last executing test programs:

4m43.355066267s ago: executing program 0 (id=4953):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x20006, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
clock_gettime(0x4, &(0x7f0000000040))
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000000)={0x77359400})
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000280)=0x2, 0x4)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x6)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10481, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1)
madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x17)
madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x14)
write$binfmt_misc(r6, &(0x7f00000002c0), 0x15)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)

4m42.867799865s ago: executing program 0 (id=4964):
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x100, 0x2, 0x0, [{0x5d, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x6}, {0xf8, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x86}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x1, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xd}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0xc, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x8, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x82, '\x00', 0xfd}, {0x44, 0x7c, 0x7, '\x00', 0x10}, {0x7, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x43, 0x35, '\x00', 0xc}, {0x7, 0x7, 0x18, '\x00', 0x2}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x2}]}})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01181100000000000040000000000400"])
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x4, 0x0, [{0x80000007, 0xa, 0x3, 0x8, 0x7fff}, {0xc0000001, 0x3, 0xffffffff, 0x7, 0x3}, {0x0, 0x4, 0xf, 0x40, 0x402}, {0xa, 0x3, 0xfffffffd, 0x6, 0x6}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x400000000000, 0x81, 0x100000, 0x0, 0x7, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x2], 0x8080000, 0x42240})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]})
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

4m42.858135515s ago: executing program 0 (id=4965):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async)
getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000000)) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (rerun: 64)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async)
creat(0x0, 0x0) (async)
close_range(0xffffffffffffffff, r2, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x521a83)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4m42.802995696s ago: executing program 0 (id=4966):
ioprio_set$uid(0x3, 0x0, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 32)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2})
r0 = memfd_secret(0x80000) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async)
keyctl$read(0xb, r2, 0x0, 0x0) (async)
r5 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
ioctl$BLKGETZONESZ(r5, 0x80041284, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (rerun: 32)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async, rerun: 64)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x400454cb, &(0x7f0000000980)) (rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) (async)
setsockopt$packet_buf(r1, 0x107, 0x16, 0x0, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) (async, rerun: 64)
prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async, rerun: 64)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r6, 0xfffff000) (async, rerun: 32)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) (rerun: 32)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

4m42.802158845s ago: executing program 0 (id=4967):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000008003008000f4"], 0x20}}, 0x0)

4m42.800433706s ago: executing program 0 (id=4968):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x4, 0x1, 0x0, 0x1b9, 0x4, 0x299, 0xd}, "", ['\x00', '\x00']}, 0x220)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
setuid(r4)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x3de4, 0x201)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001280)=<r11=>0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fstat(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
setreuid(0x0, r13)
sendmsg$netlink(r6, &(0x7f00000013c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x19, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@loopback}]}, 0x18}, {&(0x7f0000001400)={0x10a8, 0x1a, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x80000000}, @nested={0x108d, 0xa7, 0x0, 0x1, [@typed={0x40, 0x62, 0x0, 0x0, @binary="1917af19932a707eeefddb17ed27fba7241e8797c9e5bfe3aec7d985c41a757cebec31b7bada3b97a0cff946ec2cb9b82d1679de681ede2fa09b5624"}, @generic="bb3c52d0f8154bcd13200d23376e64253f109b1802f09f33e02aedb7a43e82d9c09343c3db471c2de15a07a7a0b3cc6b018b5ec3a5cb8d25568e21494e", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x8}, @generic="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", @nested={0x4, 0x11f}]}]}, 0x10a8}, {&(0x7f00000000c0)={0x1c, 0x1d, 0x0, 0x70bd25, 0x3, "", [@nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r4}]}]}, 0x1c}, {0x0}], 0x4, &(0x7f00000012c0)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0, r8, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r9, r1, r0, r0, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r5}}}], 0xf8, 0x4000}, 0x40010)

4m36.131858688s ago: executing program 1 (id=5116):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0)

4m35.297612221s ago: executing program 1 (id=5143):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000000)
inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x10000000)
fstat(r0, &(0x7f0000000180))
ioprio_set$uid(0x3, 0x0, 0x0)

4m35.262442321s ago: executing program 1 (id=5146):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={'batadv_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000600)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})

4m35.261819721s ago: executing program 1 (id=5147):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
openat(0xffffffffffffff9c, 0x0, 0xa0243, 0x193)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f00000001c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000180)=0xf6fb})
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007105"])
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000002f40)=""/205, 0xcd}, {0x0}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

4m35.166511923s ago: executing program 1 (id=5152):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc020000160001000000000000000000ac1414bb0000000000000000000000007f0000010000000000000000000000004e200000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000bb0000000000004000000000000000000000000000000000000800000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000004000000000000000000000000009d160080240017000200000029bd700025bd70002bbd700029bd700001000000030000000028000008001f0004"], 0x2cc}}, 0x0)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
dup3(r2, r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="21baece6e5bbedcf908f742fc8a104ec7185f7ee19574ef0c52180b0ec49e2a96367fdecbfc52716aa3622d6b19bf78b754c7e248fa1ffa0a487978404a7a9c56e19deeceda174a7ba54b8e9fbbab4616095df1ea49e2aa3945f2af100fe06dc4fff54db6e019a4f9810881462527e9b5222dadd", 0x74}, {&(0x7f00000015c0)="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", 0x1000}], 0x2)
sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0)

4m35.043946474s ago: executing program 1 (id=5160):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a0004000000ea00008000f4"], 0x20}}, 0x0)

4m34.976780435s ago: executing program 32 (id=5160):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a0004000000ea00008000f4"], 0x20}}, 0x0)

4m27.574507599s ago: executing program 33 (id=4968):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x4, 0x1, 0x0, 0x1b9, 0x4, 0x299, 0xd}, "", ['\x00', '\x00']}, 0x220)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
setuid(r4)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x3de4, 0x201)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001280)=<r11=>0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fstat(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
setreuid(0x0, r13)
sendmsg$netlink(r6, &(0x7f00000013c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x19, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@loopback}]}, 0x18}, {&(0x7f0000001400)={0x10a8, 0x1a, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x80000000}, @nested={0x108d, 0xa7, 0x0, 0x1, [@typed={0x40, 0x62, 0x0, 0x0, @binary="1917af19932a707eeefddb17ed27fba7241e8797c9e5bfe3aec7d985c41a757cebec31b7bada3b97a0cff946ec2cb9b82d1679de681ede2fa09b5624"}, @generic="bb3c52d0f8154bcd13200d23376e64253f109b1802f09f33e02aedb7a43e82d9c09343c3db471c2de15a07a7a0b3cc6b018b5ec3a5cb8d25568e21494e", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x8}, @generic="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", @nested={0x4, 0x11f}]}]}, 0x10a8}, {&(0x7f00000000c0)={0x1c, 0x1d, 0x0, 0x70bd25, 0x3, "", [@nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r4}]}]}, 0x1c}, {0x0}], 0x4, &(0x7f00000012c0)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0, r8, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r9, r1, r0, r0, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r5}}}], 0xf8, 0x4000}, 0x40010)

4m7.553057126s ago: executing program 5 (id=5778):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x3c, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfe, {0xc, 0x1, 0x2, 0x0, 0x6, 0xa, 0x3, 0x4, 0x0, 0x81, 0x5}}, 0x3c}, 0x1, 0x0, 0xa00, 0x20000000}, 0x24008040)

4m7.498937417s ago: executing program 5 (id=5779):
memfd_create(&(0x7f0000000140)='.\xdf*\'\x00', 0x4) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (rerun: 32)
r2 = fsopen(&(0x7f0000000100)='bfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff) (async)
mount(0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(r1, 0x0) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b901010040b8e0e7265eba000000000f30b93f0300000f32c4e1ffe669fe0f01c2360f225bc4e2112c17b9ef0b00000f320f015b46b9800000c00f3235004000000f30c4e219cf97f9000000", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

4m7.453601237s ago: executing program 5 (id=5780):
timer_create(0x2, 0x0, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25120000"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x4)

4m7.306818379s ago: executing program 5 (id=5783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x480, &(0x7f00000002c0)='tmpfs\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
socket$packet(0x11, 0x3, 0x300)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89001)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
clock_getres(0x2, &(0x7f00000009c0))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000)
sendfile(r0, r2, 0x0, 0xb2)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

4m7.178872171s ago: executing program 5 (id=5788):
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x100, 0x2, 0x0, [{0x5d, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x6}, {0xf8, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x86}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x1, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xd}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0xc, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x8, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x82, '\x00', 0xfd}, {0x44, 0x7c, 0x7, '\x00', 0x10}, {0x7, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x43, 0x35, '\x00', 0xc}, {0x7, 0x7, 0x18, '\x00', 0x2}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x2}]}})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01181100000000000040000000000400"])
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x3, 0x0, [{0x80000007, 0xa, 0x3, 0x8, 0x7fff}, {0xc0000001, 0x3, 0xffffffff, 0x7, 0x3}, {0xa, 0x3, 0xfffffffd, 0x6, 0x6}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x400000000000, 0x81, 0x100000, 0x0, 0x7, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x2], 0x8080000, 0x42240})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]})
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xf5, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

4m6.959203335s ago: executing program 5 (id=5789):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x2, "c7a1"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x4, "b03f99ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

4m6.916634455s ago: executing program 34 (id=5789):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x2, "c7a1"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x4, "b03f99ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

42.899867982s ago: executing program 4 (id=9629):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff00000000a601000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1)

42.896557722s ago: executing program 4 (id=9630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742dbd7000ffdbdf251500000024000180080003005dfdffff150001006574683a626f6e649fec21b65e66502d6a5f"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000200800000000008000100010000000021903e6afc41ee68030000000000000000e4c0389ae784cf3c3eee13d031b0333ba52c4643d5546f5382012049cd9b0790d7288def5c3aa21c243c41e66010292f8180dd98868e263571c47f0d6e1023c6"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301040000000000d041f1e134af5411258d981653ad349c000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x401}}, 0x30)
r7 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff58"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
syz_open_dev$hidraw(&(0x7f0000000040), 0x40, 0xc0002)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={0x2})

42.805895173s ago: executing program 4 (id=9633):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000002000010000ffffffffffffff81"], 0x20}, 0x1, 0x2000000}, 0x0)

42.720971605s ago: executing program 4 (id=9642):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000006c0)={0x2, 0x2, 0x3, 0xb})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10)
setresuid(0xee00, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0)
r3 = getpgrp(0x0)
setpriority(0x1, r3, 0xffffffffffffffcd)
r4 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x101740, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r6, 0x0, 0x5a)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000002c0)=""/222, &(0x7f0000000140)=0xde)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x100})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000002214629c000040"])
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0xa, 0x4)
sendto$inet(r7, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

42.667170796s ago: executing program 4 (id=9644):
r0 = memfd_secret(0x80000)
mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0x300000f, 0x13, r0, 0xc836f000)

42.578321967s ago: executing program 4 (id=9650):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x17, [0x100, 0x500000, 0x80000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x6, 0x2, 0xce, 0x3, 0xc7, 0xd7d7, 0x400, 0xfffffffd, 0x1, 0x2, 0x9, 0xe, 0x1, 0x6, 0x9, 0x7, 0x1000, 0xfffffff9, 0x5, 0x8, 0x6, 0x1b1, 0x7, 0x7, 0x2, 0x40, 0xf3, 0x5, 0xff, 0x2, 0x5, 0x9, 0x10000, 0xa6de, 0xe000000, 0x10000, 0x4, 0xad, 0x200, 0xc, 0xe7af, 0x10, 0x3ff, 0x10000, 0x9, 0xc49, 0x4, 0x101, 0x5, 0x5, 0x6, 0x7, 0x5, 0x10, 0x0, 0x8000], [0x4, 0xfc000000, 0x3b24, 0x800, 0x4, 0xffffff87, 0xc9c, 0x6, 0x1000, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0xef3, 0x7, 0xa, 0x80, 0x1, 0x7, 0x81, 0x0, 0x1, 0x1, 0x96dd, 0x0, 0xc82a, 0x8, 0x0, 0x6, 0x81, 0x5, 0x1, 0x8, 0x9, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x2, 0x1c, 0xb, 0x2, 0x6, 0x10, 0x3, 0x5, 0x1, 0x4, 0x7f, 0xb962, 0x8, 0x1000, 0xed, 0x6, 0x1, 0x6, 0x52, 0xffff, 0x7ffffffe, 0xa34f, 0x0, 0x4], [0x4, 0xfffff2e9, 0x5c, 0x2008, 0x29, 0x9, 0x1, 0x2, 0xe61, 0x6, 0x7ff, 0xa, 0x8001, 0xc03, 0x1, 0x1df0, 0x7, 0x24, 0x8, 0x7fffffff, 0x3, 0x5, 0x3, 0x66a, 0xb, 0x3, 0x37, 0x5, 0x5, 0x6, 0x5, 0x4, 0x4, 0xfffffc01, 0x9c, 0x8, 0x8, 0xffffffff, 0x1000, 0x1, 0x6, 0x80, 0x8, 0x8, 0x0, 0xfffff0f3, 0xf499, 0xc0, 0x10001, 0x75, 0x52953358, 0x30000, 0x8, 0xfffffffa, 0x3, 0xfffffffe, 0xa5, 0x1ef4, 0x7a, 0x3, 0x7, 0x9, 0x800, 0xc], [0xfff, 0x7ff, 0x8, 0xffff, 0x1, 0x0, 0x45846e1f, 0x2, 0x9, 0x5, 0x0, 0x3, 0x40, 0x6470, 0x2, 0xd, 0x800, 0xd4, 0xe054d74, 0x0, 0x3, 0x7, 0x31e, 0x1, 0x11, 0xfffffff9, 0x0, 0x52a, 0x9, 0x9, 0x4, 0x1000, 0x7, 0x5, 0x100, 0xfff, 0x8, 0xcc, 0x3, 0x5, 0x4, 0xd, 0xfffffff1, 0xfffff310, 0x2, 0xfffffff9, 0x80, 0x100, 0x1, 0x1, 0x7, 0x80, 0x67, 0x6, 0x80000001, 0x4, 0x6, 0xd31, 0xbb, 0x1, 0x1ca, 0x8, 0x4f, 0x3d71]}}, 0x420}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)

42.514597718s ago: executing program 35 (id=9650):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x17, [0x100, 0x500000, 0x80000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x6, 0x2, 0xce, 0x3, 0xc7, 0xd7d7, 0x400, 0xfffffffd, 0x1, 0x2, 0x9, 0xe, 0x1, 0x6, 0x9, 0x7, 0x1000, 0xfffffff9, 0x5, 0x8, 0x6, 0x1b1, 0x7, 0x7, 0x2, 0x40, 0xf3, 0x5, 0xff, 0x2, 0x5, 0x9, 0x10000, 0xa6de, 0xe000000, 0x10000, 0x4, 0xad, 0x200, 0xc, 0xe7af, 0x10, 0x3ff, 0x10000, 0x9, 0xc49, 0x4, 0x101, 0x5, 0x5, 0x6, 0x7, 0x5, 0x10, 0x0, 0x8000], [0x4, 0xfc000000, 0x3b24, 0x800, 0x4, 0xffffff87, 0xc9c, 0x6, 0x1000, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0xef3, 0x7, 0xa, 0x80, 0x1, 0x7, 0x81, 0x0, 0x1, 0x1, 0x96dd, 0x0, 0xc82a, 0x8, 0x0, 0x6, 0x81, 0x5, 0x1, 0x8, 0x9, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x2, 0x1c, 0xb, 0x2, 0x6, 0x10, 0x3, 0x5, 0x1, 0x4, 0x7f, 0xb962, 0x8, 0x1000, 0xed, 0x6, 0x1, 0x6, 0x52, 0xffff, 0x7ffffffe, 0xa34f, 0x0, 0x4], [0x4, 0xfffff2e9, 0x5c, 0x2008, 0x29, 0x9, 0x1, 0x2, 0xe61, 0x6, 0x7ff, 0xa, 0x8001, 0xc03, 0x1, 0x1df0, 0x7, 0x24, 0x8, 0x7fffffff, 0x3, 0x5, 0x3, 0x66a, 0xb, 0x3, 0x37, 0x5, 0x5, 0x6, 0x5, 0x4, 0x4, 0xfffffc01, 0x9c, 0x8, 0x8, 0xffffffff, 0x1000, 0x1, 0x6, 0x80, 0x8, 0x8, 0x0, 0xfffff0f3, 0xf499, 0xc0, 0x10001, 0x75, 0x52953358, 0x30000, 0x8, 0xfffffffa, 0x3, 0xfffffffe, 0xa5, 0x1ef4, 0x7a, 0x3, 0x7, 0x9, 0x800, 0xc], [0xfff, 0x7ff, 0x8, 0xffff, 0x1, 0x0, 0x45846e1f, 0x2, 0x9, 0x5, 0x0, 0x3, 0x40, 0x6470, 0x2, 0xd, 0x800, 0xd4, 0xe054d74, 0x0, 0x3, 0x7, 0x31e, 0x1, 0x11, 0xfffffff9, 0x0, 0x52a, 0x9, 0x9, 0x4, 0x1000, 0x7, 0x5, 0x100, 0xfff, 0x8, 0xcc, 0x3, 0x5, 0x4, 0xd, 0xfffffff1, 0xfffff310, 0x2, 0xfffffff9, 0x80, 0x100, 0x1, 0x1, 0x7, 0x80, 0x67, 0x6, 0x80000001, 0x4, 0x6, 0xd31, 0xbb, 0x1, 0x1ca, 0x8, 0x4f, 0x3d71]}}, 0x420}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)

38.991422952s ago: executing program 3 (id=9714):
futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x0)

38.984356982s ago: executing program 3 (id=9715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x3)
read(r0, &(0x7f0000000040)=""/92, 0x5b)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"])
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0)
preadv2(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000000c0)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf)

38.937767493s ago: executing program 3 (id=9716):
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0xc00)
mremap(&(0x7f0000753000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000531000/0x2000)=nil)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e)
symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440)=@req={0x3, 0x9, 0x4, 0x3}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
unshare(0x24060400)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0)
r4 = syz_clone(0x88040000, 0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r6 = getuid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001300)="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", 0x2000, &(0x7f0000003c40)={&(0x7f0000000380)={0x50, 0x0, 0xb, {0x7, 0x2b, 0x0, 0x1000010, 0x3, 0xffff, 0x40, 0x98d, 0x0, 0x0, 0x100, 0xff}}, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x0, {0x6}}, &(0x7f0000000500)={0x18, 0xfffffffffffffff5, 0x17, {0x3}}, &(0x7f0000000540)={0x18, 0x0, 0x7ff, {0xfffffffa}}, &(0x7f0000000580)={0x18, 0x0, 0x6, {0x3}}, &(0x7f00000005c0)={0x28, 0xfffffffffffffff5, 0xfffffffffffffffc, {{0x8, 0x0, 0x2, r4}}}, &(0x7f0000000600)={0x60, 0xb, 0x0, {{0x9f500000000, 0x81, 0xf6fc, 0x3, 0x64, 0x8, 0x97, 0x6}}}, &(0x7f0000000680)={0x18, 0x0, 0x9, {0x80000001}}, &(0x7f0000000900)={0x13, 0xfffffffffffffffe, 0x3, {'9p\x00'}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x0, 0x12}}, &(0x7f0000000980)={0x78, 0x0, 0x2, {0x1, 0x8, 0x0, {0x2, 0x8001, 0x9, 0x400, 0x5, 0x8, 0x3, 0x6, 0x3, 0x2000, 0x6784, r6, 0x0, 0x1000, 0x93}}}, &(0x7f0000000a00)={0x90, 0x0, 0x37, {0x1, 0x2, 0x7, 0x3, 0x8, 0x8, {0x4, 0x2, 0x4, 0x1, 0x2f, 0x8, 0x28c, 0x5, 0xd, 0x2000, 0xa, r5, 0x0, 0x9}}}, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000003540)={0x3d8, 0x0, 0x100000000, [{{0x0, 0x0, 0x2, 0x6, 0x4, 0x6, {0x3, 0xb92, 0x9, 0x6, 0x4, 0x49, 0x3b88, 0x8, 0x9, 0xa000, 0xfffffc01, 0x0, 0x0, 0x7fffffff, 0x2}}, {0x2, 0x2, 0x6, 0xffff, 'sysfs\x00'}}, {{0x4, 0x2, 0xb4e, 0x5, 0x9, 0x5f5, {0x4, 0x54e, 0x1, 0x1, 0x80000000, 0x200, 0x1, 0xa53, 0x0, 0x1000, 0x1000, r6, 0x0, 0x3, 0x707}}, {0x4, 0xcd, 0x2, 0xffd, '+\''}}, {{0x1, 0x1, 0x4b, 0x101, 0x159d, 0x6873, {0x3, 0x9, 0x2, 0x2, 0x3, 0x9e9a, 0x7, 0x80000001, 0x1, 0x1000, 0x0, r5, 0x0, 0x9, 0xfffffffd}}, {0x1, 0x5, 0x3, 0xa5, '9p\x00'}}, {{0x6, 0x0, 0x1, 0xa478, 0x100, 0x0, {0x1, 0xff, 0x3, 0x1, 0x8, 0xad, 0x6, 0x6, 0x9, 0x2000, 0x8, r6, 0x0, 0x7}}, {0x0, 0x6, 0x2, 0x3, '/+'}}, {{0x1, 0x0, 0xb, 0x6, 0xbac, 0x3, {0x2, 0x10001, 0x8, 0x4c, 0xfffffffffffff24c, 0x7, 0x1, 0x8, 0x3, 0x1000, 0x7, 0x0, 0x0, 0x3ff, 0x91}}, {0x0, 0x9, 0xe, 0x1, 'memory.events\x00'}}, {{0x0, 0x3, 0xc15, 0x7f, 0x7, 0x0, {0x6, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8, 0xe, 0x8, 0x7e2, 0xffff, 0x2, 0xa000, 0xc3, 0x0, 0x0, 0x8000, 0x7}}, {0x3, 0x10000, 0x5, 0x7, ')*@+!'}}]}, &(0x7f0000003940)={0xa0, 0xffffffffffffffda, 0x7, {{0x1, 0x0, 0xb3d9, 0x2, 0x7, 0x7f, {0x2, 0xfffffe0000000000, 0x3ff, 0x10001, 0x7fff, 0x2, 0x8, 0xe, 0x4, 0x8000, 0xf4e, r6, 0x0, 0x7fffffff, 0xef40}}, {0x0, 0x1}}}, &(0x7f0000003a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0x2, 0x720135aa}}, &(0x7f0000003b00)={0x130, 0x0, 0x4, {0x7, 0x3, 0x0, '\x00', {0x10000, 0x7, 0x0, 0xbe7, r6, 0x0, 0xc000, '\x00', 0x7fff, 0x0, 0x80000001, 0x8, {0x8000}, {0x595c, 0x74}, {0xffffffff, 0xffffffc4}, {0x1, 0xd}, 0x100, 0x24, 0x6a, 0x76}}}})
setreuid(0x0, r6)
mount$9p_unix(&(0x7f0000000080)='./file0/../file0/../file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000480), 0x37001, &(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES8=r0, @ANYBLOB="2c6d61736b3d4d41595f5752452c66756e633d504154485f434845434b2c667f776e6e723c", @ANYRESDEC=r6, @ANYRESHEX])
ptrace(0x8, r4)
ptrace$setregset(0x4205, r4, 0x202, &(0x7f00000004c0)={0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x80000)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

38.937405043s ago: executing program 3 (id=9717):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10)
r3 = memfd_secret(0x80000)
mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0x300000f, 0x13, r3, 0xc836f000)

38.937300943s ago: executing program 3 (id=9718):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/raw\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
readv(r2, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x5)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

38.937065333s ago: executing program 3 (id=9719):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="de2e2441a85267588e808ba29ca15ead9f341319cf35a85615c68a3338613a47f7010319faf61a4713a7119373e0e1f1819258e9d26f8d37fc9026a8dd9a3ebc6a7885f475e9321e8dd791aef8d502207f6518e9b561"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23.840124744s ago: executing program 36 (id=9719):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="de2e2441a85267588e808ba29ca15ead9f341319cf35a85615c68a3338613a47f7010319faf61a4713a7119373e0e1f1819258e9d26f8d37fc9026a8dd9a3ebc6a7885f475e9321e8dd791aef8d502207f6518e9b561"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.076702167s ago: executing program 7 (id=10438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40084)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000040))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

4.065102517s ago: executing program 7 (id=10439):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.998209679s ago: executing program 7 (id=10440):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
futex(0x0, 0x85, 0x2, 0x0, 0x0, 0xc5fffffd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x5, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xd1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x42, 0x5, 0x2}}}}}]}}]}}, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
socketpair(0x2f, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
select(0x40, &(0x7f0000000140)={0x0, 0x401, 0x100, 0x20000000, 0x295, 0x4, 0xfa9, 0x7fffffff}, &(0x7f0000000200)={0x3d8cfbb5, 0x4, 0xd, 0x1, 0x100000001, 0xf, 0x3ff, 0xc0}, &(0x7f0000000240)={0x8000000000000000, 0x6, 0x9, 0x401, 0x80000001, 0x8f4, 0x0, 0x2}, &(0x7f00000002c0))

1.90696746s ago: executing program 8 (id=10487):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x559})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000300)="68b709ca6cfbe3b7ac8487d9aab38b9d194ea41fca57b35bbde5d901b02947737b6210d49a41ceeb1bfea659c175f7c6f3f4c846ae47b30949f61c35650bc428cca244edb0fe09ba", 0x0, 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000080), 0x8)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x42})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1.534006716s ago: executing program 6 (id=10497):
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, r0, 0x45809000)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0xa8a689e1e2f910e0, {0x42, 0x3, 0x3}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x68082, 0x0)
write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000006240)=ANY=[@ANYBLOB='3\x00\x00\x00'], 0x33)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x40}}, 0x30)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a00f4ff", @ANYRES16=r3, @ANYBLOB="00046cbd7400fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
recvmmsg$unix(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f000032d000/0x4000)=nil, 0x4000, 0x1000008, 0x50, r0, 0x38691000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.404215568s ago: executing program 6 (id=10498):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.237310941s ago: executing program 6 (id=10499):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x8a000000, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

1.202382871s ago: executing program 6 (id=10500):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x29)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

1.201435351s ago: executing program 6 (id=10501):
ioprio_set$uid(0x3, 0x0, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x268300, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0)
openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) (async)
openat(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x40) (async, rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async, rerun: 32)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x1f, 0x0, 0x0, 0xfffff00c}, {0x6, 0xd}]}) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async, rerun: 32)
ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32)
ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) (async)
ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0) (async)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000280)=@arm64)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4000008)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r10, r0, 0x0, 0x7ffff000)

1.111085622s ago: executing program 6 (id=10502):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

1.096939493s ago: executing program 8 (id=10505):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})

1.078342283s ago: executing program 8 (id=10506):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, <r1=>0x0}, 0x2020)
getresuid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080})
r4 = getegid()
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0xfffffffffffffff5, r1, {{0x5, 0x0, 0xfffffffffffffffa, 0x8000, 0xb, 0x5, {0x6, 0x8b, 0xdf3, 0x8e, 0x2, 0x8, 0x0, 0xfffffffb, 0x2, 0xc000, 0x2, r2, r4, 0x9, 0x6000000}}, {0x0, 0x4}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x214114, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x6}}, {@nodevmap}, {@nodevmap}, {@nodevmap}, {@version_9p2000}, {@ignoreqv}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/avc/hash_stats\x00'}}]}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendfile(r5, r5, 0x0, 0x7ffff000)

934.612265ms ago: executing program 7 (id=10510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182)
write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x40, &(0x7f0000000180)={0xfffffdfffffffffd, 0xffffffff, 0x0, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0x0, 0x0)

582.489621ms ago: executing program 2 (id=10529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r0, &(0x7f0000000340))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000004fbc590711ce06e20000ffffe1adfdcb919b"])
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
sendfile(r5, r6, 0x0, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r8 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r7, 0x517)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/76, 0x59, 0x1000000000002, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0xfffffffffffffdb8, 0x0, 0x0})
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x2, 0x8, &(0x7f0000000000)=0x1})

519.101042ms ago: executing program 2 (id=10530):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
recvfrom$inet6(r2, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
shutdown(r2, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

443.321383ms ago: executing program 2 (id=10531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5, 0x0, 0x0, 0x200000}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

377.949844ms ago: executing program 2 (id=10532):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x3, 0x100010, r0, 0xaa1a9000)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)

319.044515ms ago: executing program 2 (id=10533):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x390}]})
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

317.192805ms ago: executing program 2 (id=10534):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
read(r1, &(0x7f0000000240)=""/123, 0x7b) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904b1086120d12ce1748e6f48acbe19097c36e9f771b84fff2ee16522618984db93d92324d5ec9062445eafa346f41ba8c5e1fb4e14362d819f1214368fa4034aa21e7967325f0db05120524dfab741b72ca34868f638d5ff15744b9f0d598687d959ebbc8d", @ANYRES32=r0], 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
syz_usb_ep_read(r2, 0x8, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, r3) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) (async)
ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000ff76b9130040"])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

81.716548ms ago: executing program 8 (id=10535):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000001000058000b4824ca945f64009400ff0325010ebc0000ffff0000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1)

64.686229ms ago: executing program 7 (id=10536):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x33}, @fd}, 0x0}, 0x10}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0})

50.089949ms ago: executing program 7 (id=10537):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x84200, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = getpgrp(0x0)
capset(&(0x7f0000000240)={0x19980330, r3}, &(0x7f0000000280)={0x1, 0x40, 0x8, 0x2, 0x7, 0x4})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}})
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffffffcf)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x11, 0x8, 0xc, 0x1a, 0x6, 0x80000000, 0x0, 0x21, 0x1})
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
read(r1, &(0x7f0000000000)=""/175, 0xfffffe14)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000001880), 0x1000, 0x800)
write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}]}, 0x49)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r6, 0x4c01)

256.989µs ago: executing program 8 (id=10538):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e)
lseek(r1, 0x101, 0x1)
getdents64(r1, 0x0, 0x6d0821ca1fc60d2f)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x60)
r4 = epoll_create1(0x0)
r5 = epoll_create1(0x80000)
r6 = fcntl$dupfd(r4, 0x406, r5)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0x16})
r8 = epoll_create(0x4)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)={0x1})
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=10539):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa181, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa181, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000e3ffff3d9a05e8d6a42642352876fc9a783660ee33665f7b1bad6af6ba25ff8556a9acac8b7a42bdc04d0303fa0a1580a4a9814ec07aa44893105298fc68040dd128fdac5cbcb92ef17bbf1d56ea481df4e5c5a1ab94cd2a7da994be1afa24462da98bcbd322fa0cb959ee64f30afea94b87066074d781"])
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRES8=r3, @ANYRES64=r1, @ANYRES32, @ANYBLOB="b4082ae6586e1d8fa0085548398f3f4267178292f705658408dc73d674c3bbec14c5e210328606d7ee3334e98b20e55809a41be5dd1d0e2709346b929553ad1aa534df4e0ddcf3cc6b5faa3091daabb7ab041ec5f64ad600d4d20bda797abbddc4892cc2f39dfa42bb0b71d741900f7bd92bfd3791aec91c57fd0610dd280a557514918b4977dfd32b4ee2677dc0ae43c1d13ccbd5d54ae75709"]) (async)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRES8=r3, @ANYRES64=r1, @ANYRES32, @ANYBLOB="b4082ae6586e1d8fa0085548398f3f4267178292f705658408dc73d674c3bbec14c5e210328606d7ee3334e98b20e55809a41be5dd1d0e2709346b929553ad1aa534df4e0ddcf3cc6b5faa3091daabb7ab041ec5f64ad600d4d20bda797abbddc4892cc2f39dfa42bb0b71d741900f7bd92bfd3791aec91c57fd0610dd280a557514918b4977dfd32b4ee2677dc0ae43c1d13ccbd5d54ae75709"])
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x1, r2})
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000002c0)={0x0, 0x100})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mount$fuseblk(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}})
accept(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

T2704] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  490.865637][ T2704] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  490.879151][ T2704] usb 7-1: config 1 interface 0 has no altsetting 0
[  490.887435][ T2704] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  490.897101][ T2704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.905384][ T2704] usb 7-1: Product: ఊ
[  490.909712][ T2704] usb 7-1: Manufacturer: ﳿ
[  490.914592][ T2704] usb 7-1: SerialNumber: Њ
[  490.989734][   T36] audit: type=1400 audit(2000000068.457:1449): avc:  denied  { create } for  pid=22033 comm="syz.2.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  491.043812][T22045] netlink: 'syz.2.8733': attribute type 4 has an invalid length.
[  491.051689][T22045] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8733'.
[  491.089146][  T305] usb 4-1: USB disconnect, device number 26
[  491.129303][   T36] audit: type=1400 audit(2000000068.597:1450): avc:  denied  { setattr } for  pid=21988 comm="syz.6.8711" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  491.333079][T21989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.342288][T21989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.358584][T21989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.367619][T21989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.379685][ T2704] usbhid 7-1:1.0: can't add hid device: -71
[  491.385748][ T2704] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  491.395901][ T2704] usb 7-1: USB disconnect, device number 19
[  500.347996][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8747'.
[  500.357471][T22087] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  500.357489][T22087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  500.366078][T22087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:287
[  500.391403][T22094] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  500.423673][T22095] rust_binder: Write failure EINVAL in pid:59
[  500.439016][T22098] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8751'.
[  500.545428][T22115] rust_binder: Failed copying remainder into alloc: EFAULT
[  500.545456][T22115] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  500.552831][T22115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  500.561238][T22115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:301
[  500.573094][T22115] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  500.634303][T22118] rust_binder: Write failure EFAULT in pid:301
[  501.218970][   T36] audit: type=1326 audit(2000000078.690:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22091 comm="syz.2.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7fc00000
[  501.351931][T22129] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  501.491522][T22151] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8768'.
[  501.557002][   T36] audit: type=1400 audit(2000000079.028:1452): avc:  denied  { map } for  pid=22143 comm="syz.6.8769" path="socket:[108064]" dev="sockfs" ino=108064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  501.907991][T22201] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  501.915155][T22203] tmpfs: Bad value for 'nr_inodes'
[  501.926988][T22203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328
[  501.928125][T22203] rust_binder: Read failure Err(EFAULT) in pid:328
[  501.938564][T22203] rust_binder: Write failure EFAULT in pid:328
[  502.014204][   T36] audit: type=1400 audit(2000000079.488:1453): avc:  denied  { read } for  pid=22210 comm="syz.6.8793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  502.248344][T22211] rust_binder: Write failure EFAULT in pid:336
[  502.258949][   T36] audit: type=1326 audit(2000000079.728:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22139 comm="syz.3.8768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2340b8e929 code=0x7fc00000
[  502.327537][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8804'.
[  502.415455][T22256] overlayfs: failed to clone upperpath
[  502.542989][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8816'.
[  502.582536][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8819'.
[  502.615902][T22284] /dev/rnullb0: Can't lookup blockdev
[  502.798513][T22306] /dev/rnullb0: Can't lookup blockdev
[  502.976673][T22330] 9pnet_fd: Insufficient options for proto=fd
[  503.049956][    T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  503.201031][    T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  503.212077][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.223146][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.238540][   T36] audit: type=1326 audit(2000000080.708:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22251 comm="syz.3.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2340b8e929 code=0x7fc00000
[  503.262369][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  503.276291][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  503.285442][    T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  503.293644][    T9] usb 7-1: Manufacturer: syz
[  503.299084][    T9] usb 7-1: config 0 descriptor??
[  503.300589][T22348] overlayfs: missing 'lowerdir'
[  503.355336][T22348] rust_binder: BC_FREEZE_NOTIFICATION_DONE eac0220f00000000 not found
[  503.363659][T22348] rust_binder: Write failure EINVAL in pid:80
[  503.435424][   T36] audit: type=1326 audit(2000000080.908:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.4.8848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd551f8e929 code=0x0
[  503.625398][T22366] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  503.638918][T22369] binder: Unknown parameter '00000000000000000000000'
[  503.715188][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.724870][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.772838][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  503.778881][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  503.790060][    T9] usb 7-1: USB disconnect, device number 20
[  503.890731][T22401] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  504.250021][   T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  504.333930][T22421] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  504.399975][   T45] usb 4-1: Using ep0 maxpacket: 16
[  504.409659][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  504.418905][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.426942][   T45] usb 4-1: Product: syz
[  504.431423][   T45] usb 4-1: Manufacturer: syz
[  504.436119][   T45] usb 4-1: SerialNumber: syz
[  504.466905][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8880'.
[  504.609973][  T305] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  504.648572][   T45] cdc_ncm 4-1:1.0: bind() failure
[  504.655192][   T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  504.662149][   T45] cdc_ncm 4-1:1.1: bind() failure
[  504.670021][   T45] usb 4-1: USB disconnect, device number 27
[  504.760007][  T305] usb 7-1: Using ep0 maxpacket: 32
[  504.766266][  T305] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  504.777781][  T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  504.788950][  T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  504.800739][  T305] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  504.809805][  T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.818810][  T305] usb 7-1: config 0 descriptor??
[  504.827971][T22428] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  504.837986][T22447] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  504.839798][  T305] hub 7-1:0.0: USB hub found
[  505.042566][  T305] hub 7-1:0.0: 2 ports detected
[  505.111456][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8896'.
[  505.131929][T22474] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  505.533516][T22498] binder: Unknown parameter 'def�ntext01777777777777777777777'
[  505.550029][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8908'.
[  505.848609][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8919'.
[  505.995615][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8928'.
[  506.600778][T22579] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  506.857561][T22428] rust_binder: Write failure EINVAL in pid:348
[  506.859149][T22428] 9pnet: p9_errstr2errno: server reported unknown error ��p��A�����;KZ�44�/@�q��
[  506.937253][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'.
[  506.975446][ T1809] usb 7-1: USB disconnect, device number 21
[  507.216832][T22616] overlayfs: failed to clone upperpath
[  507.230407][T22616] overlayfs: failed to clone upperpath
[  507.250630][T22616] overlayfs: failed to clone upperpath
[  507.256655][T22616] overlayfs: failed to clone upperpath
[  507.267041][T22616] overlayfs: failed to clone upperpath
[  507.277205][T22616] overlayfs: failed to clone upperpath
[  507.293329][T22616] overlayfs: failed to clone upperpath
[  507.311839][T22616] overlayfs: failed to clone upperpath
[  507.317788][T22616] overlayfs: failed to clone upperpath
[  507.324110][T22616] overlayfs: failed to clone upperpath
[  507.334397][T22616] overlayfs: failed to clone upperpath
[  507.344486][T22616] overlayfs: failed to clone upperpath
[  507.354543][T22616] overlayfs: failed to clone upperpath
[  507.364669][T22616] overlayfs: failed to clone upperpath
[  507.370820][T22616] overlayfs: failed to clone upperpath
[  507.380533][T22616] overlayfs: failed to clone upperpath
[  507.390792][T22616] overlayfs: failed to clone upperpath
[  507.400619][T22616] overlayfs: failed to clone upperpath
[  507.410379][T22616] overlayfs: failed to clone upperpath
[  507.420434][T22616] overlayfs: failed to clone upperpath
[  507.427166][T22616] overlayfs: failed to clone upperpath
[  507.440591][T22616] overlayfs: failed to clone upperpath
[  507.451347][T22616] overlayfs: failed to clone upperpath
[  507.470611][T22616] overlayfs: failed to clone upperpath
[  507.481403][T22616] overlayfs: failed to clone upperpath
[  507.500519][T22616] overlayfs: failed to clone upperpath
[  507.520308][T22616] overlayfs: failed to clone upperpath
[  507.539612][T22616] overlayfs: failed to clone upperpath
[  507.549810][T22616] overlayfs: failed to clone upperpath
[  507.560328][T22616] overlayfs: failed to clone upperpath
[  507.566289][T22616] overlayfs: failed to clone upperpath
[  507.576344][T22616] overlayfs: failed to clone upperpath
[  507.586469][T22616] overlayfs: failed to clone upperpath
[  507.720020][  T305] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  507.787537][T22648] fuse: Bad value for 'fd'
[  507.882204][  T305] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  507.895275][  T305] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 43520, setting to 1024
[  507.907529][  T305] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  507.919252][  T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0
[  507.928440][  T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.936470][  T305] usb 4-1: Product: syz
[  507.940653][  T305] usb 4-1: Manufacturer: syz
[  507.945238][  T305] usb 4-1: SerialNumber: syz
[  507.951434][  T305] cdc_ncm 4-1:1.0: skipping garbage
[  508.362150][T22664] /dev/nullb0: Can't lookup blockdev
[  508.482397][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8978'.
[  508.521493][T22682] overlayfs: failed to clone lowerpath
[  508.600145][ T1809] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  508.751129][ T1809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  508.761618][ T1809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  508.771199][ T1809] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  508.773088][T22690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8985'.
[  508.786077][ T1809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  508.802278][ T1809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.810389][ T1809] usb 7-1: Product: syz
[  508.814655][ T1809] usb 7-1: Manufacturer: syz
[  508.819397][ T1809] usb 7-1: SerialNumber: syz
[  508.972738][T22626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.981351][T22626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.026731][T22664] 9pnet_fd: Insufficient options for proto=fd
[  509.033335][T22664] rust_binder: Write failure EFAULT in pid:358
[  509.034646][ T1809] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  509.048067][ T1809] cdc_ncm 7-1:1.0: bind() failure
[  509.055542][ T1809] usb 7-1: USB disconnect, device number 22
[  509.072688][  T305] cdc_ncm 4-1:1.0: bind() failure
[  509.083641][  T305] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  509.088857][T22697] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  509.092222][  T305] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  509.108537][  T305] usb 4-1: USB disconnect, device number 28
[  509.179211][T22699] overlayfs: failed to clone upperpath
[  509.322678][T22704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=22704 comm=syz.2.8991
[  509.423531][T22719] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  509.550718][T22722] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8998'.
[  509.562997][T22722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8998'.
[  509.647615][T22733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=22733 comm=syz.2.9001
[  509.768306][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9005'.
[  509.778328][T22742] tmpfs: Unknown parameter 'grpquota_block_hardlimit'
[  509.968071][T22753] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9010'.
[  510.016128][T22755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37408 sclass=netlink_route_socket pid=22755 comm=syz.2.9011
[  510.089955][   T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  510.125387][T22777] lo: entered promiscuous mode
[  510.131730][T22776] lo: left promiscuous mode
[  510.219981][   T45] usb 4-1: device descriptor read/64, error -71
[  510.415406][T22784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64544 sclass=netlink_route_socket pid=22784 comm=syz.4.9022
[  510.460015][   T45] usb 4-1: device descriptor read/64, error -71
[  510.490550][T22799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  510.490586][T22799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370
[  510.585459][T22828] rust_binder: Error in use_page_slow: ESRCH
[  510.585486][T22828] rust_binder: use_range failure ESRCH
[  510.591796][T22828] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  510.597322][T22828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  510.605657][T22828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:382
[  510.627593][T22838] __nla_validate_parse: 6 callbacks suppressed
[  510.627616][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9045'.
[  510.669261][T22841] rust_binder: Write failure EFAULT in pid:387
[  510.696470][T22846] SELinux: security_context_str_to_sid () failed with errno=-22
[  510.709984][   T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  510.731930][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9050'.
[  510.740989][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.750215][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.759382][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.768589][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.777803][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.786863][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.795960][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.805182][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.825415][T22857] overlayfs: failed to clone upperpath
[  510.825457][T22856] overlayfs: failed to clone upperpath
[  510.860614][   T45] usb 4-1: device descriptor read/64, error -71
[  510.879458][T22868] overlayfs: failed to clone upperpath
[  510.989965][  T305] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  511.021291][T22885] /dev/rnullb0: Can't lookup blockdev
[  511.061421][T22893] overlayfs: failed to clone upperpath
[  511.100016][   T45] usb 4-1: device descriptor read/64, error -71
[  511.164101][  T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.175117][  T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.185425][  T305] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  511.194746][  T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.208413][  T305] usb 7-1: config 0 descriptor??
[  511.213615][   T45] usb usb4-port1: attempt power cycle
[  511.559964][   T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  511.581067][   T45] usb 4-1: device descriptor read/8, error -71
[  511.623702][  T305] playstation 0003:054C:0DF2.0038: item fetching failed at offset 3/5
[  511.632317][  T305] playstation 0003:054C:0DF2.0038: Parse failed
[  511.638775][  T305] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -22
[  511.711029][   T45] usb 4-1: device descriptor read/8, error -71
[  511.822542][   T64] usb 7-1: USB disconnect, device number 23
[  511.950023][   T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  511.970960][   T45] usb 4-1: device descriptor read/8, error -71
[  512.101034][   T45] usb 4-1: device descriptor read/8, error -71
[  512.212992][   T45] usb usb4-port1: unable to enumerate USB device
[  512.368043][T22983] FAULT_INJECTION: forcing a failure.
[  512.368043][T22983] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.381262][T22983] CPU: 1 UID: 0 PID: 22983 Comm: syz.6.9107 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  512.381296][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.381310][T22983] Call Trace:
[  512.381317][T22983]  <TASK>
[  512.381326][T22983]  __dump_stack+0x21/0x30
[  512.381355][T22983]  dump_stack_lvl+0x10c/0x190
[  512.381375][T22983]  ? __cfi_dump_stack_lvl+0x10/0x10
[  512.381397][T22983]  dump_stack+0x19/0x20
[  512.381417][T22983]  should_fail_ex+0x3d9/0x530
[  512.381440][T22983]  should_fail+0xf/0x20
[  512.381460][T22983]  should_fail_usercopy+0x1e/0x30
[  512.381482][T22983]  _copy_to_user+0x24/0xa0
[  512.381503][T22983]  simple_read_from_buffer+0xed/0x160
[  512.381524][T22983]  proc_fail_nth_read+0x19e/0x210
[  512.381544][T22983]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  512.381564][T22983]  ? bpf_lsm_file_permission+0xd/0x20
[  512.381584][T22983]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  512.381602][T22983]  vfs_read+0x27b/0xb60
[  512.381626][T22983]  ? __cfi_vfs_read+0x10/0x10
[  512.381647][T22983]  ? __kasan_check_write+0x18/0x20
[  512.381669][T22983]  ? mutex_lock+0x92/0x1c0
[  512.381688][T22983]  ? __cfi_mutex_lock+0x10/0x10
[  512.381707][T22983]  ? __fget_files+0x2c5/0x340
[  512.381732][T22983]  ksys_read+0x141/0x250
[  512.381760][T22983]  ? __kasan_check_write+0x18/0x20
[  512.381782][T22983]  ? __cfi_ksys_read+0x10/0x10
[  512.381803][T22983]  ? __x64_sys_process_mrelease+0x80/0x80
[  512.381823][T22983]  ? __kasan_check_read+0x15/0x20
[  512.381844][T22983]  __x64_sys_read+0x7f/0x90
[  512.381866][T22983]  x64_sys_call+0x2638/0x2ee0
[  512.381889][T22983]  do_syscall_64+0x58/0xf0
[  512.381914][T22983]  ? clear_bhb_loop+0x50/0xa0
[  512.381934][T22983]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  512.381959][T22983] RIP: 0033:0x7fb89ef8d33c
[  512.381977][T22983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  512.381993][T22983] RSP: 002b:00007fb89fe44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  512.382015][T22983] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8d33c
[  512.382031][T22983] RDX: 000000000000000f RSI: 00007fb89fe440a0 RDI: 0000000000000004
[  512.382046][T22983] RBP: 00007fb89fe44090 R08: 0000000000000000 R09: 0000000000000000
[  512.382060][T22983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.382074][T22983] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418
[  512.382092][T22983]  </TASK>
[  512.916328][T22995] fuse: Unknown parameter 'go�p_i�@h��7���1�&��d'
[  513.300131][T23025] tmpfs: Unknown parameter 'si����%�x�PO�*�����3q����dǪC�p��M�-�҉�_Z���2J�D�b#U�K��h��E'
[  513.779966][    T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  513.929958][    T9] usb 7-1: Using ep0 maxpacket: 32
[  513.936106][    T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  513.944266][    T9] usb 7-1: config 0 has no interface number 0
[  513.951734][    T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  513.960882][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.969068][    T9] usb 7-1: Product: syz
[  513.973401][    T9] usb 7-1: Manufacturer: syz
[  513.978002][    T9] usb 7-1: SerialNumber: syz
[  513.983265][    T9] usb 7-1: config 0 descriptor??
[  513.988974][    T9] smsc95xx v2.0.0
[  514.190810][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  514.201607][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  514.230318][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  514.248421][    T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[  514.258210][    T9] usb 7-1: USB disconnect, device number 24
[  514.480064][T23115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444
[  514.617238][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.634005][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.641986][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.649651][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.657329][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.664953][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.672590][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.680902][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.688355][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.695824][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.703395][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.710828][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.718229][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.725687][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.733120][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.740701][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.748104][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.755751][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.763656][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.766889][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.771308][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.778102][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.784862][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.791973][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.803245][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.810062][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.819722][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.820242][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.828719][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.840323][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.841137][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.848235][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.854547][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.861234][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.872216][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.874713][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.884909][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.888458][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  514.897494][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.909026][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.922028][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.929577][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.937460][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.943515][T23155] netlink: 'syz.4.9174': attribute type 10 has an invalid length.
[  514.945391][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.968838][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.976609][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  514.984373][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.000374][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.007993][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.013255][T23170] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  515.015776][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.029641][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.037218][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.044793][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.052394][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.059809][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.067452][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.075040][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.082620][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.090115][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.097527][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.104965][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.112844][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.120493][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.128083][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.135771][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.143572][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.151243][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.159043][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.170141][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.177618][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.185076][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.192717][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.200186][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.207587][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.215029][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x6
[  515.222511][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x3
[  515.230250][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.238143][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.245929][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.253529][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.263076][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.271396][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.278848][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.286411][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.293871][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.301348][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.308819][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.316304][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.331133][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.338780][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.346711][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.347655][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  515.361251][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.369199][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.376806][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.384223][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.391693][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.399069][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.406507][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.413936][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.421351][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.428790][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.436316][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.443831][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.451320][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.458765][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.466209][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.473660][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.481132][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.488573][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.496025][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.503745][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.511219][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.518633][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.526154][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.531782][    T9] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  515.533615][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.544995][    T9] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  515.552151][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.565923][    T9] usb 7-1: config 1 interface 0 has no altsetting 0
[  515.573084][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.581225][    T9] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  515.586838][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.595938][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.604225][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.611496][    T9] usb 7-1: Product: ఊ
[  515.619852][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.623017][    T9] usb 7-1: Manufacturer: ﳿ
[  515.630372][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.634984][    T9] usb 7-1: SerialNumber: Њ
[  515.642317][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x7
[  515.654135][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.661665][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.669110][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.676588][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.684079][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.691544][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.698969][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.706429][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.713898][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.722095][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.729540][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.736980][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.744429][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.751882][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.759308][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.766765][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.774255][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.781713][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.789146][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.796584][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.804046][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.811497][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.818929][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.826383][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.833833][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.841290][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.848727][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.856188][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.863660][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.871108][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.878535][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.885978][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.893427][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.900980][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.908409][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.915857][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.937985][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.945444][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.953032][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.960579][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.968116][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.975632][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.983115][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  515.986666][   T36] audit: type=1400 audit(2000000093.458:1457): avc:  denied  { getattr } for  pid=23202 comm="syz.4.9196" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  515.990582][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.020480][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.027936][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.035420][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.042231][T23207] __nla_validate_parse: 71 callbacks suppressed
[  516.042266][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9198'.
[  516.043165][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.051361][T23170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.058169][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.067027][T23170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.074317][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.097329][T23170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.098548][T23209] /dev/rnullb0: Can't lookup blockdev
[  516.106763][T23170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.114235][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.131649][    T9] usbhid 7-1:1.0: can't add hid device: -71
[  516.137702][    T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  516.155784][    T9] usb 7-1: USB disconnect, device number 25
[  516.161476][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.169689][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.177176][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.184607][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.192046][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.196280][T23217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=23217 comm=syz.4.9203
[  516.199434][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.221035][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.228006][T23219] overlayfs: failed to clone upperpath
[  516.228439][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.245872][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.253383][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.259318][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9205'.
[  516.260846][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.277116][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.284576][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.292021][   T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0
[  516.302716][   T45] hid-generic 01FF:0004:0400.0039: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[  516.327678][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9207'.
[  516.335681][T23224] fido_id[23224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  516.429515][T23232] FAT-fs (rnullb0): bogus number of reserved sectors
[  516.436347][T23232] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  516.444184][T23232] rust_binder: Write failure EINVAL in pid:223
[  516.461609][T23236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  516.467801][T23236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[  516.659324][T23240] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  516.669192][T23240] rust_binder: Error while translating object.
[  516.675672][T23240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  516.681939][T23240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479
[  516.700737][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9215'.
[  516.730224][   T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  516.882279][   T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  516.891176][   T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  516.901484][   T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  516.912260][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9218'.
[  516.912407][   T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  516.930323][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.938325][   T45] usb 4-1: Product: syz
[  516.942779][   T45] usb 4-1: Manufacturer: syz
[  516.947388][   T45] usb 4-1: SerialNumber: syz
[  516.962862][T23258] 9pnet_fd: Insufficient options for proto=fd
[  517.360504][   T45] usb 4-1: 0:2 : does not exist
[  517.367747][   T45] usb 4-1: USB disconnect, device number 33
[  517.407485][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9226'.
[  517.614201][   T36] audit: type=1326 audit(2000000095.091:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.637795][   T36] audit: type=1326 audit(2000000095.091:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.661385][   T36] audit: type=1326 audit(2000000095.091:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.684900][   T36] audit: type=1326 audit(2000000095.091:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.685308][T23297] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9235'.
[  517.708651][   T36] audit: type=1326 audit(2000000095.091:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.740913][   T36] audit: type=1326 audit(2000000095.091:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.764578][   T36] audit: type=1326 audit(2000000095.091:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.788003][   T36] audit: type=1326 audit(2000000095.091:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  517.811479][   T36] audit: type=1326 audit(2000000095.091:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000
[  518.007437][T23316] __vm_enough_memory: pid: 23316, comm: syz.4.9240, bytes: 21199844118528 not enough memory for the allocation
[  518.149986][  T408] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  518.170120][T23320] netlink: 'syz.6.9243': attribute type 16 has an invalid length.
[  518.299957][  T408] usb 4-1: Using ep0 maxpacket: 32
[  518.306157][  T408] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  518.314432][  T408] usb 4-1: config 0 has no interface number 0
[  518.320603][  T408] usb 4-1: config 0 interface 67 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A
[  518.332191][  T408] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 511
[  518.343659][  T408] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  518.352780][  T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.360825][  T408] usb 4-1: Product: syz
[  518.364999][  T408] usb 4-1: Manufacturer: syz
[  518.369598][  T408] usb 4-1: SerialNumber: syz
[  518.374786][  T408] usb 4-1: config 0 descriptor??
[  518.380069][T23312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  518.387686][  T408] smsc95xx v2.0.0
[  518.391394][  T408] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  518.401494][  T408] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  518.777546][T23340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=23340 comm=syz.4.9250
[  518.802972][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9251'.
[  519.059662][T23360] netlink: 'syz.6.9259': attribute type 4 has an invalid length.
[  519.072476][T23360] netlink: 'syz.6.9259': attribute type 4 has an invalid length.
[  519.245343][T23365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=23365 comm=syz.2.9261
[  519.294523][  T408] usb 4-1: USB disconnect, device number 34
[  519.594602][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9277'.
[  519.611119][T23408] overlay: Unknown parameter 'fsmagic'
[  519.629983][  T408] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  519.650676][T23416] /dev/rnullb0: Can't lookup blockdev
[  519.768150][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9291'.
[  519.780982][  T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.802362][  T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.812434][  T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  519.825599][  T408] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  519.834822][  T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.843713][  T408] usb 4-1: config 0 descriptor??
[  519.925467][T23455] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  519.925764][T23455] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  519.932423][T23455] rust_binder: Error while translating object.
[  519.943215][T23455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  519.949406][T23455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510
[  519.960759][T23455] netlink: 'syz.6.9297': attribute type 4 has an invalid length.
[  519.980597][T23455] netlink: 'syz.6.9297': attribute type 4 has an invalid length.
[  520.256951][T23486] tipc: Started in network mode
[  520.268424][T23486] tipc: Node identity ac1414aa, cluster identity 4711
[  520.275887][T23486] tipc: Enabled bearer <udp:s>, priority 10
[  520.483492][T23383] fuse: Bad value for 'group_id'
[  520.488621][T23383] fuse: Bad value for 'group_id'
[  520.519986][   T45] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  520.551207][  T408] usbhid 4-1:0.0: can't add hid device: -71
[  520.557220][  T408] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  520.566191][  T408] usb 4-1: USB disconnect, device number 35
[  520.671326][   T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.681662][   T45] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2752, setting to 64
[  520.692919][   T45] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  520.707795][   T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  520.717027][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.726791][   T45] usb 7-1: Product: syz
[  520.731372][   T45] usb 7-1: Manufacturer: syz
[  520.739952][   T45] usb 7-1: SerialNumber: syz
[  521.114566][T23564] __nla_validate_parse: 5 callbacks suppressed
[  521.114587][T23564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9333'.
[  521.167436][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9336'.
[  521.389958][  T408] tipc: Node number set to 2886997162
[  521.560403][   T45] cdc_ncm 7-1:1.0: bind() failure
[  521.566373][   T45] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  521.574220][   T45] cdc_ncm 7-1:1.1: bind() failure
[  521.582445][   T45] usb 7-1: USB disconnect, device number 27
[  521.989996][  T408] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  522.141771][  T408] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  522.153010][  T408] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  522.166075][  T408] usb 4-1: config 1 interface 0 has no altsetting 0
[  522.174280][  T408] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  522.181323][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9351'.
[  522.183462][  T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.201076][  T408] usb 4-1: Product: ఊ
[  522.205262][  T408] usb 4-1: Manufacturer: ﳿ
[  522.209882][  T408] usb 4-1: SerialNumber: Њ
[  522.304569][T23616] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  522.388226][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9359'.
[  522.413700][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9360'.
[  522.542274][T23630] 9pnet_fd: Insufficient options for proto=fd
[  522.558335][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9364'.
[  522.627258][T23597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.635981][T23597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.646144][  T408] usbhid 4-1:1.0: can't add hid device: -71
[  522.652252][  T408] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  522.653327][T23636] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9366'.
[  522.661925][  T408] usb 4-1: USB disconnect, device number 36
[  522.674923][ T2704] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  522.829964][ T2704] usb 7-1: Using ep0 maxpacket: 16
[  522.836093][ T2704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.847045][ T2704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.857348][ T2704] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  522.866410][ T2704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.874878][ T2704] usb 7-1: config 0 descriptor??
[  523.179771][   T36] kauditd_printk_skb: 69 callbacks suppressed
[  523.179792][   T36] audit: type=1400 audit(2000000100.651:1536): avc:  denied  { setattr } for  pid=23644 comm="syz.3.9369" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  523.281836][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0
[  523.288928][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0
[  523.296022][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0
[  523.303096][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0
[  523.310153][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0
[  523.317415][ T2704] appleir 0003:05AC:8241.003A: No inputs registered, leaving
[  523.325882][ T2704] appleir 0003:05AC:8241.003A: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0
[  523.541277][ T2704] usb 7-1: USB disconnect, device number 28
[  523.616941][T23676] overlayfs: failed to clone upperpath
[  523.959969][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  524.121103][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.131269][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  524.140387][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  524.155524][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  524.164727][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.172758][    T9] usb 4-1: Product: syz
[  524.176933][    T9] usb 4-1: Manufacturer: syz
[  524.181598][    T9] usb 4-1: SerialNumber: syz
[  524.193466][    T9] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  524.201008][    T9] cdc_ncm 4-1:1.0: bind() failure
[  524.280583][   T36] audit: type=1326 audit(2000000101.761:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23703 comm="syz.6.9393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89ef8e929 code=0x0
[  524.408233][T23708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9394'.
[  524.445803][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9397'.
[  524.552628][  T408] usb 4-1: USB disconnect, device number 37
[  524.913711][T23745] fuseblk: Unknown parameter 'r��ootmo�de'
[  524.999319][T23757] net_ratelimit: 22 callbacks suppressed
[  524.999331][T23757] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  525.164132][T23766] syz.6.9417: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  525.183544][T23766] CPU: 0 UID: 0 PID: 23766 Comm: syz.6.9417 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  525.183574][T23766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  525.183587][T23766] Call Trace:
[  525.183593][T23766]  <TASK>
[  525.183600][T23766]  __dump_stack+0x21/0x30
[  525.183628][T23766]  dump_stack_lvl+0x10c/0x190
[  525.183647][T23766]  ? __cfi_dump_stack_lvl+0x10/0x10
[  525.183668][T23766]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  525.183694][T23766]  dump_stack+0x19/0x20
[  525.183713][T23766]  warn_alloc+0x1bc/0x2a0
[  525.183732][T23766]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  525.183752][T23766]  ? __cfi_warn_alloc+0x10/0x10
[  525.183770][T23766]  ? __get_vm_area_node+0x1dc/0x3a0
[  525.183790][T23766]  ? __vcalloc_noprof+0x3a/0x50
[  525.183813][T23766]  __vmalloc_node_range_noprof+0x68e/0x1420
[  525.183832][T23766]  ? __se_sys_ioctl+0x135/0x1b0
[  525.183855][T23766]  ? __x64_sys_ioctl+0x7f/0xa0
[  525.183877][T23766]  ? x64_sys_call+0x1878/0x2ee0
[  525.183900][T23766]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  525.183920][T23766]  ? __vcalloc_noprof+0x3a/0x50
[  525.183940][T23766]  __vmalloc_noprof+0xfe/0x1d0
[  525.183958][T23766]  ? __vcalloc_noprof+0x3a/0x50
[  525.183979][T23766]  ? __cfi___vmalloc_noprof+0x10/0x10
[  525.183998][T23766]  ? mutex_lock+0x92/0x1c0
[  525.184017][T23766]  ? __cfi_mutex_lock+0x10/0x10
[  525.184036][T23766]  __vcalloc_noprof+0x3a/0x50
[  525.184057][T23766]  kvm_set_memslot+0x4c6/0x13f0
[  525.184080][T23766]  ? __kasan_kmalloc+0x96/0xb0
[  525.184106][T23766]  __kvm_set_memory_region+0x87c/0xb80
[  525.184129][T23766]  kvm_set_memory_region+0x2f/0x50
[  525.184151][T23766]  kvm_vm_ioctl+0x9ad/0xb80
[  525.184173][T23766]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  525.184202][T23766]  ? ioctl_has_perm+0x1aa/0x4d0
[  525.184227][T23766]  ? __asan_memcpy+0x5a/0x80
[  525.184247][T23766]  ? ioctl_has_perm+0x3e0/0x4d0
[  525.184274][T23766]  ? __cfi_futex_wait+0x10/0x10
[  525.184293][T23766]  ? selinux_file_ioctl+0x6e0/0x1360
[  525.184318][T23766]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  525.184343][T23766]  ? kfree+0x156/0x400
[  525.184363][T23766]  ? do_futex+0x309/0x500
[  525.184387][T23766]  ? __cfi_do_futex+0x10/0x10
[  525.184410][T23766]  ? anon_inode_getfile+0xfb/0x190
[  525.184429][T23766]  ? __fget_files+0x2c5/0x340
[  525.184453][T23766]  ? bpf_lsm_file_ioctl+0xd/0x20
[  525.184471][T23766]  ? security_file_ioctl+0x34/0xd0
[  525.184495][T23766]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  525.184513][T23766]  __se_sys_ioctl+0x135/0x1b0
[  525.184536][T23766]  __x64_sys_ioctl+0x7f/0xa0
[  525.184558][T23766]  x64_sys_call+0x1878/0x2ee0
[  525.184579][T23766]  do_syscall_64+0x58/0xf0
[  525.184601][T23766]  ? clear_bhb_loop+0x50/0xa0
[  525.184620][T23766]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  525.184637][T23766] RIP: 0033:0x7fb89ef8e929
[  525.184653][T23766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  525.184670][T23766] RSP: 002b:00007fb89fe44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  525.184690][T23766] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8e929
[  525.184704][T23766] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005
[  525.184717][T23766] RBP: 00007fb89f010b39 R08: 0000000000000000 R09: 0000000000000000
[  525.184730][T23766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.184742][T23766] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418
[  525.184758][T23766]  </TASK>
[  525.184976][T23766] Mem-Info:
[  525.225558][T23773] binfmt_misc: register: failed to install interpreter file ./file0
[  525.231688][T23766] active_anon:6698 inactive_anon:60 isolated_anon:0
[  525.231688][T23766]  active_file:10118 inactive_file:18805 isolated_file:0
[  525.231688][T23766]  unevictable:16313 dirty:183 writeback:0
[  525.231688][T23766]  slab_reclaimable:7160 slab_unreclaimable:72435
[  525.231688][T23766]  mapped:30104 shmem:179 pagetables:1168
[  525.231688][T23766]  sec_pagetables:0 bounce:0
[  525.231688][T23766]  kernel_misc_reclaimable:0
[  525.231688][T23766]  free:1480555 free_pcp:2314 free_cma:0
[  525.584992][T23766] Node 0 active_anon:26692kB inactive_anon:240kB active_file:40472kB inactive_file:75296kB unevictable:65252kB isolated(anon):0kB isolated(file):0kB mapped:120476kB dirty:736kB writeback:0kB shmem:716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5024kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no
[  525.618454][T23766] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5804kB free_cma:0kB
[  525.648725][T23766] lowmem_reserve[]: 0 3921 3921
[  525.654207][T23766] Normal free:2962916kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26668kB inactive_anon:240kB active_file:40472kB inactive_file:75296kB unevictable:65252kB writepending:736kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:1112kB free_cma:0kB
[  525.686036][T23766] lowmem_reserve[]: 0 0 0
[  525.690484][T23766] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  525.705981][T23766] Normal: 1081*4kB (UME) 4475*8kB (UME) 2589*16kB (UME) 1188*32kB (UME) 789*64kB (UME) 244*128kB (UME) 140*256kB (UME) 117*512kB (UME) 53*1024kB (UME) 30*2048kB (UM) 623*4096kB (UME) = 2964556kB
[  525.708375][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9426'.
[  525.725596][T23766] 45517 total pagecache pages
[  525.739374][T23766] 87 pages in swap cache
[  525.748644][T23766] Free swap  = 123936kB
[  525.758232][T23766] Total swap = 124996kB
[  525.774760][T23766] 2097051 pages RAM
[  525.778596][T23766] 0 pages HighMem/MovableOnly
[  525.785333][T23766] 351517 pages reserved
[  525.789604][T23766] 0 pages cma reserved
[  525.789867][   T36] audit: type=1400 audit(2000000103.261:1538): avc:  denied  { unmount } for  pid=23796 comm="syz.2.9430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  525.795845][T23766] Memory allocations:
[  525.817646][T23766]          0 B        0 init/main.c:1370 func:do_initcalls
[  525.827438][   T36] audit: type=1400 audit(2000000103.291:1539): avc:  denied  { create } for  pid=23798 comm="syz.4.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  525.845370][T23766]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  525.855981][   T36] audit: type=1400 audit(2000000103.291:1540): avc:  denied  { write } for  pid=23798 comm="syz.4.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  525.858742][T23766]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  525.884342][T23804] 9pnet_fd: Insufficient options for proto=fd
[  525.886136][T23766]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  525.898582][T23766]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  525.906526][T23766]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  525.915206][T23766]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  525.923145][T23766]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  525.931113][T23766]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  525.939026][T23766]          0 B        0 init/initramfs.c:101 func:find_link
[  526.004870][T23821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568
[  526.009982][   T64] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  526.156368][T23826] __nla_validate_parse: 2 callbacks suppressed
[  526.156382][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9439'.
[  526.173611][   T64] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  526.184895][   T64] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  526.197818][   T64] usb 4-1: config 1 interface 0 has no altsetting 0
[  526.205679][   T64] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  526.214745][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.222894][   T64] usb 4-1: Product: ఊ
[  526.227142][   T64] usb 4-1: Manufacturer: ﳿ
[  526.231847][   T64] usb 4-1: SerialNumber: Њ
[  526.420683][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9446'.
[  526.439955][ T2704] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  526.466533][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9449'.
[  526.590408][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9457'.
[  526.590957][ T2704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.611093][ T2704] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  526.620179][ T2704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.632894][ T2704] usb 7-1: Product: syz
[  526.637098][ T2704] usb 7-1: Manufacturer: syz
[  526.643738][T23794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.653207][ T2704] usb 7-1: SerialNumber: syz
[  526.659416][T23876] overlay: Unknown parameter 'mounts'
[  526.659493][T23794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.672844][ T2704] usb 7-1: config 0 descriptor??
[  526.679878][ T2704] cdc_acm 7-1:0.0: skipping garbage
[  526.690723][   T64] usbhid 4-1:1.0: can't add hid device: -71
[  526.698752][   T64] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  526.709748][   T64] usb 4-1: USB disconnect, device number 38
[  526.718041][T23885] fuse: Bad value for 'group_id'
[  526.723579][T23885] fuse: Bad value for 'group_id'
[  526.745966][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9468'.
[  526.771645][T23898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9470'.
[  526.781510][   T36] audit: type=1326 audit(2000000104.261:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.2.9470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x0
[  526.827298][T23904] overlayfs: failed to clone upperpath
[  526.884695][T23912] overlayfs: failed to clone upperpath
[  526.902377][T23834] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer.
[  526.946450][ T2704] usb 7-1: USB disconnect, device number 29
[  527.262274][T23914] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  527.262742][T23914] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  527.300792][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9478'.
[  527.327534][T23920] rust_binder: Error in use_page_slow: ESRCH
[  527.327555][T23920] rust_binder: use_range failure ESRCH
[  527.333599][T23920] rust_binder: Failed to allocate buffer. len:144, is_oneway:true
[  527.339061][T23920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  527.346907][T23920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:285
[  527.384126][T23928] kvm_intel: kvm [23927]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  527.463435][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9490'.
[  527.484294][T23950] rust_binder: Write failure EINVAL in pid:294
[  527.558579][T23967] overlayfs: failed to clone upperpath
[  527.579544][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9502'.
[  527.639350][T23985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594
[  527.705617][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9514'.
[  527.909968][ T1809] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  528.071003][ T1809] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  528.082896][ T1809] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  528.119821][ T1809] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  528.137540][ T1809] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  528.146840][ T1809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.157158][T23991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  528.370513][T23991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.392078][T23991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.419341][ T1809] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  528.447739][ T1809] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input49
[  528.482382][ T1809] usb 4-1: USB disconnect, device number 39
[  528.482474][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  528.810079][T24070] 8021q: VLANs not supported on ip_vti0
[  529.335819][T24113] fuse: Unknown parameter '\�S0x0000000000000004'
[  529.344710][T24113] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  529.345226][T24113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  529.351853][T24113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:631
[  529.360980][T24117] binder: Bad value for 'stats'
[  529.373532][T24119] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  529.491258][T24119] rust_binder: Error in use_page_slow: ESRCH
[  529.509206][T24119] rust_binder: use_range failure ESRCH
[  529.517257][T24119] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  529.529119][T24119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  529.537415][T24119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:633
[  529.629058][T24129] rust_binder: Got transaction with invalid offset.
[  529.648354][T24129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  529.658328][T24129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320
[  529.781313][T24142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324
[  529.870949][T24152] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  530.037623][T24179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336
[  530.090461][T24182] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  530.099654][T24182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  530.107952][T24182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:338
[  530.139983][  T408] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  530.157072][T24192] input: syz1 as /devices/virtual/input/input51
[  530.301982][  T408] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  530.313402][  T408] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  530.326347][  T408] usb 7-1: config 1 interface 0 has no altsetting 0
[  530.334719][  T408] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  530.343842][  T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.351844][  T408] usb 7-1: Product: ఊ
[  530.355987][  T408] usb 7-1: Manufacturer: ﳿ
[  530.360625][  T408] usb 7-1: SerialNumber: Њ
[  530.608705][   T36] audit: type=1326 audit(2000000108.081:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24206 comm="syz.2.9592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd15f8e929 code=0x0
[  530.771205][  T408] usbhid 7-1:1.0: can't add hid device: -71
[  530.777219][  T408] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  530.786067][  T408] usb 7-1: USB disconnect, device number 30
[  530.988798][T24238] lo: entered promiscuous mode
[  530.994004][T24237] lo: left promiscuous mode
[  531.081548][T24252] rust_binder: Write failure EFAULT in pid:362
[  531.206045][T24258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32850 sclass=netlink_route_socket pid=24258 comm=syz.4.9612
[  531.745101][  T305] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  531.899953][  T305] usb 7-1: Using ep0 maxpacket: 8
[  531.906561][  T305] usb 7-1: unable to get BOS descriptor or descriptor too short
[  531.916045][  T305] usb 7-1: config 241 has an invalid interface number: 149 but max is 0
[  531.933241][  T305] usb 7-1: config 241 has no interface number 0
[  531.946396][  T305] usb 7-1: config 241 interface 149 has no altsetting 0
[  531.963011][  T305] usb 7-1: string descriptor 0 read error: -22
[  531.971478][  T305] usb 7-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=79.dc
[  531.990160][  T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.273646][T24302] __nla_validate_parse: 11 callbacks suppressed
[  532.273668][T24302] netlink: 580 bytes leftover after parsing attributes in process `syz.4.9630'.
[  532.311757][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9630'.
[  532.346053][  T305] asix 7-1:241.149 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  532.367638][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9633'.
[  532.379991][  T305] asix 7-1:241.149: probe with driver asix failed with error -71
[  532.398570][  T305] usb 7-1: USB disconnect, device number 31
[  532.576364][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9651'.
[  532.590780][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9649'.
[  532.762725][   T36] audit: type=1326 audit(2000000110.241:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24353 comm="syz.3.9656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2340b8e929 code=0x0
[  532.799784][T24352] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.806942][T24352] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.817307][T24352] bridge_slave_0: entered allmulticast mode
[  532.823860][T24352] bridge_slave_0: entered promiscuous mode
[  532.830636][T24352] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.837672][T24352] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.845614][T24352] bridge_slave_1: entered allmulticast mode
[  532.852105][T24352] bridge_slave_1: entered promiscuous mode
[  532.946581][T24352] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.953676][T24352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.960344][T24366] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  532.960972][T24352] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.961624][T24366] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  532.967408][T24352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.988922][T24366] rust_binder: Write failure EINVAL in pid:658
[  533.013091][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.026730][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.035923][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.042988][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.051979][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.059035][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.086939][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9661'.
[  533.097260][T24352] veth0_vlan: entered promiscuous mode
[  533.108900][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9662'.
[  533.121627][T24352] veth1_macvtap: entered promiscuous mode
[  533.146837][   T36] audit: type=1400 audit(2000000110.621:1544): avc:  denied  { mounton } for  pid=24352 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  533.469972][  T305] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  533.631541][  T305] usb 7-1: unable to get BOS descriptor or descriptor too short
[  533.639813][  T305] usb 7-1: not running at top speed; connect to a high speed hub
[  533.649583][  T305] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.660476][  T305] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  533.669474][  T305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  533.681562][  T305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  533.694406][  T305] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  533.703805][  T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.713907][  T305] usb 7-1: Product: syz
[  533.721409][  T305] usb 7-1: Manufacturer: syz
[  533.728546][  T305] usb 7-1: SerialNumber: syz
[  533.735863][T24386] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  533.946789][T24386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  533.946826][T24386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673
[  534.190629][T24394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9671'.
[  534.287062][T24402] tmpfs: Bad value for 'nr_blocks'
[  534.472813][T24414] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.480425][T24414] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.487618][T24414] bridge_slave_0: entered allmulticast mode
[  534.495383][T24414] bridge_slave_0: entered promiscuous mode
[  534.502537][T24414] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.511202][T24414] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.518317][T24414] bridge_slave_1: entered allmulticast mode
[  534.524785][T24414] bridge_slave_1: entered promiscuous mode
[  534.543290][  T305] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  534.554545][  T305] cdc_ncm 7-1:1.0: bind() failure
[  534.562853][T19307] bridge_slave_1: left allmulticast mode
[  534.571678][  T305] usb 7-1: USB disconnect, device number 32
[  534.580044][T19307] bridge_slave_1: left promiscuous mode
[  534.585929][T19307] @: port 2(bridge_slave_1) entered disabled state
[  534.595998][T19307] bridge_slave_0: left allmulticast mode
[  534.602218][T19307] bridge_slave_0: left promiscuous mode
[  534.616870][T19307] @: port 1(bridge_slave_0) entered disabled state
[  534.689408][T24431] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  534.699229][   T36] audit: type=1400 audit(2000000112.171:1545): avc:  denied  { relabelto } for  pid=24430 comm="syz.6.9686" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  534.727905][   T36] audit: type=1400 audit(2000000112.171:1546): avc:  denied  { associate } for  pid=24430 comm="syz.6.9686" name="262" dev="tmpfs" ino=1408 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  534.784553][T19307] veth1_macvtap: left promiscuous mode
[  534.790177][T19307] veth0_vlan: left promiscuous mode
[  534.803046][   T36] audit: type=1400 audit(2000000112.281:1547): avc:  denied  { write } for  pid=20491 comm="syz-executor" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  534.853120][   T36] audit: type=1400 audit(2000000112.281:1548): avc:  denied  { remove_name } for  pid=20491 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  534.881223][   T36] audit: type=1400 audit(2000000112.281:1549): avc:  denied  { rmdir } for  pid=20491 comm="syz-executor" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  534.946865][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.953935][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  534.964005][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.971143][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.995666][T24414] veth0_vlan: entered promiscuous mode
[  535.006397][T24414] veth1_macvtap: entered promiscuous mode
[  535.793915][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9696'.
[  535.956702][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9705'.
[  536.131498][T24508] input: syz0 as /devices/virtual/input/input52
[  536.209439][   T36] audit: type=1400 audit(2000000113.681:1550): avc:  denied  { setattr } for  pid=21762 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  537.150996][   T36] audit: type=1400 audit(2000000114.631:1551): avc:  denied  { unmount } for  pid=24414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  537.235302][T24546] overlayfs: conflicting options: nfs_export=on,index=off
[  537.267039][T24546] fuseblk: Bad value for 'source'
[  537.570024][ T1809] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  537.751359][ T1809] usb 3-1: unable to get BOS descriptor or descriptor too short
[  537.759413][ T1809] usb 3-1: not running at top speed; connect to a high speed hub
[  537.768237][ T1809] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  537.779446][ T1809] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  537.792629][ T1809] usb 3-1: config 1 interface 0 has no altsetting 0
[  537.800665][ T1809] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  537.809856][ T1809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.818136][ T1809] usb 3-1: Product: syz
[  537.822495][ T1809] usb 3-1: Manufacturer: syz
[  537.827100][ T1809] usb 3-1: SerialNumber: syz
[  537.832919][T24552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  538.046140][ T1809] usbhid 3-1:1.0: can't add hid device: -71
[  538.052200][ T1809] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  538.071389][ T1809] usb 3-1: USB disconnect, device number 71
[  538.116408][T24557] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  538.589506][T24573] __nla_validate_parse: 2 callbacks suppressed
[  538.589529][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9742'.
[  538.744859][T24587] overlayfs: failed to clone upperpath
[  538.901539][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9754'.
[  539.044375][T24611] KVM: debugfs: duplicate directory 24611-7
[  539.289981][   T45] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  539.449974][   T45] usb 7-1: Using ep0 maxpacket: 32
[  539.456533][   T45] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  539.465324][   T45] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  539.474207][   T45] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  539.483501][   T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  539.493401][   T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  539.503367][   T45] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  539.516655][   T45] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  539.525935][   T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.535011][   T45] usb 7-1: config 0 descriptor??
[  539.751305][T24611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.761135][T24611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.978715][   T45] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  539.990997][   T45] usb 7-1: USB disconnect, device number 33
[  539.997698][   T45] usblp0: removed
[  540.969956][ T1809] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  541.121063][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.132145][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.142292][ T1809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  541.155404][ T1809] usb 7-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  541.164913][ T1809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.180226][ T1809] usb 7-1: config 0 descriptor??
[  541.595059][ T1809] itetech 0003:048D:8595.003B: item fetching failed at offset 5/7
[  541.603220][ T1809] itetech 0003:048D:8595.003B: probe with driver itetech failed with error -22
[  541.732470][   T36] audit: type=1400 audit(2000000119.211:1552): avc:  denied  { mounton } for  pid=24674 comm="syz.7.9785" path="/proc/29/cgroup" dev="proc" ino=118628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  541.794005][ T2704] usb 7-1: USB disconnect, device number 34
[  542.013921][T24685] 9pnet_fd: Insufficient options for proto=fd
[  542.442909][T24704] binder: Bad value for 'stats'
[  542.558808][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9797'.
[  542.691094][T24722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  543.069578][T24760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  543.076334][T24760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:753
[  543.102003][T24763] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa
[  543.133799][T24767] exFAT-fs (rnullb0): invalid boot record signature
[  543.140564][T24767] exFAT-fs (rnullb0): failed to read boot sector
[  543.147004][T24767] exFAT-fs (rnullb0): failed to recognize exfat type
[  543.596622][T24781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9824'.
[  543.995020][T24784] binder: Binderfs stats mode cannot be changed during a remount
[  544.454615][T24796] binder: Bad value for 'max'
[  544.599222][T24818] overlayfs: failed to clone upperpath
[  544.634175][   T36] audit: type=1326 audit(2000000122.111:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24821 comm="syz.2.9839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce178e929 code=0x0
[  544.993313][T24830] cgroup: release_agent respecified
[  545.093004][T24832] rust_binder: Error in use_page_slow: ESRCH
[  545.093032][T24832] rust_binder: use_range failure ESRCH
[  545.099131][T24832] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  545.104828][T24832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  545.112947][T24832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:780
[  545.174078][T24840] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock
[  545.648790][   T36] audit: type=1400 audit(2000000123.121:1554): avc:  denied  { listen } for  pid=24857 comm="syz.2.9855" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  546.174270][T24892] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  546.174376][T24892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  546.181199][T24892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:798
[  546.337561][   T36] audit: type=1400 audit(2000000123.811:1555): avc:  denied  { create } for  pid=24894 comm="syz.2.9870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[  547.258657][T24929] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  547.260021][T24929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  547.273105][T24929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:815
[  547.561097][ T2704] usb 7-1: new low-speed USB device number 35 using dummy_hcd
[  547.739948][ T2704] usb 7-1: Invalid ep0 maxpacket: 16
[  547.750933][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9892'.
[  547.879982][ T2704] usb 7-1: new low-speed USB device number 36 using dummy_hcd
[  548.029953][ T2704] usb 7-1: Invalid ep0 maxpacket: 16
[  548.035609][ T2704] usb usb7-port1: attempt power cycle
[  548.389965][ T2704] usb 7-1: new low-speed USB device number 37 using dummy_hcd
[  548.410344][ T2704] usb 7-1: Invalid ep0 maxpacket: 16
[  548.539998][ T2704] usb 7-1: new low-speed USB device number 38 using dummy_hcd
[  548.560335][ T2704] usb 7-1: Invalid ep0 maxpacket: 16
[  548.565856][ T2704] usb usb7-port1: unable to enumerate USB device
[  551.394810][   T36] audit: type=1400 audit(2000000128.871:1556): avc:  denied  { read write } for  pid=24994 comm="syz.6.9906" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  551.416175][   T36] audit: type=1400 audit(2000000128.871:1557): avc:  denied  { open } for  pid=24994 comm="syz.6.9906" path="/318/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  551.453495][T24997] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.460688][T24997] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.467740][T24997] bridge_slave_0: entered allmulticast mode
[  551.474231][T24997] bridge_slave_0: entered promiscuous mode
[  551.480574][T24997] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.487625][T24997] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.494709][T24997] bridge_slave_1: entered allmulticast mode
[  551.501091][T24997] bridge_slave_1: entered promiscuous mode
[  551.511913][   T12] bridge_slave_1: left allmulticast mode
[  551.517671][   T12] bridge_slave_1: left promiscuous mode
[  551.523357][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.530819][   T12] bridge_slave_0: left allmulticast mode
[  551.536442][   T12] bridge_slave_0: left promiscuous mode
[  551.542140][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.649790][T24997] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.656861][T24997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.664161][T24997] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.671205][T24997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.680975][   T12] veth1_macvtap: left promiscuous mode
[  551.686459][   T12] veth0_vlan: left promiscuous mode
[  551.730090][T19307] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.737411][T19307] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.746674][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.753762][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.762892][T19307] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.769972][T19307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.797900][T24997] veth0_vlan: entered promiscuous mode
[  551.808681][T24997] veth1_macvtap: entered promiscuous mode
[  552.008385][T25016] tmpfs: Unknown parameter 'giv'
[  552.042793][T25018] rust_binder: Error while translating object.
[  552.042841][T25018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  552.055949][T25018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60
[  552.259151][T25036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9921'.
[  552.580018][  T408] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[  552.716214][   T36] audit: type=1326 audit(2000000130.191:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.731417][  T408] usb 7-1: unable to get BOS descriptor or descriptor too short
[  552.747954][   T36] audit: type=1326 audit(2000000130.191:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.759564][  T408] usb 7-1: not running at top speed; connect to a high speed hub
[  552.777718][   T36] audit: type=1326 audit(2000000130.191:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.785819][  T408] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  552.828982][   T36] audit: type=1326 audit(2000000130.191:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.853870][   T36] audit: type=1326 audit(2000000130.191:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.878147][   T36] audit: type=1326 audit(2000000130.191:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.878784][  T408] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  552.902070][   T36] audit: type=1326 audit(2000000130.191:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.936747][   T36] audit: type=1326 audit(2000000130.191:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000
[  552.944139][  T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.000228][  T408] usb 7-1: Product: syz
[  553.006693][  T408] usb 7-1: Manufacturer: syz
[  553.028608][  T408] usb 7-1: SerialNumber: syz
[  553.079300][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9956'.
[  553.134773][T25125] can: request_module (can-proto-3) failed.
[  553.248024][  T408] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  553.261711][T22312] udevd[22312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  553.264858][  T408] usb 7-1: USB disconnect, device number 39
[  553.320777][T25137] FAULT_INJECTION: forcing a failure.
[  553.320777][T25137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.335831][T25137] CPU: 0 UID: 0 PID: 25137 Comm: syz.7.9963 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  553.335863][T25137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.335874][T25137] Call Trace:
[  553.335880][T25137]  <TASK>
[  553.335888][T25137]  __dump_stack+0x21/0x30
[  553.335912][T25137]  dump_stack_lvl+0x10c/0x190
[  553.335930][T25137]  ? __cfi_dump_stack_lvl+0x10/0x10
[  553.335948][T25137]  dump_stack+0x19/0x20
[  553.335965][T25137]  should_fail_ex+0x3d9/0x530
[  553.335985][T25137]  should_fail+0xf/0x20
[  553.336002][T25137]  should_fail_usercopy+0x1e/0x30
[  553.336020][T25137]  _copy_from_user+0x22/0xb0
[  553.336042][T25137]  get_user_ifreq+0x71/0x180
[  553.336063][T25137]  sock_ioctl+0x6fb/0x7b0
[  553.336083][T25137]  ? __cfi_sock_ioctl+0x10/0x10
[  553.336105][T25137]  ? bpf_lsm_file_ioctl+0xd/0x20
[  553.336125][T25137]  ? security_file_ioctl+0x34/0xd0
[  553.336160][T25137]  ? __cfi_sock_ioctl+0x10/0x10
[  553.336180][T25137]  __se_sys_ioctl+0x135/0x1b0
[  553.336204][T25137]  __x64_sys_ioctl+0x7f/0xa0
[  553.336226][T25137]  x64_sys_call+0x1878/0x2ee0
[  553.336247][T25137]  do_syscall_64+0x58/0xf0
[  553.336271][T25137]  ? clear_bhb_loop+0x50/0xa0
[  553.336289][T25137]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  553.336308][T25137] RIP: 0033:0x7fd51f38e929
[  553.336324][T25137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.336339][T25137] RSP: 002b:00007fd52022b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.336360][T25137] RAX: ffffffffffffffda RBX: 00007fd51f5b5fa0 RCX: 00007fd51f38e929
[  553.336374][T25137] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005
[  553.336385][T25137] RBP: 00007fd52022b090 R08: 0000000000000000 R09: 0000000000000000
[  553.336398][T25137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.336410][T25137] R13: 0000000000000000 R14: 00007fd51f5b5fa0 R15: 00007ffd43a5fd38
[  553.336425][T25137]  </TASK>
[  553.616653][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9974'.
[  553.638793][T25169] overlay: Unknown parameter 'func'
[  553.840174][T25181] overlayfs: failed to clone upperpath
[  553.889492][T25192] can: request_module (can-proto-3) failed.
[  553.906245][T25198] tmpfs: Unknown parameter 'giv'
[  553.969697][T25204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:861
[  554.087299][   T12] tipc: Subscription rejected, illegal request
[  554.114951][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10000'.
[  554.143020][T25227] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  554.144039][T25227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:876
[  554.239531][T25238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=25238 comm=syz.8.10005
[  554.389960][   T64] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  554.415655][T25249] binder: Bad value for 'stats'
[  554.417846][T25248] binder: Bad value for 'stats'
[  554.431742][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10010'.
[  554.528395][T25260] overlayfs: failed to clone lowerpath
[  554.541042][   T64] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.562322][   T64] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.573637][   T64] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  554.587318][   T64] usb 7-1: config 0 interface 0 has no altsetting 0
[  554.593987][   T64] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  554.603854][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.616393][   T64] usb 7-1: config 0 descriptor??
[  554.674413][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10020'.
[  554.829840][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10031'.
[  555.210265][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10040'.
[  555.230745][T25329] rust_binder: Error in use_page_slow: ESRCH
[  555.230767][T25329] rust_binder: use_range failure ESRCH
[  555.233214][   T64] usbhid 7-1:0.0: can't add hid device: -71
[  555.238967][T25329] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[  555.243211][   T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  555.248413][T25329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  555.258429][   T64] usb 7-1: USB disconnect, device number 40
[  555.266823][T25329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128
[  555.615730][T25352] 9pnet_fd: p9_fd_create_tcp (25352): problem connecting socket to 127.0.0.1
[  555.643438][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10050'.
[  555.730753][T25357] overlayfs: failed to resolve '/����P�': -2
[  555.791267][T25359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140
[  555.910706][T25372] Unsupported ieee802154 address type: 0
[  555.939174][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10059'.
[  555.961047][T25377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:886
[  556.060130][T25382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:888
[  556.281591][T25408] lo: entered promiscuous mode
[  556.295774][T25409] lo: left promiscuous mode
[  557.109438][T25489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[  557.200930][T25497] rust_binder: Error while translating object.
[  557.210222][T25497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  557.216412][T25497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[  557.230003][   T64] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  557.313410][T25507] /dev/rnullb0: Can't lookup blockdev
[  557.335047][T25511] rust_binder: Error in use_page_slow: ESRCH
[  557.335075][T25511] rust_binder: use_range failure ESRCH
[  557.341294][T25511] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  557.346774][T25511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  557.363391][T25511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113
[  557.383580][T25521] __nla_validate_parse: 7 callbacks suppressed
[  557.383600][T25521] netlink: 116 bytes leftover after parsing attributes in process `syz.2.10119'.
[  557.408123][   T64] usb 7-1: Using ep0 maxpacket: 16
[  557.415584][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.426521][   T64] usb 7-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  557.435788][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.444394][   T64] usb 7-1: config 0 descriptor??
[  557.489174][T25526] rust_binder: Write failure EINVAL in pid:160
[  557.489174][T25527] rust_binder: Write failure EINVAL in pid:160
[  557.495574][T25527] rust_binder: Read failure Err(EAGAIN) in pid:160
[  557.495866][T25526] rust_binder: Read failure Err(EAGAIN) in pid:160
[  557.562393][T25533] overlayfs: failed to clone upperpath
[  557.566125][T25535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  557.574970][T25535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163
[  557.653922][   T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0
[  557.681815][   T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0
[  557.688736][   T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0
[  557.696726][T25546] TCP: out of memory -- consider tuning tcp_mem
[  557.703359][   T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0
[  557.710634][   T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0
[  557.719184][   T64] wacom 0003:056A:010E.003C: hidraw0: USB HID v4.05 Device [HID 056a:010e] on usb-dummy_hcd.6-1/input0
[  557.870698][  T408] usb 7-1: USB disconnect, device number 41
[  558.099987][   T64] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  558.230005][   T64] usb 9-1: device descriptor read/64, error -71
[  558.387216][T25570] netlink: 'syz.6.10138': attribute type 4 has an invalid length.
[  558.395104][T25570] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10138'.
[  558.404665][T25570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:901
[  558.469971][   T64] usb 9-1: device descriptor read/64, error -71
[  558.526618][T25585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10143'.
[  558.530465][T25580] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  558.535996][T25580] rust_binder: Error in use_page_slow: ESRCH
[  558.542516][T25580] rust_binder: use_range failure ESRCH
[  558.548567][T25580] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  558.554133][T25580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  558.562198][T25580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:906
[  558.565836][T25589] overlayfs: failed to clone upperpath
[  558.593422][T25593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912
[  558.669358][T25601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  558.739991][   T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  558.879978][   T64] usb 9-1: device descriptor read/64, error -71
[  558.919979][  T408] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  559.073400][  T408] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  559.085032][  T408] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  559.098100][  T408] usb 7-1: config 1 interface 0 has no altsetting 0
[  559.099570][T25645] overlayfs: failed to clone lowerpath
[  559.106421][  T408] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40
[  559.119455][  T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.127504][  T408] usb 7-1: Product: ఊ
[  559.129986][   T64] usb 9-1: device descriptor read/64, error -71
[  559.131821][  T408] usb 7-1: Manufacturer: ﳿ
[  559.142609][  T408] usb 7-1: SerialNumber: Њ
[  559.250253][   T64] usb usb9-port1: attempt power cycle
[  559.261386][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10171'.
[  559.551911][  T408] usbhid 7-1:1.0: can't add hid device: -71
[  559.558448][  T408] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  559.568833][  T408] usb 7-1: USB disconnect, device number 42
[  559.590002][   T64] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  559.618552][   T64] usb 9-1: device descriptor read/8, error -71
[  559.750919][   T64] usb 9-1: device descriptor read/8, error -71
[  559.990039][   T64] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  560.010917][   T64] usb 9-1: device descriptor read/8, error -71
[  560.150854][   T64] usb 9-1: device descriptor read/8, error -71
[  560.270037][   T64] usb usb9-port1: unable to enumerate USB device
[  560.400005][   T10] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[  560.550987][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  560.561167][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  560.570061][   T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  560.584285][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40
[  560.593346][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.601405][   T10] usb 7-1: Product: syz
[  560.605561][   T10] usb 7-1: Manufacturer: syz
[  560.610225][   T10] usb 7-1: SerialNumber: syz
[  560.774738][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10192'.
[  560.797745][T25710] rust_binder: Error while translating object.
[  560.797793][T25710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  560.804029][T25710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:172
[  560.819023][   T10] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  560.835160][   T10] cdc_ncm 7-1:1.0: bind() failure
[  560.843447][   T10] usb 7-1: USB disconnect, device number 43
[  561.390923][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10201'.
[  562.024920][T25760] rust_binder: Error while translating object.
[  562.024950][T25760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  562.031396][T25760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186
[  562.327176][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10213'.
[  562.617487][T25781] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10220'.
[  562.627580][T25783] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10220'.
[  562.686745][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10222'.
[  562.802039][T25811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10230'.
[  562.825431][T25813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:975
[  562.872867][T25815] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  563.045214][T25820] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  563.170047][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10239'.
[  563.304928][T25852] overlayfs: failed to clone upperpath
[  563.336614][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10248'.
[  563.345726][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10249'.
[  563.395163][T25869] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  563.396520][T25867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  563.403020][T25867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1014
[  563.746834][T25877] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  563.765216][T25879] FAULT_INJECTION: forcing a failure.
[  563.765216][T25879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.784823][T25879] CPU: 0 UID: 0 PID: 25879 Comm: syz.6.10255 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  563.784846][T25879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  563.784853][T25879] Call Trace:
[  563.784858][T25879]  <TASK>
[  563.784864][T25879]  __dump_stack+0x21/0x30
[  563.784881][T25879]  dump_stack_lvl+0x10c/0x190
[  563.784893][T25879]  ? __cfi_dump_stack_lvl+0x10/0x10
[  563.784905][T25879]  ? is_bpf_text_address+0x17b/0x1a0
[  563.784920][T25879]  dump_stack+0x19/0x20
[  563.784931][T25879]  should_fail_ex+0x3d9/0x530
[  563.784944][T25879]  should_fail+0xf/0x20
[  563.784954][T25879]  should_fail_usercopy+0x1e/0x30
[  563.784966][T25879]  _copy_from_user+0x22/0xb0
[  563.784980][T25879]  do_ipv6_setsockopt+0x321/0x2ec0
[  563.784995][T25879]  ? __cfi_do_ipv6_setsockopt+0x10/0x10
[  563.785008][T25879]  ? kstrtoull+0x13b/0x1e0
[  563.785019][T25879]  ? avc_has_perm_noaudit+0x268/0x360
[  563.785031][T25879]  ? __asan_memcpy+0x5a/0x80
[  563.785044][T25879]  ? avc_has_perm_noaudit+0x286/0x360
[  563.785061][T25879]  ? avc_has_perm+0x144/0x220
[  563.785072][T25879]  ? __cfi_avc_has_perm+0x10/0x10
[  563.785083][T25879]  ? selinux_socket_setsockopt+0x2ea/0x390
[  563.785096][T25879]  ? __cfi_selinux_socket_setsockopt+0x10/0x10
[  563.785109][T25879]  ipv6_setsockopt+0x5d/0x170
[  563.785122][T25879]  tcp_setsockopt+0xf2/0x110
[  563.785133][T25879]  sock_common_setsockopt+0xb8/0xd0
[  563.785146][T25879]  ? __cfi_sock_common_setsockopt+0x10/0x10
[  563.785159][T25879]  do_sock_setsockopt+0x26a/0x400
[  563.785169][T25879]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  563.785180][T25879]  __x64_sys_setsockopt+0x1b8/0x250
[  563.785191][T25879]  x64_sys_call+0x2adc/0x2ee0
[  563.785203][T25879]  do_syscall_64+0x58/0xf0
[  563.785217][T25879]  ? clear_bhb_loop+0x50/0xa0
[  563.785229][T25879]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  563.785239][T25879] RIP: 0033:0x7fb89ef8e929
[  563.785249][T25879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.785259][T25879] RSP: 002b:00007fb89fe44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  563.785271][T25879] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8e929
[  563.785279][T25879] RDX: 000000000000002c RSI: 0000000000000029 RDI: 0000000000000003
[  563.785286][T25879] RBP: 00007fb89fe44090 R08: 0000000000000108 R09: 0000000000000000
[  563.785293][T25879] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  563.785302][T25879] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418
[  563.785310][T25879]  </TASK>
[  564.014553][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10260'.
[  564.066040][T25894] rust_binder: Write failure EFAULT in pid:1039
[  564.088524][T25900] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  564.162214][T25906] overlayfs: conflicting options: metacopy=off,verity=on
[  564.203539][T25908] rust_binder: Error while translating object.
[  564.203583][T25908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  564.209823][T25908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043
[  564.243445][T25914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139
[  564.253695][T25914] rust_binder: Read failure Err(EFAULT) in pid:139
[  564.342640][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10272'.
[  564.627199][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10278'.
[  564.636788][T25933] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  564.645096][T25933] rust_binder: Write failure EINVAL in pid:158
[  564.663080][T25935] fuse: Bad value for 'user_id'
[  564.674170][T25935] fuse: Bad value for 'user_id'
[  565.719994][   T45] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  565.872172][   T45] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  565.881301][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.889275][   T45] usb 7-1: Product: syz
[  565.893497][   T45] usb 7-1: Manufacturer: syz
[  565.898117][   T45] usb 7-1: SerialNumber: syz
[  565.929983][   T64] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  566.079975][   T64] usb 9-1: Using ep0 maxpacket: 16
[  566.086141][   T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.097210][   T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.106984][   T64] usb 9-1: config 0 interface 0 has no altsetting 0
[  566.113623][   T64] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  566.123501][   T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.132216][   T64] usb 9-1: config 0 descriptor??
[  566.538767][T25995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.547405][T25995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.564216][T25995] overlayfs: missing 'lowerdir'
[  566.683130][   T64] usbhid 9-1:0.0: can't add hid device: -71
[  566.691451][   T64] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  566.702909][   T64] usb 9-1: USB disconnect, device number 6
[  566.740515][T26014] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  567.333526][T26047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174
[  567.499497][   T36] kauditd_printk_skb: 1102 callbacks suppressed
[  567.499516][   T36] audit: type=1400 audit(2000000144.971:2668): avc:  denied  { append } for  pid=26067 comm="syz.8.10327" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  567.549661][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=26068 comm=syz.8.10327
[  567.562529][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=26068 comm=syz.8.10327
[  567.575593][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=26068 comm=syz.8.10327
[  567.588681][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=26068 comm=syz.8.10327
[  568.010036][T26113] __nla_validate_parse: 2 callbacks suppressed
[  568.010051][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10344'.
[  568.299759][T26148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10356'.
[  568.476515][   T10] usb 7-1: USB disconnect, device number 44
[  568.495148][T26155] rust_binder: Write failure EFAULT in pid:1066
[  568.614843][   T36] audit: type=1400 audit(2000000146.091:2669): avc:  denied  { unmount } for  pid=24997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  568.774716][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10366'.
[  568.931762][T26203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10379'.
[  569.556870][T19307] Bluetooth: hci0: Frame reassembly failed (-84)
[  569.558137][T26263] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  569.566485][T26263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230
[  569.625634][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10405'.
[  569.669984][  T408] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  569.819998][  T408] usb 7-1: Using ep0 maxpacket: 8
[  569.826422][  T408] usb 7-1: unable to get BOS descriptor or descriptor too short
[  569.834940][  T408] usb 7-1: config 10 has an invalid interface number: 81 but max is 0
[  569.843164][  T408] usb 7-1: config 10 has no interface number 0
[  569.849318][  T408] usb 7-1: config 10 interface 81 has no altsetting 0
[  569.857881][  T408] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  569.867070][  T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.875112][  T408] usb 7-1: Product: syz
[  569.879272][  T408] usb 7-1: Manufacturer: syz
[  569.883887][  T408] usb 7-1: SerialNumber: syz
[  569.991358][T26296] netlink: 'syz.7.10417': attribute type 4 has an invalid length.
[  569.999194][T26296] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.10417'.
[  570.089792][T26249] overlay: ./bus is not a directory
[  570.099297][T26249] exFAT-fs (rnullb0): invalid boot record signature
[  570.105951][T26249] exFAT-fs (rnullb0): failed to read boot sector
[  570.112327][T26249] exFAT-fs (rnullb0): failed to recognize exfat type
[  570.126748][  T408] ums-jumpshot 7-1:10.81: USB Mass Storage device detected
[  570.132690][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10418'.
[  570.135413][  T408] ums-jumpshot 7-1:10.81: Quirks match for vid 05dc pid 0001: 2
[  570.181084][  T408] usb 7-1: USB disconnect, device number 45
[  570.346092][T26324] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  570.397689][T26330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1116
[  571.149729][T26367] futex_wake_op: syz.7.10440 tries to shift op by -1; fix this program
[  571.278671][T26378] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  571.519981][ T2704] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  571.560011][ T9238] Bluetooth: hci0: command 0x1003 tx timeout
[  571.560037][T14361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  571.681227][ T2704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  571.691419][ T2704] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  571.701008][ T2704] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  571.710135][ T2704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  571.718141][ T2704] usb 7-1: SerialNumber: syz
[  571.927001][ T2704] usb 7-1: 0:2 : does not exist
[  571.933728][ T2704] usb 7-1: USB disconnect, device number 46
[  572.434943][T26408] tipc: Invalid UDP bearer configuration
[  572.434959][T26408] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  572.548062][T26427] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  572.548393][T26427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1137
[  572.577409][   T36] audit: type=1400 audit(2000000150.051:2670): avc:  denied  { connect } for  pid=26429 comm="syz.6.10463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  572.661214][T26436] tipc: Invalid UDP bearer configuration
[  572.661239][T26436] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  572.675900][T26436] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  572.676582][T26436] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  572.683096][T26436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  572.694373][T26436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1141
[  572.704305][  T408] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  572.814175][T26458] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  572.820750][T26458] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  572.860187][T26463] overlay: Unknown parameter 'smackfstransmute'
[  572.870012][  T408] usb 9-1: Using ep0 maxpacket: 32
[  572.876182][  T408] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  572.884465][  T408] usb 9-1: config 0 has no interface number 0
[  572.890704][  T408] usb 9-1: config 0 interface 184 has no altsetting 0
[  572.899119][  T408] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  572.908362][  T408] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.916402][  T408] usb 9-1: Product: syz
[  572.920665][  T408] usb 9-1: Manufacturer: syz
[  572.925269][  T408] usb 9-1: SerialNumber: syz
[  572.932414][  T408] usb 9-1: config 0 descriptor??
[  572.940365][  T408] smsc75xx v1.0.0
[  572.998980][T26474] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  572.999349][T26474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1154
[  573.145170][  T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  573.165482][  T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  573.177314][  T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  573.187748][  T408] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71
[  573.197142][  T408] usb 9-1: USB disconnect, device number 7
[  573.361705][T26492] rust_binder: 26491 RLIMIT_NICE not set
[  573.614567][   T36] audit: type=1404 audit(2000000151.091:2671): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  573.636153][   T36] audit: type=1404 audit(2000000151.111:2672): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  573.651419][   T36] audit: type=1400 audit(2000000151.111:2673): avc:  denied  { map } for  pid=26517 comm="syz.6.10497" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  573.674765][   T36] audit: type=1400 audit(2000000151.111:2674): avc:  denied  { read } for  pid=26517 comm="syz.6.10497" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  573.698186][   T36] audit: type=1400 audit(2000000151.111:2675): avc:  denied  { execmem } for  pid=26517 comm="syz.6.10497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  573.739676][   T36] audit: type=1400 audit(2000000151.211:2676): avc:  denied  { read write } for  pid=20491 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  573.764068][   T36] audit: type=1400 audit(2000000151.211:2677): avc:  denied  { open } for  pid=20491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  573.788268][   T36] audit: type=1400 audit(2000000151.211:2678): avc:  denied  { ioctl } for  pid=20491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  573.813976][   T36] audit: type=1400 audit(2000000151.221:2679): avc:  denied  { read } for  pid=26520 comm="syz.6.10498" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  573.999207][T19307] Bluetooth: hci0: Frame reassembly failed (-84)
[  574.282171][T26567] new mount options do not match the existing superblock, will be ignored
[  575.086685][T26619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249
[  575.116656][T26622] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5:
[  575.116656][T26622] attempt to add with overflow
[  575.143410][T26622] ------------[ cut here ]------------
[  575.149038][T26622] kernel BUG at rust/helpers/bug.c:7!
[  575.154962][T26622] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  575.161926][T26622] CPU: 0 UID: 0 PID: 26622 Comm: syz.7.10537 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  575.175654][T26622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  575.185710][T26622] RIP: 0010:rust_helper_BUG+0x8/0x10
[  575.190993][T26622] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 a0 de ce 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 64 97 42 90 90 90 90 90 90 90 90 90
[  575.210589][T26622] RSP: 0018:ffffc900018b73f0 EFLAGS: 00010246
[  575.216649][T26622] RAX: 000000000000008c RBX: 1ffff92000316e80 RCX: 535bc0daa389cf00
[  575.224624][T26622] RDX: ffffc9000a249000 RSI: 0000000000007ff6 RDI: 0000000000007ff7
[  575.232594][T26622] RBP: ffffc900018b73f0 R08: ffffc900018b70e7 R09: 1ffff92000316e1c
[  575.240557][T26622] R10: dffffc0000000000 R11: fffff52000316e1d R12: 0000000000000000
[  575.248519][T26622] R13: dffffc0000000000 R14: ffffc900018b7420 R15: ffffc900018b7450
[  575.256494][T26622] FS:  00007fd52022b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  575.265426][T26622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  575.271997][T26622] CR2: 000000110c302a46 CR3: 000000014fdf2000 CR4: 00000000003526b0
[  575.279957][T26622] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000
[  575.287927][T26622] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  575.295893][T26622] Call Trace:
[  575.299159][T26622]  <TASK>
[  575.302081][T26622]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  575.309540][T26622]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  575.317511][T26622]  ? kernel_text_address+0xa9/0xe0
[  575.322623][T26622]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  575.336170][T26622]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  575.342324][T26622]  ? arch_stack_walk+0x10b/0x170
[  575.347254][T26622]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  575.354443][T26622]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  575.362331][T26622]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0
[  575.372218][T26622]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  575.382804][T26622]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0
[  575.395042][T26622]  ? mas_wr_store_type+0x8eb/0x1ad0
[  575.400235][T26622]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10
[  575.413075][T26622]  ? mas_preallocate+0x56e/0xc60
[  575.418098][T26622]  ? __cfi_mas_preallocate+0x10/0x10
[  575.423373][T26622]  ? kasan_save_alloc_info+0x40/0x50
[  575.428648][T26622]  ? __asan_memset+0x39/0x50
[  575.433224][T26622]  mmap_region+0x136b/0x1bc0
[  575.437804][T26622]  ? __cfi_common_lsm_audit+0x10/0x10
[  575.443174][T26622]  ? __cfi_mmap_region+0x10/0x10
[  575.448117][T26622]  ? preempt_schedule_common+0x2d/0x60
[  575.453591][T26622]  ? __kasan_check_read+0x15/0x20
[  575.458626][T26622]  ? arch_get_unmapped_area_topdown+0x232/0x8d0
[  575.464872][T26622]  ? file_mmap_ok+0x147/0x1a0
[  575.469578][T26622]  do_mmap+0xb6d/0x13c0
[  575.473737][T26622]  ? __cfi_do_mmap+0x10/0x10
[  575.478317][T26622]  ? down_write_killable+0xe9/0x2d0
[  575.483506][T26622]  ? __cfi_down_write_killable+0x10/0x10
[  575.489303][T26622]  vm_mmap_pgoff+0x38f/0x4e0
[  575.493882][T26622]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  575.498979][T26622]  ? __fget_files+0x2c5/0x340
[  575.503650][T26622]  ksys_mmap_pgoff+0x166/0x1e0
[  575.508421][T26622]  __x64_sys_mmap+0x121/0x140
[  575.513110][T26622]  x64_sys_call+0x13bf/0x2ee0
[  575.517792][T26622]  do_syscall_64+0x58/0xf0
[  575.522205][T26622]  ? clear_bhb_loop+0x50/0xa0
[  575.526876][T26622]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  575.532752][T26622] RIP: 0033:0x7fd51f38e929
[  575.537158][T26622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  575.556768][T26622] RSP: 002b:00007fd52022b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  575.565177][T26622] RAX: ffffffffffffffda RBX: 00007fd51f5b5fa0 RCX: 00007fd51f38e929
[  575.573142][T26622] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000
[  575.581113][T26622] RBP: 00007fd51f410b39 R08: 0000000000000004 R09: 0000000000000000
[  575.589073][T26622] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  575.597027][T26622] R13: 0000000000000000 R14: 00007fd51f5b5fa0 R15: 00007ffd43a5fd38
[  575.604991][T26622]  </TASK>
[  575.607996][T26622] Modules linked in:
[  575.612323][T26622] ---[ end trace 0000000000000000 ]---
[  575.619115][T26622] RIP: 0010:rust_helper_BUG+0x8/0x10
[  575.624524][T26622] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 a0 de ce 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 64 97 42 90 90 90 90 90 90 90 90 90
[  575.647863][T26622] RSP: 0018:ffffc900018b73f0 EFLAGS: 00010246
[  575.655262][T26622] RAX: 000000000000008c RBX: 1ffff92000316e80 RCX: 535bc0daa389cf00
[  575.663365][T26622] RDX: ffffc9000a249000 RSI: 0000000000007ff6 RDI: 0000000000007ff7
[  575.671472][T26622] RBP: ffffc900018b73f0 R08: ffffc900018b70e7 R09: 1ffff92000316e1c
[  575.679509][T26622] R10: dffffc0000000000 R11: fffff52000316e1d R12: 0000000000000000
[  575.687627][T26622] R13: dffffc0000000000 R14: ffffc900018b7420 R15: ffffc900018b7450
[  575.695720][T26622] FS:  00007fd52022b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  575.704775][T26622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  575.711501][T26622] CR2: 00007f669361ff98 CR3: 000000014fdf2000 CR4: 00000000003526b0
[  575.721747][T26622] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000
[  575.733736][T26622] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  575.741880][T26622] Kernel panic - not syncing: Fatal exception
[  575.748300][T26622] Kernel Offset: disabled
[  575.752616][T26622] Rebooting in 86400 seconds..