open } for  pid=11737 comm="syz.6.4015" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  369.976080][ T1773] usb usb8-port1: attempt power cycle
[  369.985846][   T36] audit: type=1400 audit(1750468477.456:59762): avc:  denied  { mounton } for  pid=11737 comm="syz.6.4015" path="/59/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  370.009193][   T36] audit: type=1400 audit(1750468477.456:59763): avc:  denied  { ioctl } for  pid=11706 comm="syz.0.4004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.058424][   T36] audit: type=1400 audit(1750468477.456:59764): avc:  denied  { ioctl } for  pid=11706 comm="syz.0.4004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.084633][   T36] audit: type=1400 audit(1750468477.466:59765): avc:  denied  { read write } for  pid=10910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  370.109763][   T36] audit: type=1400 audit(1750468477.466:59766): avc:  denied  { read write open } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  370.134968][   T36] audit: type=1400 audit(1750468477.466:59767): avc:  denied  { ioctl } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  370.145920][  T350] usb 1-1: USB disconnect, device number 110
[  370.160690][   T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  370.177311][   T36] audit: type=1400 audit(1750468477.496:59768): avc:  denied  { ioctl } for  pid=11708 comm="syz.7.4005" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.209946][   T36] audit: type=1400 audit(1750468477.496:59769): avc:  denied  { ioctl } for  pid=11708 comm="syz.7.4005" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.316700][ T1773] usb 8-1: new low-speed USB device number 27 using dummy_hcd
[  370.339285][ T1773] usb 8-1: device descriptor read/8, error -71
[  370.446839][  T774] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  370.470203][ T1773] usb 8-1: device descriptor read/8, error -71
[  370.606851][  T774] usb 7-1: Using ep0 maxpacket: 16
[  370.615501][  T774] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.627678][  T774] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  370.641688][  T774] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  370.651513][  T774] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.662619][  T774] usb 7-1: config 0 descriptor??
[  370.706942][ T1773] usb 8-1: new low-speed USB device number 28 using dummy_hcd
[  370.722608][T11760] fuse: Bad value for 'rootmode'
[  370.747771][ T1773] usb 8-1: device descriptor read/8, error -71
[  370.879262][ T1773] usb 8-1: device descriptor read/8, error -71
[  370.987086][ T1773] usb usb8-port1: unable to enumerate USB device
[  371.017015][  T350] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  371.075197][  T774] HID 045e:07da: Invalid code 65791 type 1
[  371.084138][  T774] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0014/input/input39
[  371.100054][  T774] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  371.169827][  T350] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  371.192947][  T350] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  371.205332][  T350] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  371.216766][  T350] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  371.228739][  T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.250462][T11763] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  371.525697][T11766] binder: Bad value for 'stats'
[  371.628427][T11770] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  371.719411][T11773] rust_binder: Error while translating object.
[  371.726269][T11773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  371.735099][T11773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:377
[  371.890411][  T350] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  371.901687][ T1773] usb 7-1: USB disconnect, device number 31
[  371.932797][  T350] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input40
[  371.964280][  T350] usb 1-1: USB disconnect, device number 111
[  371.964403][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  372.123858][T11782] binder: Bad value for 'stats'
[  372.521159][T11789] fuse: Bad value for 'rootmode'
[  372.634204][T11798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392
[  372.839597][T11808] syzkaller0: entered promiscuous mode
[  372.900179][T11808] syzkaller0: entered allmulticast mode
[  372.911853][T11812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  372.911887][T11812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397
[  372.929546][T11808] rust_binder: Error while translating object.
[  372.952045][T11815] fuse: Unknown parameter 'use00000000000000000000'
[  372.953212][T11808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  372.970918][T11808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200
[  373.072949][T11821] fuse: Bad value for 'user_id'
[  373.091784][T11823] rust_binder: Write failure EFAULT in pid:490
[  373.097348][T11821] fuse: Bad value for 'user_id'
[  373.198451][T11826] random: crng reseeded on system resumption
[  373.332758][T11826] SELinux: security_context_str_to_sid () failed with errno=-22
[  373.456959][T11844] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  373.683544][T11852] fuse: Unknown parameter 'use00000000000000000000'
[  373.801187][T11856] binder: Unknown parameter 'p�q��i>�"����'�F��{�V}�9'
[  373.871302][ T4558] Bluetooth: hci0: Frame reassembly failed (-84)
[  374.323382][T11864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.323688][T11864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.359675][T11864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.384490][T11868] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  374.391061][T11864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.408042][T11864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.428663][T11868] SELinux: failed to load policy
[  374.470046][T11868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:504
[  374.546175][T11878] fuse: Unknown parameter 'use00000000000000000000'
[  374.567607][T11871] binder: Unknown parameter 'm@x'
[  374.681999][T11881] __vm_enough_memory: pid: 11881, comm: syz.6.4067, bytes: 281474976845824 not enough memory for the allocation
[  374.765402][T11890] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.907879][T11896] rust_binder: Error while translating object.
[  374.914464][T11896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  374.920668][T11896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:217
[  374.930942][   T36] kauditd_printk_skb: 792 callbacks suppressed
[  374.930961][   T36] audit: type=1400 audit(1750468482.453:60562): avc:  denied  { read } for  pid=11893 comm="syz.6.4072" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  374.947669][T11897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:999
[  374.969672][   T36] audit: type=1400 audit(1750468482.453:60563): avc:  denied  { read open } for  pid=11893 comm="syz.6.4072" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  375.003724][   T36] audit: type=1400 audit(1750468482.453:60564): avc:  denied  { ioctl } for  pid=11893 comm="syz.6.4072" path="/dev/binderfs/binder0" dev="binder" ino=67 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.029392][   T36] audit: type=1400 audit(1750468482.453:60565): avc:  denied  { ioctl } for  pid=11893 comm="syz.6.4072" path="/dev/binderfs/binder0" dev="binder" ino=67 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.055171][   T36] audit: type=1400 audit(1750468482.463:60566): avc:  denied  { create } for  pid=11889 comm="syz.7.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  375.074999][   T36] audit: type=1400 audit(1750468482.463:60567): avc:  denied  { map } for  pid=11889 comm="syz.7.4070" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.099057][   T36] audit: type=1400 audit(1750468482.463:60568): avc:  denied  { read } for  pid=11889 comm="syz.7.4070" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.123189][   T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  375.125006][   T36] audit: type=1400 audit(1750468482.463:60569): avc:  denied  { read } for  pid=11889 comm="syz.7.4070" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.153787][   T36] audit: type=1400 audit(1750468482.463:60570): avc:  denied  { read open } for  pid=11889 comm="syz.7.4070" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.178330][   T36] audit: type=1400 audit(1750468482.463:60571): avc:  denied  { ioctl } for  pid=11889 comm="syz.7.4070" path="/dev/binderfs/binder0" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  375.291389][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.302543][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.312359][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  375.325279][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  375.334349][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.343927][   T10] usb 1-1: config 0 descriptor??
[  375.766330][   T10] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  375.776868][   T10] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  375.939353][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  375.939414][T11857] Bluetooth: hci0: command 0x1003 tx timeout
[  376.136605][T11907] binder: Bad value for 'max'
[  376.242486][T11908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  376.286845][T11914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:415
[  376.792452][T11932] fuse: Unknown parameter 'user_i00000000000000000000'
[  376.906831][T11936] block device autoloading is deprecated and will be removed.
[  376.916725][T11936] syz.2.4083: attempt to access beyond end of device
[  376.916725][T11936] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  377.227922][T11943] fuse: Unknown parameter '��0x0000000000000004'
[  377.238817][T11945] SELinux: security_context_str_to_sid () failed with errno=-22
[  377.322618][T11948] overlayfs: conflicting options: nfs_export=on,index=off
[  377.364128][T11950] SELinux: security_context_str_to_sid () failed with errno=-22
[  377.430551][T11952] fuse: Unknown parameter 'user_i00000000000000000000'
[  377.488308][T11955] binder: Bad value for 'max'
[  377.590642][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4092'.
[  377.850645][    T9] usb 1-1: USB disconnect, device number 112
[  377.959125][T11969] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  378.039679][T11971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1003
[  378.067806][T11973] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  378.300872][T11979] fuse: Unknown parameter 'user_id00000000000000000000'
[  378.390490][    T9] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[  378.461790][T11986] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  378.530567][    T9] usb 1-1: device descriptor read/64, error -71
[  378.648177][T11995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:464
[  378.770793][    T9] usb 1-1: device descriptor read/64, error -71
[  378.908972][T12009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  378.909008][T12009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[  378.920173][T12008] rust_binder: Error while translating object.
[  378.945292][T12008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  378.972483][T12010] rust_binder: Write failure EINVAL in pid:471
[  379.010868][T12008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:471
[  379.070836][    T9] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  379.143233][T12018] fuseblk: Unknown parameter 'bd'
[  379.149870][T12020] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  379.151618][T12020] rust_binder: Error while translating object.
[  379.158176][T12020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  379.164465][T12020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476
[  379.175029][T12020] rust_binder: Write failure EINVAL in pid:476
[  379.240910][   T10] usb 8-1: new full-speed USB device number 29 using dummy_hcd
[  379.254720][    T9] usb 1-1: device descriptor read/64, error -71
[  379.412454][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[  379.421892][   T10] usb 8-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.434815][   T10] usb 8-1: config 1 interface 0 has no altsetting 0
[  379.444948][   T10] usb 8-1: New USB device found, idVendor=1477, idProduct=100e, bcdDevice= 0.40
[  379.454066][  T594] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  379.461648][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.469716][   T10] usb 8-1: Product: syz
[  379.474409][   T10] usb 8-1: Manufacturer: ь
[  379.478984][   T10] usb 8-1: SerialNumber: syz
[  379.501032][    T9] usb 1-1: device descriptor read/64, error -71
[  379.611222][    T9] usb usb1-port1: attempt power cycle
[  379.633158][  T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  379.644279][  T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.654072][  T594] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  379.663161][  T594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.673109][  T594] usb 3-1: config 0 descriptor??
[  379.695301][   T10] usbhid 8-1:1.0: can't add hid device: -71
[  379.701400][   T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  379.711508][   T10] usb 8-1: USB disconnect, device number 29
[  379.891592][  T594] usbhid 3-1:0.0: can't add hid device: -71
[  379.902139][  T594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  379.922081][  T594] usb 3-1: USB disconnect, device number 32
[  379.963332][    T9] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  379.981215][   T36] kauditd_printk_skb: 814 callbacks suppressed
[  379.981237][   T36] audit: type=1400 audit(1750468487.491:61386): avc:  denied  { read } for  pid=12027 comm="syz.2.4116" name="binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  380.039128][   T36] audit: type=1400 audit(1750468487.491:61387): avc:  denied  { read open } for  pid=12027 comm="syz.2.4116" path="/dev/binderfs/binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  380.063841][    T9] usb 1-1: device descriptor read/8, error -71
[  380.080317][   T36] audit: type=1400 audit(1750468487.501:61388): avc:  denied  { create } for  pid=12027 comm="syz.2.4116" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  380.121290][   T36] audit: type=1400 audit(1750468487.501:61389): avc:  denied  { ioctl } for  pid=12027 comm="syz.2.4116" path="/dev/binderfs/binder1" dev="binder" ino=71 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  380.152874][   T36] audit: type=1400 audit(1750468487.501:61390): avc:  denied  { read write } for  pid=10617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.180089][   T36] audit: type=1400 audit(1750468487.501:61391): avc:  denied  { read write open } for  pid=10617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.205727][   T36] audit: type=1400 audit(1750468487.501:61392): avc:  denied  { ioctl } for  pid=10617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.232802][   T36] audit: type=1400 audit(1750468487.531:61393): avc:  denied  { read write } for  pid=10910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.241380][    T9] usb 1-1: device descriptor read/8, error -71
[  380.260187][   T36] audit: type=1400 audit(1750468487.531:61394): avc:  denied  { read write open } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.341392][   T36] audit: type=1400 audit(1750468487.531:61395): avc:  denied  { ioctl } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  380.391454][  T350] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  380.444866][T12037] overlay: ./file0 is not a directory
[  380.521509][    T9] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[  380.561708][    T9] usb 1-1: device descriptor read/8, error -71
[  380.579504][  T350] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  380.606282][  T350] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  380.631530][  T350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.641368][  T350] usb 7-1: config 0 descriptor??
[  380.648597][  T350] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  380.714088][    T9] usb 1-1: device descriptor read/8, error -71
[  380.822977][    T9] usb usb1-port1: unable to enumerate USB device
[  380.841768][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  380.859805][    T9] usb 7-1: USB disconnect, device number 32
[  380.962038][T12062] can0: slcan on ptm0.
[  380.991786][   T10] usb 3-1: Using ep0 maxpacket: 32
[  381.021764][   T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  381.043551][T12061] can0 (unregistered): slcan off ptm0.
[  381.049144][   T10] usb 3-1: config 0 has no interface number 0
[  381.073424][   T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  381.093005][   T10] usb 3-1: config 0 interface 85 has no altsetting 0
[  381.104776][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  381.130480][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.154819][   T10] usb 3-1: Product: syz
[  381.167063][   T10] usb 3-1: Manufacturer: syz
[  381.177189][   T10] usb 3-1: SerialNumber: syz
[  381.189161][   T10] usb 3-1: config 0 descriptor??
[  381.203316][T12071] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  381.362554][T12074] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  381.438453][T12077] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  381.445927][T12078] netlink: 25 bytes leftover after parsing attributes in process `syz.7.4133'.
[  381.461730][    T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  381.480562][T12078] rust_binder: Error while translating object.
[  381.480619][T12078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  381.487372][T12077] rust_binder: Error while translating object.
[  381.501990][T12078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1033
[  381.508277][T12077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  381.527474][T12077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1033
[  381.585830][T12080] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  381.599582][T12080] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  381.613601][    T9] usb 1-1: Using ep0 maxpacket: 16
[  381.618899][T12080] rust_binder: Write failure EINVAL in pid:1036
[  381.621560][    T9] usb 1-1: config 0 has no interfaces?
[  381.650624][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  381.672033][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.685216][    T9] usb 1-1: config 0 descriptor??
[  381.828283][  T783] usb 3-1: USB disconnect, device number 33
[  382.003263][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.011823][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.142958][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.151488][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.238336][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.257110][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.261345][T12103] fuse: Bad value for 'fd'
[  382.316647][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.338329][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.432390][  T783] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  382.578848][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4144'.
[  382.603790][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4144'.
[  382.607338][  T783] usb 7-1: unable to read config index 0 descriptor/start: -61
[  382.622506][  T783] usb 7-1: can't read configurations, error -61
[  382.645492][T12111] rust_binder: Error while translating object.
[  382.645546][T12111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  382.658381][T12113] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  382.672571][T12111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:516
[  382.681309][    T9] usb 1-1: USB disconnect, device number 117
[  382.700395][T12113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043
[  382.776887][  T783] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  382.839624][T12117] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  382.843022][T12117] rust_binder: inc_ref_done called when no active inc_refs
[  382.922494][T12122] rust_binder: Error while translating object.
[  382.940090][T12122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  382.953163][T12122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047
[  382.983993][  T783] usb 7-1: unable to read config index 0 descriptor/start: -61
[  383.002680][  T783] usb 7-1: can't read configurations, error -61
[  383.012792][  T783] usb usb7-port1: attempt power cycle
[  383.044082][T12124] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  383.095758][T12127] fuse: Unknown parameter '0x0000000000000003'
[  383.228846][T12131] random: crng reseeded on system resumption
[  383.377419][  T783] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  383.419246][  T783] usb 7-1: unable to read config index 0 descriptor/start: -61
[  383.432847][  T783] usb 7-1: can't read configurations, error -61
[  383.448315][T12140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  383.542913][    T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  383.572946][  T783] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  383.598079][  T783] usb 7-1: unable to read config index 0 descriptor/start: -61
[  383.606208][  T783] usb 7-1: can't read configurations, error -61
[  383.614143][  T783] usb usb7-port1: unable to enumerate USB device
[  383.693041][ T1773] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  383.705119][    T9] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  383.717022][    T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  383.728157][    T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  383.739479][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  383.748571][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.759513][T12137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  383.843077][ T1773] usb 8-1: Using ep0 maxpacket: 32
[  383.850801][ T1773] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26176, setting to 1024
[  383.862058][ T1773] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  383.871164][ T1773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.881103][ T1773] usb 8-1: config 0 descriptor??
[  383.889204][T12140] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  383.899809][ T1773] hub 8-1:0.0: USB hub found
[  384.306157][ T1773] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[  384.325038][ T1773] usbhid 8-1:0.0: can't add hid device: -71
[  384.334901][ T1773] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  384.366811][ T1773] usb 8-1: USB disconnect, device number 30
[  384.791288][T12171] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  384.875283][T12175] binder: Unknown parameter 'euid<00000000000000000000'
[  384.896540][T12177] fuse: Unknown parameter '0x0000000000000003'
[  384.899910][T12175] binder: Unknown parameter 'processor	: 0
[  384.899910][T12175] vendor_id	: GenuineIntel
[  384.899910][T12175] cpu family	: 6
[  384.899910][T12175] model		: 79
[  384.899910][T12175] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[  384.899910][T12175] stepping	: 0
[  384.899910][T12175] microcode	: 0xffffffff
[  384.899910][T12175] cpu MHz		: 2199.998
[  384.899910][T12175] cache size	: 56320 KB
[  384.899910][T12175] physical id	: 0
[  384.899910][T12175] siblings	: 2
[  384.899910][T12175] core id		: 0
[  384.899910][T12175] cpu cores	: 1
[  384.899910][T12175] apicid		: 0
[  384.899910][T12175] initial apicid	: 0
[  384.899910][T12175] fpu		: yes
[  384.899910][T12175] fpu_exception	: yes
[  384.899910][T12175] cpuid level	: 13
[  384.899910][T12175] wp		: yes
[  384.899910][T12175] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[  384.899910][T12175] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[  384.984854][    T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  385.005762][   T36] kauditd_printk_skb: 990 callbacks suppressed
[  385.005785][   T36] audit: type=1400 audit(1750468492.519:62386): avc:  denied  { read write } for  pid=8627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.198340][T12183] rust_binder: Write failure EFAULT in pid:1060
[  385.200929][T12184] rust_binder: Write failure EFAULT in pid:1060
[  385.208020][   T36] audit: type=1400 audit(1750468492.669:62387): avc:  denied  { read write open } for  pid=8627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.252583][    T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input42
[  385.295255][    T9] usb 1-1: USB disconnect, device number 118
[  385.305392][   T36] audit: type=1400 audit(1750468492.669:62388): avc:  denied  { ioctl } for  pid=8627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.371005][   T36] audit: type=1400 audit(1750468492.689:62389): avc:  denied  { read } for  pid=12179 comm="syz.2.4167" name="binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  385.413453][T12190] rust_binder: Write failure EINVAL in pid:1063
[  385.436500][T12192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  385.443793][   T36] audit: type=1400 audit(1750468492.689:62390): avc:  denied  { read open } for  pid=12179 comm="syz.2.4167" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  385.463860][T12192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:564
[  385.537215][T12199] binder: Bad value for 'stats'
[  385.551744][   T36] audit: type=1400 audit(1750468492.689:62391): avc:  denied  { ioctl } for  pid=12179 comm="syz.2.4167" path="/dev/binderfs/binder0" dev="binder" ino=82 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  385.565805][T12199] binder: Unknown parameter 'euid>00000000000000000000'
[  385.627381][   T36] audit: type=1400 audit(1750468492.689:62392): avc:  denied  { set_context_mgr } for  pid=12179 comm="syz.2.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  385.655719][T12202] fuse: Unknown parameter '0x0000000000000003'
[  385.701433][ T8627] audit: audit_backlog=65 > audit_backlog_limit=64
[  385.705184][   T36] audit: type=1400 audit(1750468492.689:62393): avc:  denied  { read } for  pid=12179 comm="syz.2.4167" dev="nsfs" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  385.713659][ T9615] audit: audit_backlog=65 > audit_backlog_limit=64
[  385.950593][ T4558] Bluetooth: hci0: Frame reassembly failed (-84)
[  386.061307][T12218] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  386.111520][T12221] binder: Bad value for 'stats'
[  386.570899][T12234] fuse: Unknown parameter '0x0000000000000003'
[  386.682412][T12240] rust_binder: Write failure EINVAL in pid:1078
[  386.994202][T12249] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  387.118297][T12258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082
[  387.164424][T12258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082
[  387.187236][T12264] fuse: Unknown parameter '0x0000000000000003'
[  387.246387][T12266] rust_binder: Write failure EINVAL in pid:548
[  387.468014][T12272] rust_binder: Error while translating object.
[  387.474340][T12272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  387.481542][T12272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1088
[  387.672177][T12279] binfmt_misc: register: failed to install interpreter file ./file0
[  387.690714][T12280] binfmt_misc: register: failed to install interpreter file ./file0
[  387.704084][T12279] rust_binder: Error while translating object.
[  387.704119][T12279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  387.711335][T12279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1094
[  387.722765][T12280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1094
[  387.887545][T12289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  387.977155][T12293] fuse: Unknown parameter 'fd0x0000000000000003'
[  387.993760][T12295] rust_binder: Write failure EINVAL in pid:555
[  388.035241][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  388.047634][T11857] Bluetooth: hci0: command 0x1003 tx timeout
[  388.148152][T12301] binder: Unknown parameter '0x0000000000000003'
[  388.302850][T12309] x_tables: duplicate underflow at hook 1
[  388.388983][T12313] fuse: Unknown parameter 'fd0x0000000000000003'
[  388.569566][T12320] binder: Bad value for 'max'
[  388.688594][T12326] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.927186][T12336] fuse: Unknown parameter 'fd0x0000000000000003'
[  388.955069][T12338] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4229'.
[  388.991807][T12338] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4229'.
[  389.447703][T12367] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  389.633006][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  389.705822][ T1773] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  389.785875][  T774] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  389.845909][ T1773] usb 8-1: device descriptor read/64, error -71
[  389.945925][  T774] usb 3-1: Using ep0 maxpacket: 32
[  389.953493][  T774] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  389.961702][  T774] usb 3-1: config 0 has no interface number 0
[  389.971263][  T774] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  389.980381][  T774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.988461][  T774] usb 3-1: Product: syz
[  389.992631][  T774] usb 3-1: Manufacturer: syz
[  389.997262][  T774] usb 3-1: SerialNumber: syz
[  390.003371][  T774] usb 3-1: config 0 descriptor??
[  390.011265][  T774] smsc95xx v2.0.0
[  390.036474][   T36] kauditd_printk_skb: 958 callbacks suppressed
[  390.036513][   T36] audit: type=1400 audit(1750468497.546:63294): avc:  denied  { ioctl } for  pid=12361 comm="syz.7.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.096061][ T1773] usb 8-1: device descriptor read/64, error -71
[  390.176312][   T36] audit: type=1400 audit(1750468497.686:63295): avc:  denied  { read write } for  pid=9615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.200768][   T36] audit: type=1400 audit(1750468497.686:63296): avc:  denied  { read write open } for  pid=9615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.242405][   T36] audit: type=1400 audit(1750468497.686:63297): avc:  denied  { ioctl } for  pid=9615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=856 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.274213][   T36] audit: type=1400 audit(1750468497.716:63298): avc:  denied  { ioctl } for  pid=12361 comm="syz.7.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.300089][   T36] audit: type=1400 audit(1750468497.716:63299): avc:  denied  { ioctl } for  pid=12361 comm="syz.7.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.315396][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'.
[  390.337332][   T36] audit: type=1400 audit(1750468497.736:63300): avc:  denied  { ioctl } for  pid=12363 comm="syz.2.4242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.362662][ T1773] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  390.364397][   T36] audit: type=1400 audit(1750468497.736:63301): avc:  denied  { ioctl } for  pid=12363 comm="syz.2.4242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.395501][   T36] audit: type=1400 audit(1750468497.736:63302): avc:  denied  { ioctl } for  pid=12363 comm="syz.2.4242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.420672][   T36] audit: type=1400 audit(1750468497.736:63303): avc:  denied  { ioctl } for  pid=12363 comm="syz.2.4242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.506223][ T1773] usb 8-1: device descriptor read/64, error -71
[  390.746461][ T1773] usb 8-1: device descriptor read/64, error -71
[  390.857322][ T1773] usb usb8-port1: attempt power cycle
[  390.859107][  T774] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  390.884198][  T774] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  390.895806][  T774] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  390.907563][  T774] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  390.916957][  T774] usb 3-1: USB disconnect, device number 34
[  391.066460][  T350] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  391.206533][ T1773] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  391.206541][  T350] usb 1-1: device descriptor read/64, error -71
[  391.239839][ T1773] usb 8-1: device descriptor read/8, error -71
[  391.368899][ T1773] usb 8-1: device descriptor read/8, error -71
[  391.456672][  T350] usb 1-1: device descriptor read/64, error -71
[  391.484875][T12398] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.606743][ T1773] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  391.639507][ T1773] usb 8-1: device descriptor read/8, error -71
[  391.696808][  T350] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  391.706770][T11857] Bluetooth: hci0: command 0x1003 tx timeout
[  391.708726][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  391.758504][T12402] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.761215][T12402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595
[  391.770722][ T1773] usb 8-1: device descriptor read/8, error -71
[  391.856882][  T350] usb 1-1: device descriptor read/64, error -71
[  391.896918][ T1773] usb usb8-port1: unable to enumerate USB device
[  392.097009][  T350] usb 1-1: device descriptor read/64, error -71
[  392.207119][  T350] usb usb1-port1: attempt power cycle
[  392.487487][T12407] rust_binder: Write failure EINVAL in pid:1117
[  392.547140][  T350] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  392.589989][  T350] usb 1-1: device descriptor read/8, error -71
[  392.720067][  T350] usb 1-1: device descriptor read/8, error -71
[  392.957332][  T350] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  392.971516][T12432] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  392.985377][T12432] rust_binder: Write failure EINVAL in pid:344
[  392.990870][  T350] usb 1-1: device descriptor read/8, error -71
[  392.996333][T12434] rust_binder: Write failure EINVAL in pid:610
[  393.130215][  T350] usb 1-1: device descriptor read/8, error -71
[  393.246092][T12445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:621
[  393.248649][  T350] usb usb1-port1: unable to enumerate USB device
[  393.564378][T12458] rust_binder: Write failure EINVAL in pid:1130
[  393.787981][T12473] binder: Bad value for 'max'
[  393.993311][T12486] binder: Bad value for 'stats'
[  394.039460][T12489] rust_binder: Write failure EINVAL in pid:1138
[  394.317934][  T594] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[  394.501987][  T594] usb 7-1: unable to get BOS descriptor or descriptor too short
[  394.510616][  T594] usb 7-1: not running at top speed; connect to a high speed hub
[  394.528060][  T594] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.538447][  T594] usb 7-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  394.554547][  T594] usb 7-1: config 1 interface 0 has no altsetting 0
[  394.582888][  T594] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.602198][  T594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.618093][  T594] usb 7-1: Product: syz
[  394.624915][T12513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609
[  394.626259][T12513] rust_binder: Write failure EINVAL in pid:609
[  394.629064][  T594] usb 7-1: Manufacturer: syz
[  394.638122][T12513] rust_binder: Write failure EINVAL in pid:609
[  394.646339][  T594] usb 7-1: SerialNumber: syz
[  394.664833][T12515] rust_binder: Write failure EINVAL in pid:642
[  394.826795][T12526] binder: Bad value for 'stats'
[  394.846145][T12527] rust_binder: Write failure EINVAL in pid:648
[  394.846563][T12527] rust_binder: Read failure Err(EAGAIN) in pid:648
[  394.893323][  T594] cdc_ether 7-1:1.0: skipping garbage
[  394.923304][  T594] usb 7-1: bad CDC descriptors
[  394.939461][  T594] usb 7-1: USB disconnect, device number 37
[  394.989660][T12534] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  394.992753][T12534] rust_binder: Error while translating object.
[  394.999916][T12534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  395.006124][T12534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653
[  395.053675][   T36] kauditd_printk_skb: 1554 callbacks suppressed
[  395.053698][   T36] audit: type=1400 audit(1750468502.564:64858): avc:  denied  { create } for  pid=12536 comm="syz.0.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  395.072929][T12539] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  395.093883][T12539] incfs: Options parsing error. -22
[  395.106745][T12539] incfs: mount failed -22
[  395.119919][   T36] audit: type=1400 audit(1750468502.564:64859): avc:  denied  { create } for  pid=12536 comm="syz.0.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.141462][   T36] audit: type=1400 audit(1750468502.564:64860): avc:  denied  { write } for  pid=12536 comm="syz.0.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.163230][   T36] audit: type=1400 audit(1750468502.564:64861): avc:  denied  { write } for  pid=12536 comm="syz.0.4304" path="socket:[105753]" dev="sockfs" ino=105753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  395.189844][   T36] audit: type=1400 audit(1750468502.584:64862): avc:  denied  { read } for  pid=12538 comm="syz.2.4303" name="binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  395.218347][   T36] audit: type=1400 audit(1750468502.584:64863): avc:  denied  { read open } for  pid=12538 comm="syz.2.4303" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  395.220513][T12542] binder: Unknown parameter 'pY�&�'
[  395.255811][   T36] audit: type=1400 audit(1750468502.584:64864): avc:  denied  { ioctl } for  pid=12538 comm="syz.2.4303" path="/dev/binderfs/binder0" dev="binder" ino=82 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  395.289168][T12539] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  395.289195][T12539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  395.296698][   T36] audit: type=1400 audit(1750468502.604:64865): avc:  denied  { map } for  pid=12538 comm="syz.2.4303" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  395.320867][T12539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:655
[  395.342209][   T36] audit: type=1400 audit(1750468502.604:64866): avc:  denied  { read } for  pid=12538 comm="syz.2.4303" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  395.446041][   T36] audit: type=1400 audit(1750468502.604:64867): avc:  denied  { mounton } for  pid=12538 comm="syz.2.4303" path="/226/file0" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  395.632720][T12554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  395.638577][T12554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  396.088788][  T350] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  396.248836][  T350] usb 3-1: Using ep0 maxpacket: 16
[  396.279918][  T350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.296697][T12582] fuse: blksize only supported for fuseblk
[  396.297527][  T350] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  396.349468][  T350] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.369860][T12584] rust_binder: Write failure EFAULT in pid:377
[  396.370104][  T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.388312][  T350] usb 3-1: Product: syz
[  396.397963][  T350] usb 3-1: Manufacturer: syz
[  396.403439][  T350] usb 3-1: SerialNumber: syz
[  396.463531][T12587] binder: Unknown parameter 'fscontext?}'
[  396.680646][T12582] rust_binder: Write failure EINVAL in pid:1157
[  396.849693][T12582] rust_binder: Read failure Err(EAGAIN) in pid:1157
[  396.978963][T12602] binder: Bad value for 'stats'
[  397.120937][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4327'.
[  397.197142][T12607] binder: Unknown parameter 'processor	: 0
[  397.197142][T12607] vendor_id	: GenuineIntel
[  397.197142][T12607] cpu family	: 6
[  397.197142][T12607] model		: 79
[  397.197142][T12607] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[  397.197142][T12607] stepping	: 0
[  397.197142][T12607] microcode	: 0xffffffff
[  397.197142][T12607] cpu MHz		: 2199.998
[  397.197142][T12607] cache size	: 56320 KB
[  397.197142][T12607] physical id	: 0
[  397.197142][T12607] siblings	: 2
[  397.197142][T12607] core id		: 0
[  397.197142][T12607] cpu cores	: 1
[  397.197142][T12607] apicid		: 0
[  397.197142][T12607] @'
[  397.762570][T12633] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  397.762596][T12633] rust_binder: Read failure Err(EFAULT) in pid:1171
[  397.967262][T12643] virtio-fs: tag <(null)> not found
[  398.190356][T12650] rust_binder: Write failure EINVAL in pid:1180
[  398.190863][T12650] rust_binder: Read failure Err(EAGAIN) in pid:1180
[  398.208256][T12650] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  398.214970][T12650] rust_binder: Error while translating object.
[  398.229765][T12650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  398.242571][T12650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1180
[  398.529489][T12660] rust_binder: Error while translating object.
[  398.579239][T12660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  398.608280][T12660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1184
[  398.809250][  T350] cdc_ncm 3-1:1.0: bind() failure
[  398.844438][  T350] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  398.867521][  T350] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  398.881867][  T783] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  398.897783][  T350] usb 3-1: USB disconnect, device number 35
[  398.903829][T12678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:639
[  398.934858][T12678] rust_binder: Read failure Err(EFAULT) in pid:639
[  399.132851][  T783] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  399.180203][  T783] usb 7-1: config 220 has an invalid descriptor of length 72, skipping remainder of the config
[  399.218612][  T783] usb 7-1: config 220 has no interface number 2
[  399.230231][  T783] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  399.268649][  T783] usb 7-1: config 220 interface 0 has no altsetting 0
[  399.288057][  T783] usb 7-1: config 220 interface 76 has no altsetting 0
[  399.306742][  T783] usb 7-1: config 220 interface 1 has no altsetting 0
[  399.345530][  T783] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  399.361894][  T783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.380307][  T783] usb 7-1: Product: syz
[  399.384543][  T783] usb 7-1: Manufacturer: syz
[  399.389164][  T783] usb 7-1: SerialNumber: syz
[  399.411763][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4359'.
[  399.743063][  T783] usb 7-1: selecting invalid altsetting 0
[  399.756980][  T783] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  399.785371][  T783] usb 7-1: No valid video chain found.
[  399.799441][  T783] usb 7-1: USB disconnect, device number 38
[  399.891799][T12716] rust_binder: Error while translating object.
[  399.891847][T12716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  399.912182][T12716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1206
[  400.052371][T12725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:684
[  400.054602][T12726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684
[  400.076445][   T36] kauditd_printk_skb: 883 callbacks suppressed
[  400.076466][   T36] audit: type=1400 audit(1750468507.582:65751): avc:  denied  { read write } for  pid=8627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  400.140653][   T36] audit: type=1400 audit(1750468507.582:65752): avc:  denied  { read write open } for  pid=8627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  400.194344][   T36] audit: type=1400 audit(1750468507.582:65753): avc:  denied  { ioctl } for  pid=8627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  400.233484][   T36] audit: type=1400 audit(1750468507.672:65754): avc:  denied  { read } for  pid=12727 comm="syz.7.4368" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.270691][   T36] audit: type=1400 audit(1750468507.672:65755): avc:  denied  { read open } for  pid=12727 comm="syz.7.4368" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.310747][   T36] audit: type=1400 audit(1750468507.672:65756): avc:  denied  { ioctl } for  pid=12727 comm="syz.7.4368" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.345723][   T36] audit: type=1400 audit(1750468507.692:65757): avc:  denied  { ioctl } for  pid=12727 comm="syz.7.4368" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.390779][   T36] audit: type=1400 audit(1750468507.692:65758): avc:  denied  { create } for  pid=12727 comm="syz.7.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  400.423224][   T36] audit: type=1400 audit(1750468507.692:65759): avc:  denied  { connect } for  pid=12727 comm="syz.7.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  400.455648][   T36] audit: type=1400 audit(1750468507.692:65760): avc:  denied  { setopt } for  pid=12727 comm="syz.7.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  400.575266][T12731] fuse: Unknown parameter 'gn�G�`���'
[  400.920919][T12737] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  401.424870][T12753] rust_binder: Write failure EINVAL in pid:438
[  402.211920][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[  402.771959][  T594] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  402.934400][  T594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.947235][  T594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.951531][T12776] rust_binder: Write failure EINVAL in pid:655
[  402.957193][  T594] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.966507][T12776] 9pnet_fd: Insufficient options for proto=fd
[  402.976456][  T594] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[  402.991839][  T594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.010313][  T594] usb 7-1: config 0 descriptor??
[  403.091450][T12778] rust_binder: Error in use_page_slow: ESRCH
[  403.091471][T12778] rust_binder: use_range failure ESRCH
[  403.099947][T12778] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  403.105984][T12778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  403.114889][T12778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:657
[  403.199614][T12781] FAULT_INJECTION: forcing a failure.
[  403.199614][T12781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.238634][T12781] CPU: 1 UID: 0 PID: 12781 Comm: syz.0.4390 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  403.238674][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  403.238689][T12781] Call Trace:
[  403.238697][T12781]  <TASK>
[  403.238707][T12781]  __dump_stack+0x21/0x30
[  403.238740][T12781]  dump_stack_lvl+0x10c/0x190
[  403.238768][T12781]  ? __cfi_dump_stack_lvl+0x10/0x10
[  403.238799][T12781]  ? kstrtoull+0x13b/0x1e0
[  403.238823][T12781]  dump_stack+0x19/0x20
[  403.238849][T12781]  should_fail_ex+0x3d9/0x530
[  403.238876][T12781]  should_fail+0xf/0x20
[  403.238904][T12781]  should_fail_usercopy+0x1e/0x30
[  403.238933][T12781]  _copy_from_user+0x22/0xb0
[  403.238964][T12781]  ___sys_sendmsg+0x159/0x2a0
[  403.239002][T12781]  ? __sys_sendmsg+0x280/0x280
[  403.239036][T12781]  ? proc_fail_nth_write+0x17e/0x210
[  403.239060][T12781]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  403.239087][T12781]  __x64_sys_sendmsg+0x1eb/0x2c0
[  403.239108][T12781]  ? fput+0x1a5/0x240
[  403.239143][T12781]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  403.239166][T12781]  ? ksys_write+0x1ef/0x250
[  403.239196][T12781]  ? __kasan_check_read+0x15/0x20
[  403.239224][T12781]  x64_sys_call+0x2a4c/0x2ee0
[  403.239254][T12781]  do_syscall_64+0x58/0xf0
[  403.239294][T12781]  ? clear_bhb_loop+0x35/0x90
[  403.239330][T12781]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  403.239364][T12781] RIP: 0033:0x7f0d8278e929
[  403.239384][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.239406][T12781] RSP: 002b:00007f0d835df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.239433][T12781] RAX: ffffffffffffffda RBX: 00007f0d829b5fa0 RCX: 00007f0d8278e929
[  403.239452][T12781] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003
[  403.239469][T12781] RBP: 00007f0d835df090 R08: 0000000000000000 R09: 0000000000000000
[  403.239485][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.239500][T12781] R13: 0000000000000000 R14: 00007f0d829b5fa0 R15: 00007ffed9265178
[  403.239521][T12781]  </TASK>
[  403.442928][  T594] wacom 0003:056A:0017.0016: unknown main item tag 0x0
[  403.469534][  T594] wacom 0003:056A:0017.0016: unknown main item tag 0x0
[  403.487532][  T594] wacom 0003:056A:0017.0016: unknown main item tag 0x0
[  403.502207][  T594] wacom 0003:056A:0017.0016: unknown main item tag 0x0
[  403.519698][  T594] wacom 0003:056A:0017.0016: unknown main item tag 0x0
[  403.532573][  T594] wacom 0003:056A:0017.0016: Unknown device_type for 'HID 056a:0017'. Assuming pen.
[  403.572695][  T594] wacom 0003:056A:0017.0016: hidraw0: USB HID v0.00 Device [HID 056a:0017] on usb-dummy_hcd.6-1/input0
[  403.595253][  T594] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0017.0016/input/input44
[  403.647230][T12770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  403.647265][T12770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445
[  403.823771][  T783] usb 7-1: USB disconnect, device number 39
[  403.906888][T12787] fido_id[12787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  404.272543][T11857] Bluetooth: hci0: command 0x1003 tx timeout
[  404.273804][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  404.436398][T12795] random: crng reseeded on system resumption
[  404.508592][T12801] rust_binder: Write failure EINVAL in pid:708
[  404.523874][T12801] 9pnet_fd: Insufficient options for proto=fd
[  405.115037][   T36] kauditd_printk_skb: 436 callbacks suppressed
[  405.115070][   T36] audit: type=1400 audit(1750468512.619:66197): avc:  denied  { read write } for  pid=12817 comm="syz.6.4403" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  405.141498][T12818] FAULT_INJECTION: forcing a failure.
[  405.141498][T12818] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  405.144804][   T36] audit: type=1400 audit(1750468512.619:66198): avc:  denied  { read write open } for  pid=12817 comm="syz.6.4403" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  405.167684][T12818] CPU: 1 UID: 0 PID: 12818 Comm: syz.6.4403 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  405.167728][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  405.167746][T12818] Call Trace:
[  405.167755][T12818]  <TASK>
[  405.167765][T12818]  __dump_stack+0x21/0x30
[  405.167810][T12818]  dump_stack_lvl+0x10c/0x190
[  405.167840][T12818]  ? __cfi_dump_stack_lvl+0x10/0x10
[  405.167872][T12818]  dump_stack+0x19/0x20
[  405.167899][T12818]  should_fail_ex+0x3d9/0x530
[  405.167934][T12818]  should_fail_alloc_page+0xeb/0x110
[  405.167970][T12818]  __alloc_pages_noprof+0x19d/0x6c0
[  405.167995][T12818]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  405.168020][T12818]  ? filemap_get_entry+0x3fb/0x460
[  405.168045][T12818]  ? fuse_copy_page+0x1229/0x1690
[  405.168079][T12818]  __folio_alloc_noprof+0x14/0x80
[  405.168101][T12818]  __filemap_get_folio+0x461/0x7c0
[  405.168126][T12818]  pagecache_get_page+0x31/0xf0
[  405.168159][T12818]  fuse_dev_do_write+0x1e1a/0x3ba0
[  405.168195][T12818]  ? kernel_text_address+0xa9/0xe0
[  405.168221][T12818]  ? folio_mapped+0x120/0x120
[  405.168252][T12818]  ? unwind_get_return_address+0x51/0x90
[  405.168276][T12818]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  405.168305][T12818]  ? arch_stack_walk+0x10b/0x170
[  405.168339][T12818]  ? _parse_integer_limit+0x195/0x1e0
[  405.168365][T12818]  ? kstrtoull+0x13b/0x1e0
[  405.168388][T12818]  ? kstrtouint+0x78/0xf0
[  405.168412][T12818]  ? kstrtouint_from_user+0xfb/0x150
[  405.168438][T12818]  ? __x64_sys_openat+0x13a/0x170
[  405.168460][T12818]  ? x64_sys_call+0xe69/0x2ee0
[  405.168493][T12818]  ? selinux_file_permission+0x309/0xb30
[  405.168529][T12818]  fuse_dev_write+0x144/0x1d0
[  405.168558][T12818]  ? __cfi_fuse_dev_write+0x10/0x10
[  405.168590][T12818]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  405.168616][T12818]  vfs_write+0x694/0xe80
[  405.168644][T12818]  ? __cfi_fuse_dev_write+0x10/0x10
[  405.168674][T12818]  ? __cfi_vfs_write+0x10/0x10
[  405.168706][T12818]  ksys_write+0x141/0x250
[  405.168733][T12818]  ? xfd_validate_state+0x68/0x150
[  405.168760][T12818]  ? __cfi_ksys_write+0x10/0x10
[  405.168788][T12818]  ? __kasan_check_read+0x15/0x20
[  405.168822][T12818]  __x64_sys_write+0x7f/0x90
[  405.168850][T12818]  x64_sys_call+0x271c/0x2ee0
[  405.168881][T12818]  do_syscall_64+0x58/0xf0
[  405.168913][T12818]  ? clear_bhb_loop+0x35/0x90
[  405.168948][T12818]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  405.168983][T12818] RIP: 0033:0x7f7731f8e929
[  405.169003][T12818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.169024][T12818] RSP: 002b:00007f7732da1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  405.169051][T12818] RAX: ffffffffffffffda RBX: 00007f77321b5fa0 RCX: 00007f7731f8e929
[  405.169070][T12818] RDX: 0000000000000031 RSI: 00002000000001c0 RDI: 0000000000000003
[  405.169087][T12818] RBP: 00007f7732da1090 R08: 0000000000000000 R09: 0000000000000000
[  405.169103][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  405.169119][T12818] R13: 0000000000000000 R14: 00007f77321b5fa0 R15: 00007ffd9d017e08
[  405.169139][T12818]  </TASK>
[  405.494326][   T36] audit: type=1400 audit(1750468512.619:66199): avc:  denied  { mounton } for  pid=12817 comm="syz.6.4403" path="/154/file0" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  405.558494][   T36] audit: type=1400 audit(1750468512.619:66200): avc:  denied  { mount } for  pid=12817 comm="syz.6.4403" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  405.615982][   T36] audit: type=1400 audit(1750468512.689:66201): avc:  denied  { unmount } for  pid=10910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  405.679141][   T36] audit: type=1400 audit(1750468513.029:66202): avc:  denied  { read write } for  pid=10910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  405.749824][   T36] audit: type=1400 audit(1750468513.029:66203): avc:  denied  { read write open } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  405.813249][   T36] audit: type=1400 audit(1750468513.039:66204): avc:  denied  { ioctl } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  405.875126][   T36] audit: type=1400 audit(1750468513.149:66205): avc:  denied  { read write } for  pid=9615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  405.931930][   T36] audit: type=1400 audit(1750468513.149:66206): avc:  denied  { read write open } for  pid=9615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  406.752473][T12856] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.761670][T12855] rust_binder: Failed copying remainder into alloc: EFAULT
[  406.787513][T12855] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  406.796101][T12855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  406.812433][T12855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:468
[  407.363950][  T594] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  407.383972][  T350] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  407.514033][  T594] usb 1-1: device descriptor read/64, error -71
[  407.537090][  T350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.548518][  T350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.558378][  T350] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  407.567539][  T350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.584183][  T350] usb 7-1: config 0 descriptor??
[  407.754164][  T594] usb 1-1: device descriptor read/64, error -71
[  407.805527][T12869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.814048][T12869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.994256][  T594] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  408.134436][  T594] usb 1-1: device descriptor read/64, error -71
[  408.374451][  T594] usb 1-1: device descriptor read/64, error -71
[  408.485020][  T594] usb usb1-port1: attempt power cycle
[  408.600043][  T350] usbhid 7-1:0.0: can't add hid device: -71
[  408.614790][  T350] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  408.623523][  T350] usb 7-1: USB disconnect, device number 40
[  408.745975][T12898] rust_binder: Write failure EINVAL in pid:742
[  408.835089][  T594] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  408.897120][  T594] usb 1-1: device descriptor read/8, error -71
[  409.037179][  T594] usb 1-1: device descriptor read/8, error -71
[  409.274844][  T594] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  409.297637][  T594] usb 1-1: device descriptor read/8, error -71
[  409.427496][  T594] usb 1-1: device descriptor read/8, error -71
[  409.535113][  T594] usb usb1-port1: unable to enumerate USB device
[  410.135301][   T36] kauditd_printk_skb: 629 callbacks suppressed
[  410.135320][   T36] audit: type=1400 audit(1750468517.627:66832): avc:  denied  { read write } for  pid=9615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.200080][   T36] audit: type=1400 audit(1750468517.647:66833): avc:  denied  { execmem } for  pid=12910 comm="syz.2.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  410.219921][   T36] audit: type=1400 audit(1750468517.647:66834): avc:  denied  { ioctl } for  pid=12910 comm="syz.2.4438" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=108860 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  410.249701][   T36] audit: type=1400 audit(1750468517.667:66835): avc:  denied  { read write open } for  pid=9615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.280676][   T36] audit: type=1400 audit(1750468517.667:66836): avc:  denied  { ioctl } for  pid=9615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=856 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.367082][   T36] audit: type=1400 audit(1750468517.677:66837): avc:  denied  { read write } for  pid=10910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.395268][   T36] audit: type=1400 audit(1750468517.677:66838): avc:  denied  { read write open } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.449058][   T36] audit: type=1400 audit(1750468517.677:66839): avc:  denied  { ioctl } for  pid=10910 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  410.466239][T12932] FAULT_INJECTION: forcing a failure.
[  410.466239][T12932] name failslab, interval 1, probability 0, space 0, times 0
[  410.477004][   T36] audit: type=1400 audit(1750468517.747:66840): avc:  denied  { ioctl } for  pid=12910 comm="syz.2.4438" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  410.514547][T12932] CPU: 0 UID: 0 PID: 12932 Comm: syz.6.4444 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  410.514591][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  410.514605][T12932] Call Trace:
[  410.514613][T12932]  <TASK>
[  410.514622][T12932]  __dump_stack+0x21/0x30
[  410.514652][T12932]  dump_stack_lvl+0x10c/0x190
[  410.514676][T12932]  ? __cfi_dump_stack_lvl+0x10/0x10
[  410.514709][T12932]  ? pointer+0xdd0/0xdd0
[  410.514735][T12932]  dump_stack+0x19/0x20
[  410.514757][T12932]  should_fail_ex+0x3d9/0x530
[  410.514781][T12932]  should_failslab+0xac/0x100
[  410.514809][T12932]  __kmalloc_node_track_caller_noprof+0x68/0x440
[  410.514836][T12932]  ? sidtab_sid2str_get+0x139/0x370
[  410.514866][T12932]  kmemdup_noprof+0x31/0x80
[  410.514889][T12932]  sidtab_sid2str_get+0x139/0x370
[  410.514918][T12932]  security_sid_to_context_core+0x30d/0x5d0
[  410.514945][T12932]  security_sid_to_context+0x2e/0x50
[  410.514970][T12932]  avc_audit_post_callback+0x107/0x780
[  410.514994][T12932]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  410.515017][T12932]  ? audit_log_untrustedstring+0xea/0x100
[  410.515038][T12932]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  410.515060][T12932]  common_lsm_audit+0x147a/0x1860
[  410.515081][T12932]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  410.515109][T12932]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  410.515131][T12932]  ? __cfi_common_lsm_audit+0x10/0x10
[  410.515152][T12932]  ? avc_denied+0x112/0x180
[  410.515174][T12932]  slow_avc_audit+0x18d/0x1f0
[  410.515195][T12932]  ? __cfi_slow_avc_audit+0x10/0x10
[  410.515216][T12932]  ? avc_has_perm_noaudit+0x360/0x360
[  410.515239][T12932]  ? avc_has_perm_noaudit+0x21c/0x360
[  410.515261][T12932]  avc_has_perm+0x1cd/0x220
[  410.515282][T12932]  ? __cfi_avc_has_perm+0x10/0x10
[  410.515306][T12932]  selinux_socket_sendmsg+0x284/0x380
[  410.515330][T12932]  ? __cfi_selinux_socket_sendmsg+0x10/0x10
[  410.515356][T12932]  ? arch_stack_walk+0x10b/0x170
[  410.515384][T12932]  security_socket_sendmsg+0x56/0xd0
[  410.515408][T12932]  ____sys_sendmsg+0x52d/0xa70
[  410.515443][T12932]  ? __sys_sendmsg_sock+0x50/0x50
[  410.515475][T12932]  ? import_iovec+0x81/0xb0
[  410.515505][T12932]  ___sys_sendmsg+0x220/0x2a0
[  410.515537][T12932]  ? __sys_sendmsg+0x280/0x280
[  410.515567][T12932]  ? proc_fail_nth_write+0x17e/0x210
[  410.515588][T12932]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  410.515616][T12932]  __x64_sys_sendmsg+0x1eb/0x2c0
[  410.515636][T12932]  ? fput+0x1a5/0x240
[  410.515666][T12932]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  410.515695][T12932]  ? ksys_write+0x1ef/0x250
[  410.515722][T12932]  ? __kasan_check_read+0x15/0x20
[  410.515747][T12932]  x64_sys_call+0x2a4c/0x2ee0
[  410.515776][T12932]  do_syscall_64+0x58/0xf0
[  410.515803][T12932]  ? clear_bhb_loop+0x35/0x90
[  410.515833][T12932]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  410.515863][T12932] RIP: 0033:0x7f7731f8e929
[  410.515881][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.515899][T12932] RSP: 002b:00007f7732da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.515923][T12932] RAX: ffffffffffffffda RBX: 00007f77321b5fa0 RCX: 00007f7731f8e929
[  410.515940][T12932] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003
[  410.515953][T12932] RBP: 00007f7732da1090 R08: 0000000000000000 R09: 0000000000000000
[  410.515966][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.515979][T12932] R13: 0000000000000000 R14: 00007f77321b5fa0 R15: 00007ffd9d017e08
[  410.515997][T12932]  </TASK>
[  410.522534][   T36] audit: type=1400 audit(1750468517.747:66841): avc:  denied  { read } for  pid=12920 comm="syz.6.4442" name="binder0" dev="binder" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  410.530141][  T594] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  411.085836][  T594] usb 1-1: Using ep0 maxpacket: 16
[  411.115948][  T594] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  411.137630][  T594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.148417][  T594] usb 1-1: config 0 has no interface number 0
[  411.163182][  T594] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  411.183470][  T594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.193873][T12946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  411.205705][  T594] usb 1-1: Product: syz
[  411.248321][  T594] usb 1-1: Manufacturer: syz
[  411.253269][  T594] usb 1-1: SerialNumber: syz
[  411.276330][  T594] usb 1-1: config 0 descriptor??
[  411.395832][  T783] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  411.445827][  T350] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  411.508848][  T594] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  411.525382][  T594] usb 1-1: No valid video chain found.
[  411.546838][  T594] usb 1-1: USB disconnect, device number 127
[  411.557620][  T783] usb 3-1: device descriptor read/64, error -71
[  411.628348][  T350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.659583][  T350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1328, setting to 1024
[  411.686348][  T350] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  411.699390][  T350] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  411.708703][  T350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.719404][  T350] usb 7-1: config 0 descriptor??
[  411.728348][T12946] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  411.806007][  T783] usb 3-1: device descriptor read/64, error -71
[  412.066109][  T783] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  412.150235][T12950] binder: Unknown parameter ' 259       0 rnullb0 133139 0 1231176 4154504680 462 6558 56160 0 0 6340 4154504680 0 0 0 0 0 0
[  412.150235][T12950]    1       0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       3 ram3 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       4 ram4 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       5 ram5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       6 ram6 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       7 ram7 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       8 ram8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1       9 ram9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      10 ram10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      11 ram11 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      12 ram12 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      13 ram13 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      14 ram14 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    1      15 ram15 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    7       1 loop1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  412.150235][T12950]    7   
[  412.166260][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.286299][  T783] usb 3-1: device descriptor read/64, error -71
[  412.298236][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.325125][  T350] usbhid 7-1:0.0: can't add hid device: -71
[  412.341329][  T350] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  412.356336][  T350] usb 7-1: USB disconnect, device number 41
[  412.449550][T12953] FAULT_INJECTION: forcing a failure.
[  412.449550][T12953] name failslab, interval 1, probability 0, space 0, times 0
[  412.482512][T12953] CPU: 0 UID: 0 PID: 12953 Comm: syz.0.4452 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  412.482558][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  412.482573][T12953] Call Trace:
[  412.482581][T12953]  <TASK>
[  412.482590][T12953]  __dump_stack+0x21/0x30
[  412.482620][T12953]  dump_stack_lvl+0x10c/0x190
[  412.482644][T12953]  ? __cfi_dump_stack_lvl+0x10/0x10
[  412.482670][T12953]  ? skb_put+0x112/0x1f0
[  412.482698][T12953]  dump_stack+0x19/0x20
[  412.482722][T12953]  should_fail_ex+0x3d9/0x530
[  412.482746][T12953]  should_failslab+0xac/0x100
[  412.482774][T12953]  __kmalloc_node_track_caller_noprof+0x68/0x440
[  412.482801][T12953]  ? sidtab_sid2str_get+0x139/0x370
[  412.482833][T12953]  kmemdup_noprof+0x31/0x80
[  412.482856][T12953]  sidtab_sid2str_get+0x139/0x370
[  412.482886][T12953]  security_sid_to_context_core+0x30d/0x5d0
[  412.482913][T12953]  security_sid_to_context+0x2e/0x50
[  412.482938][T12953]  avc_audit_post_callback+0x198/0x780
[  412.482961][T12953]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  412.482985][T12953]  ? audit_log_untrustedstring+0xea/0x100
[  412.483007][T12953]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  412.483030][T12953]  common_lsm_audit+0x147a/0x1860
[  412.483051][T12953]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  412.483080][T12953]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  412.483103][T12953]  ? __cfi_common_lsm_audit+0x10/0x10
[  412.483124][T12953]  ? avc_denied+0x112/0x180
[  412.483146][T12953]  slow_avc_audit+0x18d/0x1f0
[  412.483167][T12953]  ? __cfi_slow_avc_audit+0x10/0x10
[  412.483188][T12953]  ? avc_has_perm_noaudit+0x360/0x360
[  412.483211][T12953]  ? avc_has_perm_noaudit+0x21c/0x360
[  412.483234][T12953]  avc_has_perm+0x1cd/0x220
[  412.483255][T12953]  ? __cfi_avc_has_perm+0x10/0x10
[  412.483279][T12953]  selinux_socket_sendmsg+0x284/0x380
[  412.483306][T12953]  ? __cfi_selinux_socket_sendmsg+0x10/0x10
[  412.483340][T12953]  ? arch_stack_walk+0x10b/0x170
[  412.483369][T12953]  security_socket_sendmsg+0x56/0xd0
[  412.483394][T12953]  ____sys_sendmsg+0x52d/0xa70
[  412.483427][T12953]  ? __sys_sendmsg_sock+0x50/0x50
[  412.483459][T12953]  ? import_iovec+0x81/0xb0
[  412.483488][T12953]  ___sys_sendmsg+0x220/0x2a0
[  412.483520][T12953]  ? __sys_sendmsg+0x280/0x280
[  412.483552][T12953]  ? proc_fail_nth_write+0x17e/0x210
[  412.483573][T12953]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  412.483599][T12953]  __x64_sys_sendmsg+0x1eb/0x2c0
[  412.483618][T12953]  ? fput+0x1a5/0x240
[  412.483649][T12953]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  412.483668][T12953]  ? ksys_write+0x1ef/0x250
[  412.483695][T12953]  ? __kasan_check_read+0x15/0x20
[  412.483719][T12953]  x64_sys_call+0x2a4c/0x2ee0
[  412.483745][T12953]  do_syscall_64+0x58/0xf0
[  412.483771][T12953]  ? clear_bhb_loop+0x35/0x90
[  412.483801][T12953]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  412.483830][T12953] RIP: 0033:0x7f0d8278e929
[  412.483849][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.483868][T12953] RSP: 002b:00007f0d835df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.483891][T12953] RAX: ffffffffffffffda RBX: 00007f0d829b5fa0 RCX: 00007f0d8278e929
[  412.483908][T12953] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000004
[  412.483922][T12953] RBP: 00007f0d835df090 R08: 0000000000000000 R09: 0000000000000000
[  412.483936][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.483949][T12953] R13: 0000000000000000 R14: 00007f0d829b5fa0 R15: 00007ffed9265178
[  412.483966][T12953]  </TASK>
[  412.546406][  T783] usb 3-1: device descriptor read/64, error -71
[  412.557106][T12955] 9pnet_virtio: no channels available for device syz
[  412.626569][T12956] overlayfs: overlapping lowerdir path
[  412.855825][  T783] usb usb3-port1: attempt power cycle
[  413.196635][  T783] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  413.236123][  T783] usb 3-1: device descriptor read/8, error -71
[  413.383014][  T783] usb 3-1: device descriptor read/8, error -71
[  413.532390][T12994] FAULT_INJECTION: forcing a failure.
[  413.532390][T12994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.545731][T12994] CPU: 1 UID: 0 PID: 12994 Comm: syz.0.4462 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  413.545764][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  413.545777][T12994] Call Trace:
[  413.545785][T12994]  <TASK>
[  413.545794][T12994]  __dump_stack+0x21/0x30
[  413.545822][T12994]  dump_stack_lvl+0x10c/0x190
[  413.545845][T12994]  ? __cfi_dump_stack_lvl+0x10/0x10
[  413.545873][T12994]  dump_stack+0x19/0x20
[  413.545896][T12994]  should_fail_ex+0x3d9/0x530
[  413.545920][T12994]  should_fail+0xf/0x20
[  413.545941][T12994]  should_fail_usercopy+0x1e/0x30
[  413.545965][T12994]  _copy_to_user+0x24/0xa0
[  413.545993][T12994]  simple_read_from_buffer+0xed/0x160
[  413.546024][T12994]  proc_fail_nth_read+0x19e/0x210
[  413.546045][T12994]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  413.546066][T12994]  ? bpf_lsm_file_permission+0xd/0x20
[  413.546107][T12994]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  413.546127][T12994]  vfs_read+0x278/0xb60
[  413.546157][T12994]  ? __cfi_fuse_dev_write+0x10/0x10
[  413.546185][T12994]  ? __cfi_vfs_read+0x10/0x10
[  413.546208][T12994]  ? __kasan_check_write+0x18/0x20
[  413.546232][T12994]  ? mutex_lock+0x92/0x1c0
[  413.546253][T12994]  ? __cfi_mutex_lock+0x10/0x10
[  413.546273][T12994]  ? __fget_files+0x2c5/0x340
[  413.546304][T12994]  ksys_read+0x141/0x250
[  413.546329][T12994]  ? xfd_validate_state+0x68/0x150
[  413.546352][T12994]  ? __cfi_ksys_read+0x10/0x10
[  413.546376][T12994]  ? __kasan_check_write+0x18/0x20
[  413.546399][T12994]  ? fpregs_restore_userregs+0x11d/0x260
[  413.546437][T12994]  __x64_sys_read+0x7f/0x90
[  413.546459][T12994]  x64_sys_call+0x2638/0x2ee0
[  413.546484][T12994]  do_syscall_64+0x58/0xf0
[  413.546508][T12994]  ? clear_bhb_loop+0x35/0x90
[  413.546535][T12994]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  413.546562][T12994] RIP: 0033:0x7f0d8278d33c
[  413.546581][T12994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  413.546600][T12994] RSP: 002b:00007f0d835df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  413.546623][T12994] RAX: ffffffffffffffda RBX: 00007f0d829b5fa0 RCX: 00007f0d8278d33c
[  413.546640][T12994] RDX: 000000000000000f RSI: 00007f0d835df0a0 RDI: 0000000000000004
[  413.546653][T12994] RBP: 00007f0d835df090 R08: 0000000000000000 R09: 0000000000000000
[  413.546667][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.546681][T12994] R13: 0000000000000000 R14: 00007f0d829b5fa0 R15: 00007ffed9265178
[  413.546699][T12994]  </TASK>
[  413.856962][  T783] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  413.880811][  T783] usb 3-1: device descriptor read/8, error -71
[  413.903689][T12998] kernel profiling enabled (shift: 63)
[  413.923452][T12998] profiling shift: 63 too large
[  413.949386][T13004] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  414.052271][  T783] usb 3-1: device descriptor read/8, error -71
[  414.068386][T13010] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  414.190530][T13016] rust_binder: Error while translating object.
[  414.190563][T13016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  414.193255][  T783] usb usb3-port1: unable to enumerate USB device
[  414.203904][T13016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:760
[  414.215421][T13021] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  414.332690][T13024] __vm_enough_memory: pid: 13024, comm: syz.6.4473, bytes: 281474976845824 not enough memory for the allocation
[  414.662380][T13042] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  414.685461][T13044] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  414.935436][T13059] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  414.940118][T13060] binder: Bad value for 'max'
[  415.014484][T13061] rust_binder: Error while translating object.
[  415.014518][T13061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  415.029079][T13061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:776
[  415.092454][T13065] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  415.103429][T13065] rust_binder: Error in use_page_slow: ESRCH
[  415.110702][T13065] rust_binder: use_range failure ESRCH
[  415.124826][T13065] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  415.134554][T13065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  415.149938][   T36] kauditd_printk_skb: 629 callbacks suppressed
[  415.149956][   T36] audit: type=1400 audit(1750468522.645:67471): avc:  denied  { ioctl } for  pid=13066 comm="syz.7.4486" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  415.152846][T13065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:537
[  415.164957][   T36] audit: type=1400 audit(1750468522.665:67472): avc:  denied  { read write open } for  pid=13066 comm="syz.7.4486" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  415.223257][T13069] overlayfs: missing 'lowerdir'
[  415.253840][   T36] audit: type=1400 audit(1750468522.665:67473): avc:  denied  { ioctl } for  pid=13066 comm="syz.7.4486" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  415.338975][   T36] audit: type=1400 audit(1750468522.665:67474): avc:  denied  { ioctl } for  pid=13066 comm="syz.7.4486" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  415.351908][T13073] binder: Unknown parameter 'fsuuid'
[  415.399529][   T36] audit: type=1400 audit(1750468522.665:67475): avc:  denied  { read } for  pid=13062 comm="syz.0.4484" name="binder0" dev="binder" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  415.426462][   T36] audit: type=1400 audit(1750468522.665:67476): avc:  denied  { read open } for  pid=13062 comm="syz.0.4484" path="/dev/binderfs/binder0" dev="binder" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  415.488032][   T36] audit: type=1400 audit(1750468522.665:67477): avc:  denied  { ioctl } for  pid=13062 comm="syz.0.4484" path="/dev/binderfs/binder0" dev="binder" ino=112 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  415.541642][   T36] audit: type=1400 audit(1750468522.665:67478): avc:  denied  { set_context_mgr } for  pid=13062 comm="syz.0.4484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  415.584233][   T36] audit: type=1400 audit(1750468522.665:67479): avc:  denied  { read } for  pid=13062 comm="syz.0.4484" name="binder0" dev="binder" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  415.609221][   T36] audit: type=1400 audit(1750468522.665:67480): avc:  denied  { read open } for  pid=13062 comm="syz.0.4484" path="/dev/binderfs/binder0" dev="binder" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  415.693547][T13080] FAULT_INJECTION: forcing a failure.
[  415.693547][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.706925][T13080] CPU: 1 UID: 0 PID: 13080 Comm: syz.6.4490 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  415.706960][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  415.706973][T13080] Call Trace:
[  415.706980][T13080]  <TASK>
[  415.706990][T13080]  __dump_stack+0x21/0x30
[  415.707019][T13080]  dump_stack_lvl+0x10c/0x190
[  415.707044][T13080]  ? __cfi_dump_stack_lvl+0x10/0x10
[  415.707070][T13080]  dump_stack+0x19/0x20
[  415.707093][T13080]  should_fail_ex+0x3d9/0x530
[  415.707127][T13080]  should_fail+0xf/0x20
[  415.707147][T13080]  should_fail_usercopy+0x1e/0x30
[  415.707170][T13080]  _copy_from_iter+0x1a3/0x14b0
[  415.707196][T13080]  ? __kasan_check_write+0x18/0x20
[  415.707218][T13080]  ? __build_skb_around+0x2a4/0x5a0
[  415.707243][T13080]  ? __cfi__copy_from_iter+0x10/0x10
[  415.707276][T13080]  ? check_stack_object+0x82/0x140
[  415.707316][T13080]  ? __virt_addr_valid+0x2a6/0x380
[  415.707346][T13080]  ? __check_object_size+0x455/0x620
[  415.707372][T13080]  netlink_sendmsg+0x680/0xaf0
[  415.707401][T13080]  ? __cfi_netlink_sendmsg+0x10/0x10
[  415.707432][T13080]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  415.707463][T13080]  ? security_socket_sendmsg+0x33/0xd0
[  415.707487][T13080]  ? __cfi_netlink_sendmsg+0x10/0x10
[  415.707519][T13080]  ____sys_sendmsg+0xa15/0xa70
[  415.707549][T13080]  ? __sys_sendmsg_sock+0x50/0x50
[  415.707582][T13080]  ? import_iovec+0x81/0xb0
[  415.707611][T13080]  ___sys_sendmsg+0x220/0x2a0
[  415.707640][T13080]  ? __sys_sendmsg+0x280/0x280
[  415.707671][T13080]  ? proc_fail_nth_write+0x17e/0x210
[  415.707691][T13080]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  415.707717][T13080]  __x64_sys_sendmsg+0x1eb/0x2c0
[  415.707740][T13080]  ? fput+0x1a5/0x240
[  415.707769][T13080]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  415.707806][T13080]  ? ksys_write+0x1ef/0x250
[  415.707834][T13080]  ? __kasan_check_read+0x15/0x20
[  415.707859][T13080]  x64_sys_call+0x2a4c/0x2ee0
[  415.707887][T13080]  do_syscall_64+0x58/0xf0
[  415.707913][T13080]  ? clear_bhb_loop+0x35/0x90
[  415.707943][T13080]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  415.707975][T13080] RIP: 0033:0x7f7731f8e929
[  415.707993][T13080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.708011][T13080] RSP: 002b:00007f7732da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.708035][T13080] RAX: ffffffffffffffda RBX: 00007f77321b5fa0 RCX: 00007f7731f8e929
[  415.708052][T13080] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000004
[  415.708066][T13080] RBP: 00007f7732da1090 R08: 0000000000000000 R09: 0000000000000000
[  415.708080][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.708094][T13080] R13: 0000000000000000 R14: 00007f77321b5fa0 R15: 00007ffd9d017e08
[  415.708112][T13080]  </TASK>
[  416.029557][T13086] FAULT_INJECTION: forcing a failure.
[  416.029557][T13086] name failslab, interval 1, probability 0, space 0, times 0
[  416.042333][T13086] CPU: 1 UID: 0 PID: 13086 Comm: syz.0.4493 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  416.042368][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  416.042383][T13086] Call Trace:
[  416.042391][T13086]  <TASK>
[  416.042400][T13086]  __dump_stack+0x21/0x30
[  416.042429][T13086]  dump_stack_lvl+0x10c/0x190
[  416.042454][T13086]  ? __cfi_dump_stack_lvl+0x10/0x10
[  416.042482][T13086]  dump_stack+0x19/0x20
[  416.042505][T13086]  should_fail_ex+0x3d9/0x530
[  416.042528][T13086]  should_failslab+0xac/0x100
[  416.042558][T13086]  __kmalloc_noprof+0x69/0x450
[  416.042582][T13086]  ? ethnl_default_doit+0x1c3/0xe20
[  416.042609][T13086]  ethnl_default_doit+0x1c3/0xe20
[  416.042634][T13086]  ? genl_family_rcv_msg_attrs_parse+0x213/0x390
[  416.042661][T13086]  genl_family_rcv_msg_doit+0x22f/0x330
[  416.042686][T13086]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  416.042709][T13086]  ? radix_tree_lookup+0x250/0x2a0
[  416.042738][T13086]  genl_rcv_msg+0x609/0x7a0
[  416.042760][T13086]  ? __cfi_genl_rcv_msg+0x10/0x10
[  416.042781][T13086]  ? __cfi_ethnl_default_doit+0x10/0x10
[  416.042806][T13086]  netlink_rcv_skb+0x22b/0x4a0
[  416.042836][T13086]  ? __cfi_genl_rcv_msg+0x10/0x10
[  416.042858][T13086]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  416.042886][T13086]  ? rwsem_read_trylock+0x2b1/0x660
[  416.042912][T13086]  ? down_read+0x79/0xe0
[  416.042934][T13086]  ? __cfi_down_read+0x10/0x10
[  416.042956][T13086]  ? is_vmalloc_addr+0x11/0x40
[  416.042988][T13086]  genl_rcv+0x2c/0x40
[  416.043009][T13086]  netlink_unicast+0x8c6/0xa60
[  416.043039][T13086]  netlink_sendmsg+0x7f0/0xaf0
[  416.043073][T13086]  ? __cfi_netlink_sendmsg+0x10/0x10
[  416.043105][T13086]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  416.043139][T13086]  ? security_socket_sendmsg+0x33/0xd0
[  416.043165][T13086]  ? __cfi_netlink_sendmsg+0x10/0x10
[  416.043196][T13086]  ____sys_sendmsg+0xa15/0xa70
[  416.043230][T13086]  ? __sys_sendmsg_sock+0x50/0x50
[  416.043263][T13086]  ? import_iovec+0x81/0xb0
[  416.043294][T13086]  ___sys_sendmsg+0x220/0x2a0
[  416.043334][T13086]  ? __sys_sendmsg+0x280/0x280
[  416.043367][T13086]  ? proc_fail_nth_write+0x17e/0x210
[  416.043389][T13086]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  416.043417][T13086]  __x64_sys_sendmsg+0x1eb/0x2c0
[  416.043437][T13086]  ? fput+0x1a5/0x240
[  416.043468][T13086]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  416.043489][T13086]  ? ksys_write+0x1ef/0x250
[  416.043516][T13086]  ? __kasan_check_read+0x15/0x20
[  416.043542][T13086]  x64_sys_call+0x2a4c/0x2ee0
[  416.043569][T13086]  do_syscall_64+0x58/0xf0
[  416.043597][T13086]  ? clear_bhb_loop+0x35/0x90
[  416.043629][T13086]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  416.043659][T13086] RIP: 0033:0x7f0d8278e929
[  416.043678][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.043698][T13086] RSP: 002b:00007f0d835df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.043722][T13086] RAX: ffffffffffffffda RBX: 00007f0d829b5fa0 RCX: 00007f0d8278e929
[  416.043739][T13086] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003
[  416.043755][T13086] RBP: 00007f0d835df090 R08: 0000000000000000 R09: 0000000000000000
[  416.043769][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  416.043783][T13086] R13: 0000000000000000 R14: 00007f0d829b5fa0 R15: 00007ffed9265178
[  416.043802][T13086]  </TASK>
[  416.484164][T13099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550
[  416.621362][T13102] fuse: Unknown parameter ''
[  416.722336][T13106] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  416.726439][T13106] rust_binder: Error while translating object.
[  416.734841][T13106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  416.742776][T13106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:790
[  416.923571][T13114] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  416.948256][T13114] rust_binder: Error while translating object.
[  416.960556][T13114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  416.973359][T13114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:794
[  416.982779][T13116] FAULT_INJECTION: forcing a failure.
[  416.982779][T13116] name failslab, interval 1, probability 0, space 0, times 0
[  417.028377][T13116] CPU: 0 UID: 0 PID: 13116 Comm: syz.7.4505 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  417.028414][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  417.028428][T13116] Call Trace:
[  417.028436][T13116]  <TASK>
[  417.028446][T13116]  __dump_stack+0x21/0x30
[  417.028475][T13116]  dump_stack_lvl+0x10c/0x190
[  417.028501][T13116]  ? __cfi_dump_stack_lvl+0x10/0x10
[  417.028528][T13116]  dump_stack+0x19/0x20
[  417.028552][T13116]  should_fail_ex+0x3d9/0x530
[  417.028577][T13116]  should_failslab+0xac/0x100
[  417.028607][T13116]  __kmalloc_noprof+0x69/0x450
[  417.028633][T13116]  ? ethnl_default_doit+0x20e/0xe20
[  417.028660][T13116]  ethnl_default_doit+0x20e/0xe20
[  417.028686][T13116]  ? genl_family_rcv_msg_attrs_parse+0x213/0x390
[  417.028713][T13116]  genl_family_rcv_msg_doit+0x22f/0x330
[  417.028738][T13116]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  417.028763][T13116]  ? radix_tree_lookup+0x250/0x2a0
[  417.028794][T13116]  genl_rcv_msg+0x609/0x7a0
[  417.028817][T13116]  ? __cfi_genl_rcv_msg+0x10/0x10
[  417.028838][T13116]  ? __cfi_ethnl_default_doit+0x10/0x10
[  417.028865][T13116]  netlink_rcv_skb+0x22b/0x4a0
[  417.028895][T13116]  ? __cfi_genl_rcv_msg+0x10/0x10
[  417.028929][T13116]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  417.028977][T13116]  ? rwsem_read_trylock+0x2b1/0x660
[  417.029003][T13116]  ? down_read+0x79/0xe0
[  417.029033][T13116]  ? __cfi_down_read+0x10/0x10
[  417.029055][T13116]  ? is_vmalloc_addr+0x11/0x40
[  417.029086][T13116]  genl_rcv+0x2c/0x40
[  417.029106][T13116]  netlink_unicast+0x8c6/0xa60
[  417.029136][T13116]  netlink_sendmsg+0x7f0/0xaf0
[  417.029168][T13116]  ? __cfi_netlink_sendmsg+0x10/0x10
[  417.029201][T13116]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  417.029232][T13116]  ? security_socket_sendmsg+0x33/0xd0
[  417.029258][T13116]  ? __cfi_netlink_sendmsg+0x10/0x10
[  417.029289][T13116]  ____sys_sendmsg+0xa15/0xa70
[  417.029321][T13116]  ? __sys_sendmsg_sock+0x50/0x50
[  417.029356][T13116]  ? import_iovec+0x81/0xb0
[  417.029387][T13116]  ___sys_sendmsg+0x220/0x2a0
[  417.029423][T13116]  ? __sys_sendmsg+0x280/0x280
[  417.029455][T13116]  ? proc_fail_nth_write+0x17e/0x210
[  417.029476][T13116]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  417.029504][T13116]  __x64_sys_sendmsg+0x1eb/0x2c0
[  417.029523][T13116]  ? fput+0x1a5/0x240
[  417.029553][T13116]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  417.029572][T13116]  ? ksys_write+0x1ef/0x250
[  417.029598][T13116]  ? __kasan_check_read+0x15/0x20
[  417.029625][T13116]  x64_sys_call+0x2a4c/0x2ee0
[  417.029653][T13116]  do_syscall_64+0x58/0xf0
[  417.029681][T13116]  ? clear_bhb_loop+0x35/0x90
[  417.029713][T13116]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  417.029742][T13116] RIP: 0033:0x7f080b78e929
[  417.029761][T13116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.029779][T13116] RSP: 002b:00007f080c625038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.029803][T13116] RAX: ffffffffffffffda RBX: 00007f080b9b5fa0 RCX: 00007f080b78e929
[  417.029820][T13116] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003
[  417.029834][T13116] RBP: 00007f080c625090 R08: 0000000000000000 R09: 0000000000000000
[  417.029848][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  417.029861][T13116] R13: 0000000000000000 R14: 00007f080b9b5fa0 R15: 00007fff7fe4f1d8
[  417.029879][T13116]  </TASK>
[  417.388576][  T350] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  417.568635][  T350] usb 3-1: Using ep0 maxpacket: 32
[  417.577139][  T350] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  417.594893][  T350] usb 3-1: config 0 has no interface number 0
[  417.605586][  T350] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  417.615899][  T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.625242][  T350] usb 3-1: Product: syz
[  417.630162][  T350] usb 3-1: Manufacturer: syz
[  417.634848][  T350] usb 3-1: SerialNumber: syz
[  417.688568][  T350] usb 3-1: config 0 descriptor??
[  417.698573][  T350] smsc95xx v2.0.0
[  417.738690][  T594] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  417.805460][T13133] fuse: Bad value for 'group_id'
[  417.810638][T13133] fuse: Bad value for 'group_id'
[  417.898804][T13135] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  417.899289][T13135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560
[  417.928149][T13135] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  417.949455][T13135] rust_binder: Error while translating object.
[  417.949511][T13135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  417.958147][T13135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560
[  418.040586][T13138] FAULT_INJECTION: forcing a failure.
[  418.040586][T13138] name failslab, interval 1, probability 0, space 0, times 0
[  418.070117][T13138] CPU: 1 UID: 0 PID: 13138 Comm: syz.0.4513 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  418.070166][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  418.070181][T13138] Call Trace:
[  418.070189][T13138]  <TASK>
[  418.070198][T13138]  __dump_stack+0x21/0x30
[  418.070228][T13138]  dump_stack_lvl+0x10c/0x190
[  418.070253][T13138]  ? __cfi_dump_stack_lvl+0x10/0x10
[  418.070281][T13138]  dump_stack+0x19/0x20
[  418.070306][T13138]  should_fail_ex+0x3d9/0x530
[  418.070330][T13138]  should_failslab+0xac/0x100
[  418.070360][T13138]  __kmalloc_noprof+0x69/0x450
[  418.070385][T13138]  ? genl_family_rcv_msg_attrs_parse+0xc6/0x390
[  418.070413][T13138]  genl_family_rcv_msg_attrs_parse+0xc6/0x390
[  418.070439][T13138]  genl_family_rcv_msg_doit+0xcd/0x330
[  418.070464][T13138]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  418.070489][T13138]  ? selinux_capable+0x38/0x50
[  418.070512][T13138]  ? bpf_lsm_capable+0xd/0x20
[  418.070541][T13138]  ? ns_capable+0x91/0xf0
[  418.070566][T13138]  genl_rcv_msg+0x609/0x7a0
[  418.070589][T13138]  ? __cfi_genl_rcv_msg+0x10/0x10
[  418.070612][T13138]  ? __cfi_ieee802154_del_iface+0x10/0x10
[  418.070641][T13138]  netlink_rcv_skb+0x22b/0x4a0
[  418.070670][T13138]  ? __cfi_genl_rcv_msg+0x10/0x10
[  418.070693][T13138]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  418.070721][T13138]  ? rwsem_read_trylock+0x2b1/0x660
[  418.070747][T13138]  ? down_read+0x79/0xe0
[  418.070769][T13138]  ? __cfi_down_read+0x10/0x10
[  418.070790][T13138]  ? is_vmalloc_addr+0x11/0x40
[  418.070820][T13138]  genl_rcv+0x2c/0x40
[  418.070849][T13138]  netlink_unicast+0x8c6/0xa60
[  418.070879][T13138]  netlink_sendmsg+0x7f0/0xaf0
[  418.070913][T13138]  ? __cfi_netlink_sendmsg+0x10/0x10
[  418.070946][T13138]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  418.070977][T13138]  ? security_socket_sendmsg+0x33/0xd0
[  418.071003][T13138]  ? __cfi_netlink_sendmsg+0x10/0x10
[  418.071036][T13138]  ____sys_sendmsg+0xa15/0xa70
[  418.071071][T13138]  ? __sys_sendmsg_sock+0x50/0x50
[  418.071106][T13138]  ? import_iovec+0x81/0xb0
[  418.071138][T13138]  ___sys_sendmsg+0x220/0x2a0
[  418.071170][T13138]  ? __sys_sendmsg+0x280/0x280
[  418.071204][T13138]  ? proc_fail_nth_write+0x17e/0x210
[  418.071224][T13138]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  418.071253][T13138]  __x64_sys_sendmsg+0x1eb/0x2c0
[  418.071272][T13138]  ? fput+0x1a5/0x240
[  418.071304][T13138]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  418.071324][T13138]  ? ksys_write+0x1ef/0x250
[  418.071351][T13138]  ? __kasan_check_read+0x15/0x20
[  418.071376][T13138]  x64_sys_call+0x2a4c/0x2ee0
[  418.071404][T13138]  do_syscall_64+0x58/0xf0
[  418.071432][T13138]  ? clear_bhb_loop+0x35/0x90
[  418.071465][T13138]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  418.071495][T13138] RIP: 0033:0x7f0d8278e929
[  418.071513][T13138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.071531][T13138] RSP: 002b:00007f0d835df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.071555][T13138] RAX: ffffffffffffffda RBX: 00007f0d829b5fa0 RCX: 00007f0d8278e929
[  418.071572][T13138] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000004
[  418.071586][T13138] RBP: 00007f0d835df090 R08: 0000000000000000 R09: 0000000000000000
[  418.071600][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.071614][T13138] R13: 0000000000000000 R14: 00007f0d829b5fa0 R15: 00007ffed9265178
[  418.071632][T13138]  </TASK>
[  418.464543][T13141] rust_binder: Write failure EFAULT in pid:768
[  418.605122][T13146] FAULT_INJECTION: forcing a failure.
[  418.605122][T13146] name failslab, interval 1, probability 0, space 0, times 0
[  418.679234][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.6.4517 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  418.679272][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  418.679285][T13146] Call Trace:
[  418.679292][T13146]  <TASK>
[  418.679301][T13146]  __dump_stack+0x21/0x30
[  418.679330][T13146]  dump_stack_lvl+0x10c/0x190
[  418.679354][T13146]  ? __cfi_dump_stack_lvl+0x10/0x10
[  418.679379][T13146]  ? netlink_unicast+0x8c6/0xa60
[  418.679408][T13146]  ? ____sys_sendmsg+0xa15/0xa70
[  418.679439][T13146]  ? ___sys_sendmsg+0x220/0x2a0
[  418.679471][T13146]  ? __x64_sys_sendmsg+0x1eb/0x2c0
[  418.679490][T13146]  ? do_syscall_64+0x58/0xf0
[  418.679517][T13146]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  418.679549][T13146]  dump_stack+0x19/0x20
[  418.679571][T13146]  should_fail_ex+0x3d9/0x530
[  418.679594][T13146]  should_failslab+0xac/0x100
[  418.679622][T13146]  __kmalloc_noprof+0x69/0x450
[  418.679646][T13146]  ? strset_prepare_data+0x67c/0xb90
[  418.679715][T13146]  strset_prepare_data+0x67c/0xb90
[  418.679744][T13146]  ethnl_default_doit+0x553/0xe20
[  418.679772][T13146]  genl_family_rcv_msg_doit+0x22f/0x330
[  418.679798][T13146]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[  418.679826][T13146]  ? radix_tree_lookup+0x250/0x2a0
[  418.679856][T13146]  genl_rcv_msg+0x609/0x7a0
[  418.679879][T13146]  ? __cfi_genl_rcv_msg+0x10/0x10
[  418.679902][T13146]  ? __cfi_ethnl_default_doit+0x10/0x10
[  418.679930][T13146]  netlink_rcv_skb+0x22b/0x4a0
[  418.679962][T13146]  ? __cfi_genl_rcv_msg+0x10/0x10
[  418.679984][T13146]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  418.680012][T13146]  ? rwsem_read_trylock+0x2b1/0x660
[  418.680038][T13146]  ? down_read+0x79/0xe0
[  418.680070][T13146]  ? __cfi_down_read+0x10/0x10
[  418.680093][T13146]  ? is_vmalloc_addr+0x11/0x40
[  418.680125][T13146]  genl_rcv+0x2c/0x40
[  418.680146][T13146]  netlink_unicast+0x8c6/0xa60
[  418.680177][T13146]  netlink_sendmsg+0x7f0/0xaf0
[  418.680209][T13146]  ? __cfi_netlink_sendmsg+0x10/0x10
[  418.680243][T13146]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  418.680280][T13146]  ? security_socket_sendmsg+0x33/0xd0
[  418.680305][T13146]  ? __cfi_netlink_sendmsg+0x10/0x10
[  418.680336][T13146]  ____sys_sendmsg+0xa15/0xa70
[  418.680371][T13146]  ? __sys_sendmsg_sock+0x50/0x50
[  418.680405][T13146]  ? import_iovec+0x81/0xb0
[  418.680436][T13146]  ___sys_sendmsg+0x220/0x2a0
[  418.680468][T13146]  ? __sys_sendmsg+0x280/0x280
[  418.680502][T13146]  ? proc_fail_nth_write+0x17e/0x210
[  418.680524][T13146]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  418.680551][T13146]  __x64_sys_sendmsg+0x1eb/0x2c0
[  418.680572][T13146]  ? fput+0x1a5/0x240
[  418.680602][T13146]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  418.680623][T13146]  ? ksys_write+0x1ef/0x250
[  418.680649][T13146]  ? __kasan_check_read+0x15/0x20
[  418.680674][T13146]  x64_sys_call+0x2a4c/0x2ee0
[  418.680703][T13146]  do_syscall_64+0x58/0xf0
[  418.680731][T13146]  ? clear_bhb_loop+0x35/0x90
[  418.680765][T13146]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  418.680796][T13146] RIP: 0033:0x7f7731f8e929
[  418.680814][T13146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.680834][T13146] RSP: 002b:00007f7732da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.680858][T13146] RAX: ffffffffffffffda RBX: 00007f77321b5fa0 RCX: 00007f7731f8e929
[  418.680875][T13146] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003
[  418.680890][T13146] RBP: 00007f7732da1090 R08: 0000000000000000 R09: 0000000000000000
[  418.680905][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.680918][T13146] R13: 0000000000000000 R14: 00007f77321b5fa0 R15: 00007ffd9d017e08
[  418.680936][T13146]  </TASK>
[  419.076607][  T350] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  419.134233][  T350] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  419.143458][  T783] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  419.165213][  T350] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  419.232474][T13157] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  419.242495][  T350] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  419.293568][  T350] usb 3-1: USB disconnect, device number 40
[  419.299523][T13162] FAULT_INJECTION: forcing a failure.
[  419.299523][T13162] name failslab, interval 1, probability 0, space 0, times 0
[  419.299552][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.6.4523 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  419.299582][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  419.299599][T13162] Call Trace:
[  419.299631][T13162]  <TASK>
[  419.299640][T13162]  __dump_stack+0x21/0x30
[  419.299678][T13162]  dump_stack_lvl+0x10c/0x190
[  419.299708][T13162]  ? __cfi_dump_stack_lvl+0x10/0x10
[  419.299738][T13162]  ? genl_family_rcv_msg_doit+0x294/0x330
[  419.299768][T13162]  dump_stack+0x19/0x20
[  419.299795][T13162]  should_fail_ex+0x3d9/0x530
[  419.299837][T13162]  should_failslab+0xac/0x100
[  419.299871][T13162]  kmem_cache_alloc_node_noprof+0x45/0x3b0
[  419.299900][T13162]  ? __alloc_skb+0x10c/0x370
[  419.299931][T13162]  __alloc_skb+0x10c/0x370
[  419.299961][T13162]  ? __kasan_check_read+0x15/0x20
[  419.299989][T13162]  netlink_ack+0x155/0xa50
[  419.300025][T13162]  netlink_rcv_skb+0x2b2/0x4a0
[  419.300059][T13162]  ? __cfi_genl_rcv_msg+0x10/0x10
[  419.300084][T13162]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  419.300116][T13162]  ? rwsem_read_trylock+0x2b1/0x660
[  419.300145][T13162]  ? down_read+0x79/0xe0
[  419.300170][T13162]  ? __cfi_down_read+0x10/0x10
[  419.300196][T13162]  ? is_vmalloc_addr+0x11/0x40
[  419.300231][T13162]  genl_rcv+0x2c/0x40
[  419.300254][T13162]  netlink_unicast+0x8c6/0xa60
[  419.300288][T13162]  netlink_sendmsg+0x7f0/0xaf0
[  419.300324][T13162]  ? __cfi_netlink_sendmsg+0x10/0x10
[  419.300361][T13162]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  419.300398][T13162]  ? security_socket_sendmsg+0x33/0xd0
[  419.300429][T13162]  ? __cfi_netlink_sendmsg+0x10/0x10
[  419.300465][T13162]  ____sys_sendmsg+0xa15/0xa70
[  419.300502][T13162]  ? __sys_sendmsg_sock+0x50/0x50
[  419.300540][T13162]  ? import_iovec+0x81/0xb0
[  419.300574][T13162]  ___sys_sendmsg+0x220/0x2a0
[  419.300611][T13162]  ? __sys_sendmsg+0x280/0x280
[  419.300646][T13162]  ? proc_fail_nth_write+0x17e/0x210
[  419.300669][T13162]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  419.300701][T13162]  __x64_sys_sendmsg+0x1eb/0x2c0
[  419.300722][T13162]  ? fput+0x1a5/0x240
[  419.300758][T13162]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  419.300781][T13162]  ? ksys_write+0x1ef/0x250
[  419.300810][T13162]  ? __kasan_check_read+0x15/0x20
[  419.300846][T13162]  x64_sys_call+0x2a4c/0x2ee0
[  419.300877][T13162]  do_syscall_64+0x58/0xf0
[  419.300908][T13162]  ? clear_bhb_loop+0x35/0x90
[  419.300943][T13162]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  419.300976][T13162] RIP: 0033:0x7f7731f8e929
[  419.300997][T13162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.301018][T13162] RSP: 002b:00007f7732da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.301045][T13162] RAX: ffffffffffffffda RBX: 00007f77321b5fa0 RCX: 00007f7731f8e929
[  419.301064][T13162] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000004
[  419.301084][T13162] RBP: 00007f7732da1090 R08: 0000000000000000 R09: 0000000000000000
[  419.301100][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  419.301116][T13162] R13: 0000000000000000 R14: 00007f77321b5fa0 R15: 00007ffd9d017e08
[  419.301137][T13162]  </TASK>
[  419.624515][  T783] usb 1-1: Using ep0 maxpacket: 16
[  419.650714][  T783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.661372][  T783] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  419.670483][  T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.680458][  T783] usb 1-1: config 0 descriptor??
[  419.859660][ T1773] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  419.881485][T13171] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  419.881511][T13171] rust_binder: Error while translating object.
[  419.907057][T13171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  419.913365][T13171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1247
[  420.019721][ T1773] usb 7-1: Using ep0 maxpacket: 32
[  420.062294][ T1773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.086643][ T1773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.119776][ T1773] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  420.130281][ T1773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.142946][ T1773] usb 7-1: config 0 descriptor??
[  420.152286][ T1773] hub 7-1:0.0: USB hub found
[  420.191939][   T36] kauditd_printk_skb: 524 callbacks suppressed
[  420.191957][   T36] audit: type=1400 audit(1750468527.692:68005): avc:  denied  { read write } for  pid=10617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  420.223479][   T36] audit: type=1400 audit(1750468527.692:68006): avc:  denied  { read write open } for  pid=10617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  420.253829][   T36] audit: type=1400 audit(1750468527.692:68007): avc:  denied  { ioctl } for  pid=10617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  420.280442][   T36] audit: type=1400 audit(1750468527.692:68008): avc:  denied  { create } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.304212][   T36] audit: type=1400 audit(1750468527.692:68009): avc:  denied  { create } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.325558][   T36] audit: type=1400 audit(1750468527.692:68010): avc:  denied  { write } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.347467][   T36] audit: type=1400 audit(1750468527.692:68011): avc:  denied  { read } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.382243][ T1773] hub 7-1:0.0: 1 port detected
[  420.387139][   T36] audit: type=1400 audit(1750468527.692:68012): avc:  denied  { read } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.408555][   T36] audit: type=1400 audit(1750468527.722:68013): avc:  denied  { write } for  pid=13179 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  420.438628][   T36] audit: type=1400 audit(1750468527.722:68014): avc:  denied  { read write } for  pid=10617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  420.584799][T13167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  420.607174][  T350] usb 1-1: USB disconnect, device number 2
[  420.641730][T13200] rust_binder: Error in use_page_slow: ESRCH
[  420.641752][T13200] rust_binder: use_range failure ESRCH
[  420.647806][T13200] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  420.665929][T13200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  420.684489][T13200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:571
[  420.724072][T13202] ������: renamed from team_slave_1
[  420.742328][T13204] FAULT_INJECTION: forcing a failure.
[  420.742328][T13204] name failslab, interval 1, probability 0, space 0, times 0
[  420.762449][T13204] CPU: 0 UID: 0 PID: 13204 Comm: syz.7.4535 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  420.762484][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.762498][T13204] Call Trace:
[  420.762507][T13204]  <TASK>
[  420.762516][T13204]  __dump_stack+0x21/0x30
[  420.762546][T13204]  dump_stack_lvl+0x10c/0x190
[  420.762575][T13204]  ? __cfi_dump_stack_lvl+0x10/0x10
[  420.762601][T13204]  ? __kasan_check_write+0x18/0x20
[  420.762625][T13204]  ? _raw_spin_trylock+0xaf/0x130
[  420.762654][T13204]  dump_stack+0x19/0x20
[  420.762673][T13204]  should_fail_ex+0x3d9/0x530
[  420.762694][T13204]  should_failslab+0xac/0x100
[  420.762723][T13204]  kmem_cache_alloc_noprof+0x42/0x3a0
[  420.762748][T13204]  ? mas_alloc_nodes+0x254/0x9e0
[  420.762772][T13204]  mas_alloc_nodes+0x254/0x9e0
[  420.762795][T13204]  mas_preallocate+0x764/0xc60
[  420.762816][T13204]  ? avc_has_perm+0x144/0x220
[  420.762837][T13204]  ? __cfi_avc_has_perm+0x10/0x10
[  420.762857][T13204]  ? __cfi_mas_preallocate+0x10/0x10
[  420.762881][T13204]  ? vm_normal_page_pmd+0x1cb/0x320
[  420.762920][T13204]  commit_merge+0x489/0xe60
[  420.762948][T13204]  ? vma_expand+0x550/0x550
[  420.762975][T13204]  ? __kasan_check_write+0x18/0x20
[  420.762999][T13204]  vma_modify+0xfa5/0x1430
[  420.763027][T13204]  vma_modify_flags_uffd+0x15a/0x190
[  420.763059][T13204]  userfaultfd_clear_vma+0x1e8/0x260
[  420.763085][T13204]  ? __cfi_userfaultfd_clear_vma+0x10/0x10
[  420.763114][T13204]  userfaultfd_release_all+0x280/0x490
[  420.763140][T13204]  ? __cfi_userfaultfd_release_all+0x10/0x10
[  420.763164][T13204]  ? vfs_write+0x8ba/0xe80
[  420.763190][T13204]  ? __asan_memset+0x39/0x50
[  420.763212][T13204]  ? locks_remove_posix+0x38b/0x580
[  420.763240][T13204]  userfaultfd_release+0xe2/0x1a0
[  420.763268][T13204]  ? __cfi_userfaultfd_release+0x10/0x10
[  420.763295][T13204]  ? __cfi_userfaultfd_release+0x10/0x10
[  420.763320][T13204]  __fput+0x1fb/0xa00
[  420.763340][T13204]  __fput_sync+0x4a/0x70
[  420.763357][T13204]  __se_sys_close+0x17b/0x240
[  420.763381][T13204]  __x64_sys_close+0x3c/0x60
[  420.763402][T13204]  x64_sys_call+0x2560/0x2ee0
[  420.763429][T13204]  do_syscall_64+0x58/0xf0
[  420.763457][T13204]  ? clear_bhb_loop+0x35/0x90
[  420.763487][T13204]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  420.763517][T13204] RIP: 0033:0x7f080b78e929
[  420.763535][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.763554][T13204] RSP: 002b:00007f080c625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  420.763577][T13204] RAX: ffffffffffffffda RBX: 00007f080b9b5fa0 RCX: 00007f080b78e929
[  420.763594][T13204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  420.763608][T13204] RBP: 00007f080c625090 R08: 0000000000000000 R09: 0000000000000000
[  420.763621][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.763634][T13204] R13: 0000000000000000 R14: 00007f080b9b5fa0 R15: 00007fff7fe4f1d8
[  420.763652][T13204]  </TASK>
[  420.765195][T13204] BUG: unable to handle page fault for address: fffffffffffffffc
[  421.069862][T13204] #PF: supervisor read access in kernel mode
[  421.075872][T13204] #PF: error_code(0x0000) - not-present page
[  421.081893][T13204] PGD 72ae067 P4D 72ae067 PUD 72b0067 PMD 0 
[  421.088009][T13204] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI
[  421.094113][T13204] CPU: 0 UID: 0 PID: 13204 Comm: syz.7.4535 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  421.107705][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  421.117766][T13204] RIP: 0010:can_vma_merge_left+0x6c/0x4c0
[  421.123514][T13204] Code: ff 0f 84 2b 01 00 00 4d 8d 67 08 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 d4 28 08 00 <4d> 8b 24 24 4c 89 6d d0 49 83 c5 30 4c 89 e8 48 c1 e8 03 48 b9 00
[  421.143142][T13204] RSP: 0018:ffffc900031278f8 EFLAGS: 00010246
[  421.149241][T13204] RAX: 1fffffffffffffff RBX: ffffc90003127a38 RCX: dffffc0000000000
[  421.157236][T13204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003127a20
[  421.165241][T13204] RBP: ffffc90003127938 R08: ffff88811e60129f R09: 1ffff11023cc0253
[  421.173239][T13204] R10: dffffc0000000000 R11: ffffed1023cc0254 R12: fffffffffffffffc
[  421.181237][T13204] R13: ffffc90003127a20 R14: 1ffff92000624f47 R15: fffffffffffffff4
[  421.189234][T13204] FS:  00007f080c6256c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  421.198183][T13204] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  421.204791][T13204] CR2: fffffffffffffffc CR3: 00000001303e0000 CR4: 00000000003526b0
[  421.212788][T13204] DR0: 0000000000000000 DR1: 0000000000000f6e DR2: 0000000000000000
[  421.220787][T13204] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  421.228782][T13204] Call Trace:
[  421.232077][T13204]  <TASK>
[  421.235007][T13204]  vma_modify+0x250/0x1430
[  421.239454][T13204]  vma_modify_flags_uffd+0x15a/0x190
[  421.244784][T13204]  userfaultfd_clear_vma+0x1e8/0x260
[  421.250071][T13204]  ? __cfi_userfaultfd_clear_vma+0x10/0x10
[  421.255880][T13204]  userfaultfd_release_all+0x280/0x490
[  421.261358][T13204]  ? __cfi_userfaultfd_release_all+0x10/0x10
[  421.267361][T13204]  ? vfs_write+0x8ba/0xe80
[  421.271796][T13204]  ? __asan_memset+0x39/0x50
[  421.276395][T13204]  ? locks_remove_posix+0x38b/0x580
[  421.281625][T13204]  userfaultfd_release+0xe2/0x1a0
[  421.286673][T13204]  ? __cfi_userfaultfd_release+0x10/0x10
[  421.292313][T13204]  ? __cfi_userfaultfd_release+0x10/0x10
[  421.297945][T13204]  __fput+0x1fb/0xa00
[  421.301925][T13204]  __fput_sync+0x4a/0x70
[  421.306161][T13204]  __se_sys_close+0x17b/0x240
[  421.310832][T13204]  __x64_sys_close+0x3c/0x60
[  421.315427][T13204]  x64_sys_call+0x2560/0x2ee0
[  421.320109][T13204]  do_syscall_64+0x58/0xf0
[  421.324559][T13204]  ? clear_bhb_loop+0x35/0x90
[  421.329246][T13204]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  421.335150][T13204] RIP: 0033:0x7f080b78e929
[  421.339583][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.359297][T13204] RSP: 002b:00007f080c625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  421.367732][T13204] RAX: ffffffffffffffda RBX: 00007f080b9b5fa0 RCX: 00007f080b78e929
[  421.375704][T13204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  421.383676][T13204] RBP: 00007f080c625090 R08: 0000000000000000 R09: 0000000000000000
[  421.391656][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.399627][T13204] R13: 0000000000000000 R14: 00007f080b9b5fa0 R15: 00007fff7fe4f1d8
[  421.407607][T13204]  </TASK>
[  421.410634][T13204] Modules linked in:
[  421.414543][T13204] CR2: fffffffffffffffc
[  421.418698][T13204] ---[ end trace 0000000000000000 ]---
[  421.424148][T13204] RIP: 0010:can_vma_merge_left+0x6c/0x4c0
[  421.429888][T13204] Code: ff 0f 84 2b 01 00 00 4d 8d 67 08 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 d4 28 08 00 <4d> 8b 24 24 4c 89 6d d0 49 83 c5 30 4c 89 e8 48 c1 e8 03 48 b9 00
[  421.449494][T13204] RSP: 0018:ffffc900031278f8 EFLAGS: 00010246
[  421.455562][T13204] RAX: 1fffffffffffffff RBX: ffffc90003127a38 RCX: dffffc0000000000
[  421.463537][T13204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003127a20
[  421.471508][T13204] RBP: ffffc90003127938 R08: ffff88811e60129f R09: 1ffff11023cc0253
[  421.479488][T13204] R10: dffffc0000000000 R11: ffffed1023cc0254 R12: fffffffffffffffc
[  421.487469][T13204] R13: ffffc90003127a20 R14: 1ffff92000624f47 R15: fffffffffffffff4
[  421.495447][T13204] FS:  00007f080c6256c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  421.504386][T13204] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  421.511058][T13204] CR2: fffffffffffffffc CR3: 00000001303e0000 CR4: 00000000003526b0
[  421.519049][T13204] DR0: 0000000000000000 DR1: 0000000000000f6e DR2: 0000000000000000
[  421.527035][T13204] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  421.535024][T13204] Kernel panic - not syncing: Fatal exception
[  421.541398][T13204] Kernel Offset: disabled
[  421.545731][T13204] Rebooting in 86400 seconds..