last executing test programs:

1m36.634815017s ago: executing program 1 (id=1089):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3fc, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000"], 0x24, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m36.518414109s ago: executing program 1 (id=1090):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0x8008770b, 0x2) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r2, 0x26119000) (async)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000000c0)={@broadcast, @multicast1}) (async, rerun: 32)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in6=@mcast1, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1fe, 0x0, 0x2, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd29, 0x70bd2d, 0x70bd26, 0x10, [0x7ff]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) (async)
ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000040)=0x1)

1m36.48190226s ago: executing program 1 (id=1091):
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x65101, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "2bcca8e65cce499394e87c1493cdd26cb5ad87165ade5b6dea0fa84f25cc818153953e910546948ddf0281569d6bce1dc1b2946a39d73b463efe51de6555a2432e53771ff679d889340abd8d0ad02e556ff6c6da9d911d8d40eb064c1c25a805d46d5fd597e72da7d0c018fa34e3de8e7154f18dec6d7376440fd7f3ee04a3362395d93c"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040100)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, 0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x9}, {0x2, 0x1, 0x1}], 0x2, 0x9, 0x10, 0x1, 0x5, 0x68})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

1m35.929903251s ago: executing program 1 (id=1101):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1m35.929587371s ago: executing program 1 (id=1102):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004&000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x50908809, 0x0, 0x10, 0x32800000, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f00000000c0)={r0})

1m35.712008835s ago: executing program 1 (id=1105):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3", 0x62}], 0x1}}], 0x3, 0xc0) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg(r1, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a80)="0f175b2fee112e4373d8e5efc7d9430058137a41f20cb28eddd481b07c710d62a73d9dfc1e88ffaf869b11bd8e7529349f2a4b6eedb0424346f6d31165cb92825b79ca5c85834bba9ff229ec", 0x4c}], 0x1}}], 0x1, 0x4000)
sendto$inet(r1, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (rerun: 32)
ioprio_get$pid(0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1m35.657886237s ago: executing program 32 (id=1105):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3", 0x62}], 0x1}}], 0x3, 0xc0) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg(r1, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a80)="0f175b2fee112e4373d8e5efc7d9430058137a41f20cb28eddd481b07c710d62a73d9dfc1e88ffaf869b11bd8e7529349f2a4b6eedb0424346f6d31165cb92825b79ca5c85834bba9ff229ec", 0x4c}], 0x1}}], 0x1, 0x4000)
sendto$inet(r1, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (rerun: 32)
ioprio_get$pid(0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

36.450647067s ago: executing program 2 (id=2075):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="96069f58841d75ec98d4450be0813458271119ace9c8685d059c09b0b8af7e410305f87ef298e6b1cf8899a74ab076235594b850a0ba4e184d1d43dd4513e3b1916bcb3f138ff519467f8cc9a3bd5ca440db7511bdff614aa5a9d6b145e9e720d0a166106c469e7479e6807e36c93f22fd00dff3aed3f8dce596da859abc4e5440acd4cf4d0ae4bf9338c782dbd64739b4b0bceb55c65894", 0x98}, {&(0x7f00000003c0)="406c75d20b5e86f7e966b8ec3d6726b460661773a6db3e61d872bc7a9e702daad7bba80cf59fd2cc4a5f6778506dd6191b7af64092c262af2de4ea508f0a3ee70b27778cdd51c1ec2305477ca74a59a5476fdff29d9349a15b6cd1f557c80461c7c23b5e9d5d6b8aab3d993f1825c2d2371ebd7441257b5afd8d0e5f622652367370caade80368fb0f45f12142a12b1db34d01fd337fd64f4edd6f863f700e5ca660bcb0c9a0a70c66cf1ffa8829e47ecfaeb31b6ee9e55d301f7ee75834bb0c7d78acd8078f4cacd1ba73d8d29e06a77e5441c2c84177848e", 0xd9}, {&(0x7f0000000200)="7315acdd710214d94222455612f3b194309615f1882eb15851aeae0acf23e760d11e83c9503e044c5d9fcb322b24f05a31aa6676834427daacbd12b83b9cf6e00376a1d909846006a3d833b479205b96403efa8e19bbbdf6b82ba8ad8ff7d6181ee3625c023b46fa374b9398ca38bbd5bcd8877a73601e114abbeb93dcda22dead914a498e3dddcdc0ad79bef57079c4926a", 0x92}, {&(0x7f00000004c0)="883bd09b16d3ec2ef21af482be095e15ca831e839ec37c887ed53072509a79cb4220231c8f15be134cbfa34f5097a44c369454ad23963f1125092445275c0d0d4db577c92d16faa07d4b7868389287c99fa94bb275883ee24e946a802c79c6ecfeac05ff19a8f9969a23d0de6ea8b75f2ed382c5ce3af577270f7f61fbaf53282179372ed7da96f7cd42cae14edaf3379b1162e9bc7aed1d5e1901a751ab4d6c0e9ba98d3815ddf02b853a00da8018bc6d2b48aa4d242325823a6a5ae9f7200fd2", 0xc1}, {&(0x7f0000000300)="a4b726", 0x3}, {&(0x7f00000005c0)="387bd7198028d50a113664ff77fa99db96ab57aae438d982", 0x18}, {&(0x7f0000000600)="077fed91904f660ab2c7e6e9332a6fd1b3d5fa94c76045d445aaafa6b184a9ff0e5131b1eb1834c014e4d46a94306f6ee21d4c956a6b6259d824d90c0b15e0e64df16173cf643bb138a5a143cefe75dd7c38c35bc966eda8f5df132c2831e7f7c4f2ace21a60ec498823d048ab53d535b8c2373abc639e2b0acaa58614eb702ecf86cbf0adf691d263ed36b7ab95096814b83e88bb6572098b5b04612c06029c1d88d3e6ad4eef705756b3e5d242d8d6e4406516c8cbf3c6cdaaa1eab7804bcf1aaa0c9b467235625d28c519e7a238d9e5e798630357d80682ff6cfd2ff48922d2b34bf215ae80", 0xe7}], 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40002, 0x151)
readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/21, 0x15}], 0x1)
io_setup(0x8, &(0x7f0000001580)=<r4=>0x0)
io_getevents(r4, 0x0, 0x0, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'bond_slave_1\x00', {'ipvlan1\x00'}, 0x9})
ptrace(0x10, r5)
ptrace$peekuser(0x3, r5, 0x388)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000))

36.386888729s ago: executing program 2 (id=2077):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x120b60, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
accept4$inet6(r1, 0x0, &(0x7f00000000c0), 0x80000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x121141, 0x0) (async, rerun: 64)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x11)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$xdp(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000e4f000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e1f000/0x1000)=nil, &(0x7f0000c58000/0x2000)=nil, &(0x7f0000d31000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e26000/0x2000)=nil, &(0x7f0000c07000/0x1000)=nil, &(0x7f0000d2d000/0x3000)=nil, &(0x7f0000c96000/0x3000)=nil, &(0x7f0000000240)="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", 0x1000, r3}, 0x68) (async)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x488d8}, 0x0)
close_range(r4, r6, 0x0)
ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000015c0)) (async)
accept4(r3, &(0x7f0000001500)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000001580)=0x80, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001700)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000001440)={&(0x7f00000016c0)={0x34, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x76}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4044005)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x80082102, &(0x7f0000000080)={0x0, 0x0, r9})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0) (async)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001740)={0xe8, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xcc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x38}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x801}, 0x8000)

36.174792293s ago: executing program 2 (id=2084):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0)
getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000003c00))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0})

36.173818833s ago: executing program 2 (id=2086):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x400800)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000001880)=[@wrmsr={0x1e, 0x20, {0x0, 0xc3b}}, @code={0xa, 0x65, {"b805000000b95d0000000f01c167f3430f09b9800000c00f3235010000000f300f01c30f01f8b8010000000f01d966470f72e000c744240055000000c7442402766c0000ff2c24c46178116e5766b8c9000f00d8"}}, @in_dx={0x82, 0x20, {0x9baa, 0x4}}, @wrmsr={0x1e, 0x20, {0x854, 0x1}}, @wrmsr={0x1e, 0x20, {0xba8, 0x4}}, @rdmsr={0x32, 0x18, {0x836}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @code={0xa, 0x6a, {"2ef30f1eccb919010000b80e000000ba000000000f30440f2307b9050300000f32650f239cf30f32440f20c0350c000000440f22c048b81ae30000000000000f23c00f21f835030007000f23f83e460f01cf0fc79e3b12d87d"}}, @in_dx={0x82, 0x20, {0x37df}}, @cpuid={0x14, 0x18, {0x3, 0x2}}, @wr_crn={0x46, 0x20, {0x4, 0x2}}, @wrmsr={0x1e, 0x20, {0xb05, 0x80}}, @wr_drn={0x6e, 0x20, {0x1, 0x3}}, @wr_drn={0x6e, 0x20, {0x1, 0x7}}, @code={0xa, 0x50, {"420f07410f21e266ba4200ec0fc76e38f3480f2dbb38b20000b805000000b9000000800f01d9c482919a7e08470f01f80f20e035000200000f22e0410f79d6"}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}], 0x2cf})
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000005c0))
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x3b05553f)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000001380)={0x1f, 0x1, 0x3}, 0x6)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r6, &(0x7f00000010c0), 0x3fffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
socket$inet(0x2, 0x6, 0x7)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r5, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x41000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x8, 0x0, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r9, 0x540a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

36.143082813s ago: executing program 2 (id=2088):
syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000540))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4990861ac00000000000000001600", "f4bd000000020000000000000000000000000000000000000000000000000b00", [0x6, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
lseek(r2, 0x7, 0x3)
close(0xffffffffffffffff)
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x101, 0x8800)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x1, {0x0, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x12, 0x13, 0xb, "c087a020425090d621a2006fa07fd7cbb67bddf8925548f1d19d992a865158359a568253a258ae813a8f261c41728ee7d1cd7216259193b4a04685eb359aa6ff", "dc3fc43637fd4fbd8ca4a21b52e5cfc67736a8590c11b8a664a310bbbe9ed28a044ac1780ced986f46589ce92bc5ed8f7440c8b025bb1ad7cbba0e8fd06ff8e3", "45f5fc178d1942377aea795175554d1b98aae563499fc284b097884a613f6937", [0x9, 0x200]}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "5020f764", {0x3, 0x101, 0x0, 0x2, 0x2, 0x25, 0x9}})
close_range(r0, 0xffffffffffffffff, 0x0)

34.853585899s ago: executing program 2 (id=2112):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x38, 0x12)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './cgroup', [{0x20, ':.-*-$+&!/]{'}, {0x20, '/\x01b0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x20, '-!&'}], 0xa, "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"}, 0x12c)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0)

19.570531767s ago: executing program 33 (id=2112):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x38, 0x12)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './cgroup', [{0x20, ':.-*-$+&!/]{'}, {0x20, '/\x01b0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x20, '-!&'}], 0xa, "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"}, 0x12c)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0)

4.885915052s ago: executing program 0 (id=2414):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002})
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
read(r3, &(0x7f0000000240)=""/146, 0x92)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0x2, 0x4)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x80000000, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x80000000, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) (async)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4)
sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x56) (async)
bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x56)
listen(r6, 0x5) (async)
listen(r6, 0x5)
accept4(r6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.747662056s ago: executing program 0 (id=2450):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000003100000056ccab"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0xf3, 0x3, 0x9, 0x0, 0x2, 0x6, 0x5, 0x24, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x4, 0x3, 0x6, '\x00', 0x73, 0x400})
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3}, 0x1c) (async)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000240)=<r7=>0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write(r7, 0x0, 0x87)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async)
accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) (async)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x24040000) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000200)=0x10000, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'bridge0\x00'})
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f1a232c5a353e014ec791c64487c9d997dccf7d03e6867c5a5f4ef2775b26ad0111dbd80793c45f849f60cdc407cf64e94418b7a948c32a40a299137d7950f82481cc2768a39a1"])

1.630804057s ago: executing program 0 (id=2451):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

1.630100018s ago: executing program 0 (id=2452):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) (async)
futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x1, 0x4ffffff) (async)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x80)
write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x5, 0x3}, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x93d2}, @window={0x3, 0xfffd}, @mss={0x2, 0xfffffff7}, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000004000)=0x100c, 0x4)
lsm_set_self_attr(0x65, &(0x7f0000001580)=ANY=[@ANYRES16, @ANYBLOB="a0c2d6fd10ef35bc72ab4d5867289f"], 0x20, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
clock_gettime(0x0, &(0x7f00000074c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x8ca}, {{&(0x7f0000001480)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001500)=""/129, 0x81}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002600)=""/103, 0x67}, 0x4}, {{&(0x7f0000002680)=@ax25={{0x3, @default}, [@netrom, @remote, @rose, @rose, @rose, @bcast, @remote, @default]}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002700)=""/90, 0x5a}, {&(0x7f0000002780)=""/191, 0xbf}, {&(0x7f0000002840)=""/75, 0x4b}, {&(0x7f00000028c0)=""/237, 0xed}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/214, 0xd6}, {&(0x7f0000003ac0)=""/178, 0xb2}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/186, 0xba}, {&(0x7f0000003d00)=""/17, 0x11}], 0xa}, 0x7}, {{&(0x7f0000003e00)=@can, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e80)=""/96, 0x60}, {&(0x7f0000003f00)=""/232, 0xe8}, {&(0x7f0000004000)}, {&(0x7f0000004040)=""/81, 0x51}], 0x4}, 0x7}, {{&(0x7f0000004100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004180)=""/56, 0x38}, {&(0x7f00000041c0)=""/71, 0x47}, {&(0x7f0000004240)=""/129, 0x81}, {&(0x7f0000004300)=""/156, 0x9c}, {&(0x7f00000043c0)=""/165, 0xa5}, {&(0x7f0000004480)=""/187, 0xbb}, {&(0x7f0000004540)=""/172, 0xac}, {&(0x7f0000004600)=""/219, 0xdb}, {&(0x7f0000004700)=""/96, 0x60}, {&(0x7f0000004780)=""/221, 0xdd}], 0xa}, 0xb9b}, {{&(0x7f0000004940)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000059c0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {0xfffffffffffffffd}], 0x2, &(0x7f0000005a00)=""/5, 0x5}, 0x1000}, {{&(0x7f0000005a40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000007040)=[{&(0x7f0000005ac0)=""/200, 0xc8}, {&(0x7f0000005bc0)=""/11, 0xb}, {&(0x7f0000005c00)=""/116, 0x74}, {&(0x7f0000005c80)=""/133, 0x85}, {&(0x7f0000005d40)=""/75, 0x4b}, {&(0x7f0000005dc0)=""/207, 0xcf}, {&(0x7f0000005ec0)=""/20, 0x14}, {&(0x7f0000005f00)=""/26, 0x1a}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/193, 0xc1}], 0xa, &(0x7f0000007100)=""/22, 0x16}, 0x105}, {{0x0, 0x0, &(0x7f00000071c0)=[{&(0x7f0000007140)=""/74, 0x4a}], 0x1, &(0x7f0000007200)=""/154, 0x9a}, 0x3}], 0x8, 0x40000101, &(0x7f0000007500)={r4, r5+60000000}) (async)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) (async)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async)
sendto$inet6(r6, &(0x7f0000007600)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a20252a259df640ea6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xaf, 0x8080, 0x0, 0x37)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000000)=0x40)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) (async)
shutdown(r3, 0x1) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.629526968s ago: executing program 0 (id=2453):
r0 = socket$packet(0x11, 0x3, 0x300)
socket(0x5, 0x2, 0x9)
setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) (async)
setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3b}, 0xffffffffffffffb7) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3b}, 0xffffffffffffffb7)
select(0x40, &(0x7f0000000400)={0x6, 0x3, 0x80000000, 0x0, 0x7, 0x7}, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

758.698435ms ago: executing program 0 (id=2471):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x27000]}, 0x8)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r2, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fff}}]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x400})
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014})
ioctl$UFFDIO_CONTINUE(r3, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
open_tree(r0, &(0x7f0000000300)='./file0\x00', 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
write$rfkill(r7, &(0x7f0000000040)={0x431, 0x6, 0x2, 0x1}, 0x8)
mkdirat(0xffffffffffffffff, 0x0, 0x60)
mkdir(0x0, 0x0)
mkdir(0x0, 0x90)
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
readv(r6, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

362.813913ms ago: executing program 4 (id=2478):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x1, 0x80000000)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x4)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f0000002200)={0x2, 0x1, 0x6, 0x4, 0x6, 0x80})
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0xffff0001)
close_range(r1, 0xffffffffffffffff, 0x0)

314.846664ms ago: executing program 4 (id=2479):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000002600)=[{&(0x7f0000000280)=""/260, 0x104}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000)

314.361144ms ago: executing program 4 (id=2480):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r2=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003180)={'syztnl2\x00', &(0x7f0000002f40)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0x7e, 0xf4, 0x8, 0x10, @private0, @remote, 0x8, 0x8000, 0x1000, 0x1}})
sendmmsg$inet6(r1, &(0x7f0000003e00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0x1000}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="47a30604416ea8f22e237ae4e4940b2b596c17d8c3838c29077ce673c59736e2135c95a49ab1df9e2ce84e27b99dd4b372bac568294f21f61facee71d0bc0469705ca51ee3820720f623945750a1826c2962a67e924bdcb657982d0617ef14fefe3bb5d40f039d3c832309d525f3b309ef773e5192ad4187fb6a37cb362567d07a8da2c8eaee94cc29e79aa7ea8f4550baad50ff14af39eee56392d19ffdf515b39d059cbb6accb1136abc0afe151d6d590814e7dcf14ceb8b88499319111a816cc8f5", 0xc3}], 0x1, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xab}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x2, 0x1, 0x0, [@local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x2c, 0x17, '\x00', [@hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x43b}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0xa0, "f648e4ef91eac84f82c7ebab3326db6dfa42f86f935148f2d0412088abe8b3bc1545bc74e5a29d9f4b3fbbbe9a9a21b3ee2ba4c12da1203f7fd70a870b9abccc9798ba32cba2e99360fe2df928d379d7bbd289fdf25d8553f44d8a6fd4e749c9565c60958569dac273071a1ee01222e6a0a0112126cd3aaa53e51f10db055a864895bfdaa12d97331d7cdd93061689108818df1d65dbca7e527c9fb7137a172c"}]}}}], 0x1a8}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001440)=[@dstopts_2292={{0x1090, 0x29, 0x4, {0x73, 0x20e, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x6, [0xa2, 0x0, 0x2, 0x8000000000000001, 0x9]}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @loopback}, @pad1, @enc_lim={0x4, 0x1, 0x41}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x40, 0x1000, "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"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x29, 0x4, 0x0, 0x80, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x1108}}, {{&(0x7f0000002580)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x71}, 0x1c, &(0x7f0000002680)=[{&(0x7f00000025c0)="2f30daf20f727705516004ab762de37557a356c7d5b2158b43657fadbb13548f073d15609e5d7c54a45b81c7a39244d208bb5de995cdcfc4d4448c0441bb99539a2468f06a2046f8c4f962e7a0dd81d6e451a02843d63fab80a03452a2cb8e92534e7981af4f6f78f0a2d9e9afd907016b5eb6986f06a8196f66ed82dcf1005c864888f221", 0x85}], 0x1, &(0x7f00000026c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}}, {{&(0x7f0000002700)={0xa, 0x4e23, 0xd00, @remote, 0x5}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002740)="9861bc130eb22cdee1361727c96f42033c8c09f82df37fd4f31a021c429355c041c3a6ff4897c99ba312c78bd811bb16d49ee0bdebaf25ec4529daded4335003da9ef7b48aa1cdee3cb9a15e5efe", 0x4e}, {&(0x7f00000027c0)="83fc1dff73af624427e80ebe055e1acb2514a49da6644e8ad6842055b873f40f1bfd3a63d3463516bf47ef4a0e553b9475f6e61b8c6918a5dbfc85767eaf69d72b633dcd5c2fcc4436cf63beb85110c436ea186378a948e7bab3fc8d", 0x5c}, {&(0x7f0000002840)="1bf1be399387936b2abde8d2fc4f2ff8ccb6720d3e9c3c27760b1804eb12e8e2307bd74dbde82430c3de95642f9178a0ea4bbd7e5f06595623967c4034a6ca4a53bfca5537d1288719aa15b40966acaa03ddf1387235c1da4e2af7c15c042e83a485905f589fa21c5c0fac2f682c213f7ac87377346c9a5f6de69dfeeb2ec78997dfe427f3f9158d61a33d730a3fd3dedc13f0b8abce237f17a25aefdeea43f5f245dfdf66f2d1e86ea4cdbb44513c615cfd45c980dfabecb13ee2aed6768fbacca4dfd06f61cd14e4", 0xc9}, {&(0x7f0000002940)="bbdaaf6d602cd0f75cac7dc2ecbfa098de72a6430dbedd99020db6840b73ace3c046a88a77eb8630892712b5b04c75abe7671dd80018177bf2e9a8da22d9c92674936b4fcec668eb1d08df37c1f1939ae7879394787a718562", 0x59}, {&(0x7f00000029c0)="3dd6aa75803fb74463f71e6a9290f1df8eac746334f366bc2cef8c7918b3a07dbf13019d862d6ac4ac3b5fa7d60eb5792842eeebf3b4e64ddf557fbdc704880f54d0da4731d4f4d15d8d356a67590b01d2f47fb3d8819b882dfca5647890f2e2e75f08d0ef871591b2d8236415a061bc8bbbbb5d9dcbf8126f", 0xfffffffffffffdb7}, {&(0x7f0000002a40)="9cc47dc61ef9b06e8abb38db57ae58ee9293d1b21f85cb972b865479ee65f672bd00b49f07b45b24422c36d07d72a3276838fd7026ab9ff96a76f1830c40e9bca78298c2ebc79d74cc2e7581e20573673bd0fbf33dadd20ae2c3c4", 0x5b}], 0x6, &(0x7f0000002b40)=[@rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x20}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x5c, 0x9, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x10, [0x0, 0xfffffffffffffffe, 0x0, 0x80, 0x6]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0xd0}}, {{&(0x7f0000002c40)={0xa, 0x4e20, 0xfff, @remote, 0x2}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000002c80)="a03c76bad169517d2d5b353e287b66a06fc4c44a75fbf061a238905d9fccf016ba0c72b83edc61e80eb18d34af2ec2ccb534c44cc6cf4161dd2adf575f2185a5b246530ab5cdaf619997207dc65e14641eaa383d55cd97fcf9958aca02b06445b77b5e0f", 0x64}, {&(0x7f0000002d00)="c2e4da5a0cb86a970b69165c1e252103533d896550253b96bf4731a940ff4e8ddde42c17ef6a1b47d200b5fa8e54e7a73bc25d773c262ab496a2be4f4f81d1e7e709639ac850f1bd011d1c679dbb207af6f7be14d9780c828a09f69a3a5e04430b92fad99a9c1e610199842223c4c44c1e5692fc0ea03bd0caabfc72ceb7262d74d7c58bfe7c69d5c5e25504115d1b1c6b9e6d83446b197a54cc8ea2ab0d4e75606493b80b4fa6297b022769e07f7da4b025036aebb851be548c6379aa975551701e693d196d", 0xc6}, {&(0x7f0000002e00)="5eece166899c699653760b98358123417f8db55fd4f3cbe7c655bbd13a47818d75a2cd699b68a6d3c5af38823a5119cfc1bb753150c5365e579659089021a915b4413797ea7b161eb0766d2cbfd7ef63a3949db1971487f9c6fa8a1aef2df0f1e4895ee0117cc030054c65146091c6e7cb6b2ceb12612891f76adf10fe11f2510b6eedc5d063d65a4e443395bc8e9f8f0b00e02ca2c994847c9cf79d3155a5ddbdba3c1d235c1800c1b45010cd4dc55c21786ca99e2e8f4ce915f63a049744b1a8553a36f6c1958e00e9", 0xca}], 0x3, &(0x7f0000003000)=[@dstopts={{0x118, 0x29, 0x37, {0x3b, 0x20, '\x00', [@generic={0x1, 0x30, "e07a81778a87e814a7d601657d505655b4938719390ab99b606635e819a4546de3caef62d23fc886275e9aa7b42d786c"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x6, 0x8b, "d6d04488a602956715ea7cf0c4ded7e6a7de47ec3027a3e6b4ac22c9eb5d9ed3ece5d32ffbed61fea1f289948606eb2d4126d997e8f4f8d48138642226fa76734c6325cf3eab1c5a82a3a59768e06380d9756523a552ea3c74d2a337389313aec0dd59c826ca2b7274f5e59104a981b9a95d22268134e1c06257a9cd6a7d112c9725bb34a951ecff549a08"}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x25e5, [0x1, 0x4, 0x6]}}, @pad1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0x6}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x90c7}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}], 0x170}}, {{&(0x7f00000031c0)={0xa, 0x4e24, 0x10000, @empty, 0x1}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003200)="ec704b9650038d8412dde2b69cdad7e09e7dc323324dc7b5574cc13bbbdf778c31be01474504a22f7b5494a30900a8057d8c43b7a10736f946f008b5b88089c50369780bea0401688d43b5d631a2d611c4efb73d9c4319b719d69ee4cb98fcdc4a", 0x61}, {&(0x7f0000003280)="756e470cb72be13f4a92ed034df2fceb323e061922b8d761bc89714f2f570a3a555ebd761ede38f7e225306f6f0295dec12c7b170b619f4076070970fe92dbc93bbd3f46cfc41aceacc83bbf3e9952a92b2ad67b8eb5ff3d54a3da67a6634d636309e88dffe21a10690b2abebb771e361b4c40693196fa99d5e3ec66ef266bf19f1f3a46ec8bd9589a2f5ad0fd64493968e59332120592415f457db195148e354773348f38e833dfbdae3e19ea4de1da4f569c185be3216b5d9f703ef689fab3e81024ae5d3693ae6ce3825d40dee0cb33a3a3751b6128c39ef661a6a67015d73da7f2643b6dc99f9dac795d463bcd9a32e57b75b4f1688515", 0xf9}], 0x2, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], 0x178}}, {{&(0x7f0000003540)={0xa, 0x4e21, 0x0, @private0, 0x9}, 0x1c, &(0x7f0000003640)=[{&(0x7f0000003580)="f00df4597844b0d6d8490cd99452d05ad24991a2cc4c0d1f9959c43210f6ef972b0f9f1b197ee3cea49f6430dc8b5c8f586cfa9801a79a6e2335e7120e84896b3fc4e3a9530961aa7bc73019be4c60c6173043313cc0d46de4a298e1bc2af9ff9ab28567d06cb1653557d1b9c2f153892570adf5af82ebe6bb3627b763affc468b51e02580a0e9d5e3be149dae795730b7a9f50f913191c580facb44d9363228f2d236751afe7c1c17cb6fbab2", 0xad}], 0x1, &(0x7f0000003680)=[@dontfrag={{0x14, 0x29, 0x3e, 0xa}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x1, 0x1, 0x0, [@empty, @remote]}}}], 0x68}}, {{&(0x7f0000003700)={0xa, 0x4e21, 0x4, @loopback}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000003740)="f8cafca96ac5c5d1581ceeee964830a7cda8d83db5cbed2427f928dcdd1e971cc957908b1ae13ffdda6d11455b82ae2298f3ca133260396c628c108dfa983c", 0x3f}, {&(0x7f0000003780)="a8769704b3718b038b2867114098420c4f669994b3dacacc64c4a1d1584a37f2bd9de92af61aa2fe016b6cc26e809c2521be267bf5761ca382cd758d413fa2fc4bce", 0x42}, {&(0x7f0000003800)="8e2bc0d759e64003eda550b4e1c2", 0xe}, {&(0x7f0000003840)="84bd07e057c63b3c433c13f8ee7765a3b66600e3583441a0bfdb3ede48be103a544916f709bedc8e987584814b50ba15279c19c484c563a252c5c03245", 0x3d}, {&(0x7f0000003880)="2e8b9962c348784fb2f1ed529f1a50cdd40c25f6aee753e034f1cc5b1f011c97d659380dcb71815c2120185d9b0363a764bc6efc2685de724d5e98", 0x3b}, {&(0x7f00000038c0)="64843be56e85979ba91d652a572ec97c685b5726df7aa6d4c198c67e4ee2efcdd61435d8b7737ee92dbd3cd4df850eabf65f42683cdbc28d17a96c0bdfd30983e15aac89314e433220b8dd172dcaae40141372176dc0d29f177889a69faeaade836e5e52d4d9b4799c02d36d7ff307b81ec1c22ac21b273abf5235929377dde974280c0f8e7cf84a", 0x88}], 0x6, &(0x7f0000003a00)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x1, 0x77, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x188, 0x29, 0x37, {0x67, 0x2d, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x2b, 0x81, "d8014e1c557e2694a64fe5a3f34d8abd19725598eb00dcfeaf37d56606d4d16dbee108b4c28402598b2283041410adc9671fb80796b65b9353490a2fd27992a6e1d885c79540912b461349fb9dfca05d0056e3869d407a471a1000393d542b77e85b587adeafe5f7b211250087236f5f89382998556e3972fd81e11847cb7eea52"}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x8, 0xcf, "5439769b78c89774daee60b655e2959c653c0d9bf34adf69bce1d01931b98feadb5edc70972f5c639b34f69d80b1534025804dd2b7bcb363f05c95de092a7b915b002b9737f58d39e2b4ecc76979a20197f3c349e3cdfd6e88113c7e69917db2ecc3b8ae847d3e1909e9250dddc8d204010cef7df62b88dbe143950561c077435fe34a5931e88f1f432476498711769830d148c5f9c91cd427431911a7254dcca98b376ea13a3df66344dd98696a42154f65f6e05f2877e4254fd117d5945ae9e7a02fbfa65d4b2b389356ec7958a1"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x2c, 0xf, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0xb, [0x6, 0x7fffffff, 0x7, 0xff, 0xf2, 0x7fffffffffffffff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x5, [0x7]}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x401}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x36, 0x14, 0x1, 0x6, 0x0, [@local, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xc, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @private0}]}}}], 0x3d0}}], 0x8, 0xc0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
read(r4, &(0x7f0000000280)=""/4096, 0x1000)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000)

311.068464ms ago: executing program 4 (id=2482):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000005, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x9, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x7, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x6028b1ab, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
r3 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

293.455235ms ago: executing program 3 (id=2483):
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000043, &(0x7f0000000000)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]})
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
setreuid(0xee01, r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0)
r6 = getgid()
r7 = getuid()
setreuid(0x0, r7)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2084045, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',allow_other,euid>', @ANYRESDEC=r7, @ANYBLOB="2c61707072616973652c66736e616d653d2c66756e633d4649524d574152455f434845434b2c6f626a5f747970653d2d2b405d292ec37d5c2c657569643d", @ANYRESDEC=r7, @ANYBLOB=',\x00'])

237.834335ms ago: executing program 3 (id=2484):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r2, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x40040) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x1, 0x1, 0x8}) (async, rerun: 64)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (rerun: 64)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000039c0)={0x0, 0x3d, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x0, 0x8e, 0x0, 0x0, @fd=r6}, @generic="70ad872d0fae9a0b91009bb29d05525993c4ec478ef4c52306c9204020f9f3bdd2fcf2774bc658070817e10f051f361f91794afd6d00d57099ce05c6205d9cfade3b37f21e14bb2f3704779c10469ae4b03e27a9e3ac40eaea52d6850fbe3a016a5ce66ab30519cb9ceedf97d911f2", @typed={0x0, 0x131, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x0, 0xcf, 0x0, 0x1, [@generic="daf3ff31edfe35b158d60d9e5cf258e7275f0b442310a139c748b45413bd781f54e42113119c8d5256bcbb4d8996c8ddebe7584805be7d0fbce5a1ff58d9a9c869f9e09f94b4b271d83b185edb73047fc51aa6def46d453196d59f5b1d12ebbcf0f9d40adced35b4646a7c73ae432a6b2132e210a8eab6fa56f4def55302d8f04e9c7f74b5ddee118c4720b5b8d334433f0f2196550d985aad366aad6753cb594582a757ea58109905ef7242b1081c270485d600831a73b1caea0af2a14b17bc02a1d8aa7de54ae082522498667d384cb56be25ed1e8836fc67327d872"]}, @typed={0x0, 0x14d, 0x0, 0x0, @binary="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"}]}}], 0x0, 0x0, 0x3b}, 0x40) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
fsmount(0xffffffffffffffff, 0x1, 0xf6)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r8=>0x0}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32)
r10 = syz_open_procfs(r8, &(0x7f0000000240)='net/ip_mr_cache\x00') (rerun: 32)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) (async)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) (rerun: 64)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r13=>0x0}, &(0x7f0000001500)=0xc)
sendmsg$netlink(r7, &(0x7f0000001580)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000003c0)=ANY=[], 0xd4}, {&(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="2541865df69a3e9d1277267c5800130f2376d1e04dfae1387fec9df2cbda7eeefddab84de1eabee16ac41583483dced1183703d2319ec9432b32fdc7d2c4300ffaeeca9766a4583852e4800800b49f3a9c2d0dab9c2100"], 0x1114}, {&(0x7f0000000280)={0x18, 0xe, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x18}], 0x3, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r13}}}], 0x38}, 0x0) (async, rerun: 32)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6) (rerun: 32)

150.747368ms ago: executing program 4 (id=2485):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
capset(&(0x7f0000000200)={0x20071026, r0}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x20, 0xffffffff, 0x17b42684})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000123515309dc2e26f08", @ANYRES32, @ANYBLOB="10001a800c000200030000000000000004003780"], 0x34}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8fe69000)
madvise(&(0x7f000010c000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$xdp(0x2c, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x4000)
setresuid(r6, r6, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x400, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(r5, r6, r7)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

150.298938ms ago: executing program 4 (id=2486):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002093b3710da764e6a0b8c0102030109021b0001040b30030904d70001e0010303090506002000e5060bd815d1d85d8722999189ea0cafb243e4f13d1660087da0360f67b1325c973c2d99225609b976fa057157ab1862804ee77890b8f8d907eb17332108e04aa0b1030852d5429c7d9c8cdca1474fed1be4467b8cf5d6f8dc771f2fb4ad651e0ab9b020d4eada317cb2bbe21115c46516023a5d"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001010040"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x324ef5a4edba850, 0x9e)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x24)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0xfffffffffffffe2b}], 0x1, 0x5a, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

142.152977ms ago: executing program 5 (id=2488):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xffffffffffffffae, 0x0, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0})
close_range(r0, r1, 0x0)

128.764718ms ago: executing program 5 (id=2489):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) (async)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r6=>0x0})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/pid_for_children\x00') (async)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/pid_for_children\x00')
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
dup(r9) (async)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f0000000000)=<r12=>0x0)
timer_settime(r12, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)={{}, {0x0, <r13=>0x0}})
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c4813f7d9de6000000b9d0020000b800000000ba000000000f30c40139d3990d0000008f6814a2e1b0c4e291abfb2e2ef3430fc7b2000000000f32b9800000c00f3235002000008f300f01c8420f22d3"}], 0x0, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c4813f7d9de6000000b9d0020000b800000000ba000000000f30c40139d3990d0000008f6814a2e1b0c4e291abfb2e2ef3430fc7b2000000000f32b9800000c00f3235002000008f300f01c8420f22d3"}], 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r14, 0x801c581f, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00'})
r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/mcfilter6\x00')
ioctl$BLKTRACESETUP(r15, 0xc0481273, &(0x7f0000000480)={'\x00', 0x7, 0x3, 0x6, 0x400, 0x7, <r16=>0xffffffffffffffff})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000100010000000c000600020000000000000008001d00", @ANYRES32=r7, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0cef260a981b060003000094b40043dc", @ANYRES32=r16, @ANYBLOB="0c0006000200000002000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan4\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)

74.704319ms ago: executing program 5 (id=2490):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10, 0x0) (rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20842, 0xc3)
fcntl$setstatus(r2, 0x4, 0x42000) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async, rerun: 32)
fcntl$setstatus(r0, 0x4, 0x46800) (rerun: 32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r4, 0x4, 0x2400) (async)
close(0x3) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) (async)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r6 = syz_open_procfs(r5, &(0x7f0000000280)='net/ip6_tables_names\x00')
write$eventfd(r6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
r9 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000140)=0x1d08, 0x8)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) (async, rerun: 32)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
r10 = eventfd(0x9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r10)

73.209879ms ago: executing program 5 (id=2491):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000200)={0x7}, 0x20)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})

62.443969ms ago: executing program 3 (id=2492):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x9, 0x9, 0xe, 0x0, "3b3199ee8039f199d0b09af9f63a9ea28cfdb5a55bf08421e0b87da93cd38d43b226b6d29deeb20bc3c8869fd42ab4ea5985be75518de8f20b075da503659398", "b2e3d7302bc897016cb0184e2fc2c4cf5e35cdd05e1ea5658918c0412bee07f1", [0x1, 0x8]})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1c080, 0x0)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000180)=0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat2(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0xc202, 0xa0}, 0x18)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5)
r6 = geteuid()
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8)
r8 = accept4$tipc(r1, &(0x7f0000000c00)=@id, &(0x7f0000000c40)=0x10, 0x80000)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001080)=<r9=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0, <r10=>0x0}, &(0x7f0000001100)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000001200)={0x0, <r12=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001240)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000001340)=0xe8)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r14=>0x0}, &(0x7f00000013c0)=0xc)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001400)=<r15=>0x0)
lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = fcntl$getown(r0, 0x9)
r18 = getuid()
statx(r0, &(0x7f0000001500)='./file0\x00', 0x4000, 0x61f8518643966bb9, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
sendmsg$netlink(r4, &(0x7f0000001700)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000001000)=[{&(0x7f00000003c0)={0x9c, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, "", [@generic="9607b6", @generic="0664090ce3ae89e8456d9da573e624685b528be652e8937ca5fbc9a40df52ffbd350d04447237c239aa7d290867c87db50c3576344028cd5ee45f20770088a09a3b3a666bb36a6694b2ef0e83bf52c0ced339f6c12c829dda387d431ca34bf78339581d5b5587499ba73a0b96f1aca002af6664a8bfcd9ed528d2adf3b32d3299c2377f90f885510"]}, 0x9c}, {&(0x7f0000000480)={0x38c, 0x16, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@generic="4ea07ba82fab08a557011d4101b635ee9db9bc75b5721132e0746b24793248ad902b6fe0d51c9ffb44484305ce3741516e5fcfd369a11dec884e94463559ca65acae7e2edfe0ee19911968f8f789126ec8279b279090b4a2350116dc372157b96910cd432aec45b1236227b3c47acddd47e9e7ba04ed7e1270c718ebd714b697949954a8ee263571f25d41fdc9d7131ec8b3490326c4aede070a89fad52ac4a050b5cff6a85e34589d00eb79abf8f63421fcf0989a307280cb7e727f7b0cb4d3b29dc8", @generic="9081c5449a85b7a9678ad1be5ed5a3e2c06c2155527d1ef86843b5750525c57679c8116c6b6830425aed66f458dc64671e6c3006226ce73feb66382c69984a26dd90a21d07da2d1462d22289f24b6f83aae1022aabb341bbbf33803feaf298599faa12a868c786b73a07720e833148e8", @nested={0xfb, 0x45, 0x0, 0x1, [@nested={0x4, 0x12d}, @generic="26a7ec5edce0c4b2f2e1200ab167210704cb87819c556921db534131d02e5eacc40e65a0c870c3272e0d2d38f9b17a79018294236f5eee18d51c1a9064db2b745774680d3c30854b0ad238b1d59795dd1a1430619d7c2cbf370636f10fb3812d5aa80660bd7faec23d6481ae7562f16594da94e21501f582fe661d6706fb21077d77c092f8c774c060c60d6816a851503a1b583be6b1f3a518cf6558df520c3d5a4a257d8f2f68291f2ecda212d27c704ad6a1e985e9519abed942cf4b4a8bc6bf98026129107dbc5f6557757b74e887028b92a3bd4c9979102c8e2685a09448ea12bb72be1b347c16a32230bdd7c864746598"]}, @nested={0x14b, 0x6f, 0x0, 0x1, [@generic="fc58f3f2530841206b588ec9fdf51242c723958e88e96a09f3fe620c689c10a5bd88fc370e679b014fbf66aa02770c3cef7d4676e40fbe6c7651320731f3cbe86152688c107cdaa024b061c5bda6902005f296ed1d1f9fdc233a30a85faa03a641b058f12d31cff4381c1328300b3a976b754a8aa9c560e69f8c3572ef2fcfad7ec14ee7027f07f2c57e093e1ab2b89c17cc68811ffce5b3", @nested={0x4, 0x114}, @generic="5fd2ad2258602d0916ad8e101a1c25ee63c1c71f1a464d0ac9b19247c63a83b65bd2653c4bc14b58ff5e795d61ce0299a0ff81a3ffdd2d25db7259c1ea6746a00d069a667e0b447d09d7fe5f17e1373494fc8e820f8b610032b5ca68be7483215b6f5cb808b13209f332a6c566f03d193198e43e7232bbdd5fc835cbba6f041132ca6c339eb1a3c728cf90e5a87a9590ad11aea9b786ec623d7f7e4b73ae8e5f897cd0b8cee8dc88d8b5a2"]}]}, 0x38c}, {&(0x7f0000000840)={0x1c, 0x19, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x263}]}, 0x1c}, {&(0x7f0000000880)={0xd8, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, "", [@generic="cbd685494e01d88e6a97d8e3136814ae3771559471d79cd4b1a02549ce8fa83e705e8b262adb3b7838593883a351bd6c607dd539ef5995765a01c58e0c16857e76158eb1fcd1183a4525d5ffbe5e5e51bb632224dca710a05eb42b5b25225ddd717c8b6c51445dd5bc19489e8854fbbdd0b3caa8278f00bbd591fe3cb4eea7a4656254c76f77bb9e8a43f7fb5a2452371012e14c576695c90dc4b5d0da755eb4c6b2e5166a2eeb918b3b61140299f0a8f671b2fab055159c6b65d29e8eedec0a27f3945ba2f158"]}, 0xd8}, {&(0x7f0000000980)={0x104, 0x2f, 0x300, 0x70bd2c, 0x25dfdbff, "", [@typed={0x19, 0x6, 0x0, 0x0, @str='/proc/self/net/pfkey\x00'}, @nested={0xb4, 0x11e, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x102, 0x0, 0x0, @uid=r6}, @generic="40b17e407fd80e1ddc4c7511ddbb802b1fb78ce16b6f25fd94a1a27179925c0dc0cd993d0441ef8f03f20d5e7c780cf3472e60ec6775ff4a743c410296736126d446a2732c278e03c452a6d5fab9a72156935fd3acfb1b49102b772928a1bb5735fe19e1138216be233e2eb517c9a424aa76079ea15b0e0f72f92e8f9b2ac69c47c55c3b76906a911ba38bed504700e7f36ac634a3e4da9c", @typed={0x8, 0x101, 0x0, 0x0, @u32=0x9}]}, @nested={0x24, 0x24, 0x0, 0x1, [@nested={0x4, 0xf6}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r4}]}]}, 0x104}, {&(0x7f0000000c80)={0x354, 0x11, 0x2, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x101, 0x0, 0x0, @u64=0x38}, @generic="1937652de809605f7d7d23e7f811a438759b714bf9795201baa93b79e39914f930ab3c05cf1874d951f4e5ece70fe5d65b96749a9fe754dee513ded64714876fa2d64bb29d851a2aee2de24d3213e0a5f9e41c400d78f18300850d9f82a281e641149f608998a570201047f05dee792468d465f05dbf31334fa03e30fadff2f76ce7b919e70df6fe6de8e9c20c6148857bbec1f17397a4455da8eaaa44d8348c573378ee2fad27232ec68645", @nested={0x284, 0xda, 0x0, 0x1, [@generic="b8487a678998ccdd75d58ac83d3ee01e29d06161626de7a9f0f9d298cb5f004255be4a7cdac2ea6395498bb08e5745eb8e5d654771e0cccfa7a29335e9beaf67f2c8d7dc6790cf7462314fd3f35891aef90e6b2d645591c262f2f9ef3fe6399c0408abbd4c98b38b79a6913bfc45a889729ccccff4202bc4081649e789d04031a97b9223ef4946dfdbcd982f93846dc320bee094400bdf5439ede35523c0bb61669fff0b9dcd5e339831db4f8c650a0d932571fe9ffc90624f807f18e04f199b987d7f8cc0fd5036a785543bdbefa7336d755137b29220b3389adf13e1a8ead148a442e2a36a", @typed={0x8, 0x9e, 0x0, 0x0, @uid=r7}, @generic="d716914f3414a2d1110059a8cffbc2b5bdb1a96254db13b72e767ca5fc375a3facb9c310128da8679456fc61b4043a590468d29b69d972d8a595b2ee29a17bc38862e48e35ca89cbbbc7012c6bf7e16fdf4ddaab3188fb0a16627ecf4147926b460242dd906e2a3d2ac18d547763fd61ae90c3be486f1de8cb2c8b846bdf0d2bcc2ca206cadb1abf075ca683b639ac2a582ae797af8b6e7153113d2c201adfe3c2e704ae7196a833a3264905b80bc73c61ebe238108a92fabc84e8f9c3f2ed8c636b74cfe327923ef9efdac24486188053287ec71990560fe592b166c214bf76868f15b64ad3", @typed={0x8, 0x148, 0x0, 0x0, @fd=r8}, @typed={0xa2, 0x9d, 0x0, 0x0, @binary="80bd0aaada57d17820e9144a4195022a56fe9c449fe4dcdf8386a988d73300df49f6a0bdee3f3a5cdea843d5e2eaf62b11fbb16bab9f1394f805e24a95c743d042bac2542282cea3e1c27f119706dde721c52c4125b8b6eeb819d34006c162a91f71908df012b11db5ea3aeb5da8e50733bd727a2d0d6a92fab43832af471858bc807959127e676092f877c925228aa10f80b73aeb3d396fa06bf18f2aa8"}]}, @nested={0x8, 0x27, 0x0, 0x1, [@nested={0x4, 0x8a}]}]}, 0x354}], 0x6, &(0x7f0000001640)=[@rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xb8, 0x4000000}, 0x10080)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000001740)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x0, 0xfff, 0x2, 0x6, 0x7fffffff]}, &(0x7f00000017c0)=0x78)
close(r3)
recvfrom(0xffffffffffffffff, &(0x7f0000001800)=""/114, 0x72, 0x10040, &(0x7f0000001880)=@pptp={0x18, 0x2, {0x1, @private=0xa010102}}, 0x80)

61.167289ms ago: executing program 5 (id=2493):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x944b, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x10000009, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x9, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3fc, 0x1ff, 0x1, 0x7ffc, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3fd, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x9, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x200, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000016000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r6)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250c00000004f4048059b8fa77895493251e77e578424edc9d1c547288fb312c5c58daa4c32abbc698766d80afd1bf810bf238037950df8bc2a32c8176bf7fdd84106c0107226e3297bf6b467c60e0fd6c2b27c2ad87ac"], 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="000129bd7000fedbdf00e8000000140005800700010069620000080001006574680020000280040004000c00038008000100000100000c00038008000200008001004400098008000200000000000800020009000000080001000d00001223b28300090000000800020008000001000001000008000200290800000800020000800000000000000004000000000000caeaa43e752fb99a7af742ab3d90ab7e25be82bca7f4714f9d2256171e59"], 0x98}, 0x1, 0x0, 0x0, 0x4040840}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="f34e0faeebb9d7080000b8b47d0000ba000000000f30c422f9322b66baf80cb878c80483ef66bafc0cedb975090000b8f2730000ba000000000f30b951090000b8eeb7e07aba000000000f302e660f3881b3000001000f20e035040000000f22e046819658350000fc1e0000400f09", 0x6f}], 0x1, 0x0, 0x0, 0x52)

57.989719ms ago: executing program 3 (id=2494):
ioprio_set$uid(0x3, 0x0, 0x64)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000)
syz_open_dev$mouse(&(0x7f0000000200), 0x0, 0x400000)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000240)={0x0})
fadvise64(r0, 0x7, 0xf9c, 0x5)
pselect6(0x40, &(0x7f0000000040)={0x9, 0x3, 0x1ff, 0xd, 0x5, 0x0, 0xb6a8, 0x3}, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x34, 0x6d5, 0x1, 0x1, 0x8}, &(0x7f00000000c0)={0xac2, 0x34c61c4f80000, 0x0, 0x8, 0x6, 0x82, 0x1, 0x590e}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000))
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
readv(r0, &(0x7f00000001c0), 0x0)
r5 = dup(r4)
connect$inet(r5, &(0x7f0000000040)={0x27, 0x4e20, @rand_addr=0x64010100}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x7)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8)

40.4379ms ago: executing program 5 (id=2495):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80800)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000700)) (async)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000700))
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50)
r4 = socket$igmp(0x2, 0x3, 0x2)
write$9p(r2, &(0x7f00000001c0)="35198ef61da55fcf248b37f6df", 0xd) (async)
write$9p(r2, &(0x7f00000001c0)="35198ef61da55fcf248b37f6df", 0xd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r5)
sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', <r7=>0x0})
fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r9) (async)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a80180c2000002ffffffffffff86dd64"], 0x76)
r11 = fsmount(r10, 0x0, 0x1)
fchdir(r11)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000640)={[0xae, 0x3, 0x8, 0xffffffff, 0x3, 0x8, 0x4, 0x9, 0x1, 0x8a9e000000, 0x0, 0x5, 0x2, 0x0, 0x2, 0xb82e], 0xdddd1000, 0x2600})
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000600)={@multicast2, @empty, r7}, 0xc)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x85a9, 0xf})

1.04479ms ago: executing program 3 (id=2496):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, &(0x7f0000000380)="4d01000000020000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d80df726f864ddd38d", 0x3c, 0x81, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x8a, 0x6, @multicast}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40)

0s ago: executing program 3 (id=2497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x9, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x5, 0xfe, 0x1f}, {0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0xb9, 0x0, 0x9}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0xa0}, 0x1, 0xfffff000}, 0x8000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x120b60, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
accept4$inet6(r3, 0x0, &(0x7f00000000c0), 0x80000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r5 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x10)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000001400))
fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
fcntl$setpipe(r6, 0x407, 0xffffffff80000000)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
r10 = openat2(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0xe}, 0x18)
ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000000100))
write(r9, &(0x7f0000000400)="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", 0x1f000)

kernel console output (not intermixed with test programs):

nnect, device number 7
[  120.130615][   T36] audit: type=1400 audit(1759157259.277:410): avc:  denied  { write } for  pid=4209 comm="syz.4.1386" name="/" dev="incremental-fs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.154022][   T36] audit: type=1400 audit(1759157259.277:411): avc:  denied  { add_name } for  pid=4209 comm="syz.4.1386" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.174990][   T36] audit: type=1400 audit(1759157259.277:412): avc:  denied  { create } for  pid=4209 comm="syz.4.1386" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  120.195419][   T36] audit: type=1400 audit(1759157259.297:413): avc:  denied  { associate } for  pid=4209 comm="syz.4.1386" name=".log" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  120.984757][ T4215] 9pnet: p9_errstr2errno: server reported unknown error 18446
[  120.993071][ T4215] __vm_enough_memory: pid: 4215, comm: syz.4.1388, bytes: 18014402804453376 not enough memory for the allocation
[  121.033295][   T36] audit: type=1400 audit(1759157260.177:414): avc:  denied  { write } for  pid=4216 comm="syz.4.1389" path="socket:[18957]" dev="sockfs" ino=18957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  121.192831][   T36] audit: type=1326 audit(1759157260.337:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a598eec9 code=0x7ffc0000
[  121.228690][   T36] audit: type=1326 audit(1759157260.337:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a598eec9 code=0x7ffc0000
[  121.365181][ T4253] erofs: dax options not supported
[  121.430369][ T4265] x_tables: duplicate entry at hook 1
[  121.436480][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'.
[  121.465117][  T817] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  121.616189][  T817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.627170][  T817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.637033][  T817] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  121.646215][  T817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.654831][  T817] usb 5-1: config 0 descriptor??
[  121.867695][  T817] usbhid 5-1:0.0: can't add hid device: -71
[  121.881215][  T817] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  121.890352][  T817] usb 5-1: USB disconnect, device number 8
[  121.994104][ T4287] rust_binder: Error in use_page_slow: ESRCH
[  121.994127][ T4287] rust_binder: use_range failure ESRCH
[  122.000205][ T4287] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  122.005712][ T4287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  122.013708][ T4287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:137
[  122.110423][ T4293] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.160448][ T4295] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  122.166941][ T4295] rust_binder: Error while translating object.
[  122.177553][ T4295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  122.183757][ T4295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146
[  122.433074][ T4308] overlay: Unknown parameter 'subj_role'
[  122.545092][ T2000] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  122.696124][ T2000] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  122.704307][ T2000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.714470][ T2000] usb 5-1: config 0 has no interface number 0
[  122.721937][ T2000] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  122.731031][ T2000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.739051][ T2000] usb 5-1: Product: syz
[  122.743295][ T2000] usb 5-1: Manufacturer: syz
[  122.747922][ T2000] usb 5-1: SerialNumber: syz
[  122.753289][ T2000] usb 5-1: config 0 descriptor??
[  123.009637][ T2000] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  123.016084][ T2000] usb 5-1: No valid video chain found.
[  123.022352][ T2000] usb 5-1: USB disconnect, device number 9
[  123.336291][ T4327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4327 comm=syz.2.1428
[  123.379350][ T4335] 9pnet_fd: Insufficient options for proto=fd
[  123.594185][ T4342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  123.594221][ T4342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156
[  124.035076][  T817] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  124.195065][  T817] usb 5-1: Using ep0 maxpacket: 32
[  124.201302][  T817] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  124.209448][  T817] usb 5-1: config 0 has no interface number 0
[  124.217003][  T817] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  124.226101][  T817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.234101][  T817] usb 5-1: Product: syz
[  124.238345][  T817] usb 5-1: Manufacturer: syz
[  124.242956][  T817] usb 5-1: SerialNumber: syz
[  124.248197][  T817] usb 5-1: config 0 descriptor??
[  124.253967][  T817] smsc95xx v2.0.0
[  124.454051][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.462734][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.470878][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.487610][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.497178][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.506091][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.514739][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.524667][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.533889][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.552550][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.609353][ T4402] sock: sock_set_timeout: `syz.0.1456' (pid 4402) tries to set negative timeout
[  124.742434][ T4406] 9pnet_fd: Insufficient options for proto=fd
[  125.251094][   T36] kauditd_printk_skb: 22 callbacks suppressed
[  125.251114][   T36] audit: type=1326 audit(1759157264.397:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.1461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec018eec9 code=0x0
[  125.269183][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'.
[  125.804998][ T4426] netlink: 'syz.2.1465': attribute type 58 has an invalid length.
[  126.460057][ T4456] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1477'.
[  126.813851][  T817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  126.842110][  T817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  126.859600][  T817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  126.879023][  T817] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  126.896006][  T817] usb 5-1: USB disconnect, device number 10
[  126.963332][ T4485] netlink: 'syz.4.1487': attribute type 8 has an invalid length.
[  127.017978][ T4488] veth0: entered promiscuous mode
[  127.023256][ T4488] veth0: left promiscuous mode
[  127.596120][   T36] audit: type=1326 audit(1759157266.747:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec018eec9 code=0x0
[  127.705100][  T817] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  127.856139][  T817] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  127.866363][  T817] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  127.879411][  T817] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  127.888534][  T817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.897256][  T817] usb 5-1: config 0 descriptor??
[  127.903247][  T817] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  128.362562][ T4521] overlayfs: failed to clone lowerpath
[  128.832758][ T4554] overlayfs: failed to clone upperpath
[  128.913579][ T4571] incfs: Error accessing: ./file7.
[  128.918830][ T4571] incfs: mount failed -2
[  128.953434][ T4577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  128.962416][ T4576] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.355909][   T36] audit: type=1326 audit(1759157268.507:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a598eec9 code=0x7fc00000
[  129.403606][   T36] audit: type=1400 audit(1759157268.547:442): avc:  denied  { create } for  pid=4583 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  129.479123][   T36] audit: type=1400 audit(1759157268.627:443): avc:  denied  { create } for  pid=4598 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  129.668988][   T36] audit: type=1326 audit(1759157268.817:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.1539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff045f8eec9 code=0x0
[  129.905098][   T36] audit: type=1326 audit(1759157269.047:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.2.1546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89a598eec9 code=0x0
[  129.953133][ T4658] netlink: 'syz.2.1547': attribute type 63 has an invalid length.
[  129.961060][ T4658] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1547'.
[  129.970244][ T4658] gretap0: entered allmulticast mode
[  129.976128][ T4658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  130.093720][ T4666] fuse: Bad value for 'fd'
[  130.124592][ T4675] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1555'.
[  130.126442][   T36] audit: type=1326 audit(1759157269.277:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.2.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a598eec9 code=0x0
[  130.437527][   T10] usb 5-1: USB disconnect, device number 11
[  130.562640][ T4684] KVM: debugfs: duplicate directory 4684-11
[  130.709141][ T4690] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1561'.
[  131.825564][ T4711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1569'.
[  131.893823][ T4723] netlink: 'syz.2.1573': attribute type 1 has an invalid length.
[  131.901847][ T4723] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1573'.
[  132.022888][   T36] audit: type=1400 audit(1759157271.167:447): avc:  denied  { accept } for  pid=4748 comm="syz.2.1582" path="socket:[22529]" dev="sockfs" ino=22529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  132.083700][   T36] audit: type=1400 audit(1759157271.227:448): avc:  denied  { create } for  pid=4760 comm="syz.2.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  132.286731][ T4777] netlink: 'syz.2.1590': attribute type 64 has an invalid length.
[  132.294662][ T4777] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1590'.
[  133.596361][ T4826] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  133.597480][ T4825] IPv6: syztnl0: Disabled Multicast RS
[  134.602463][   T36] audit: type=1326 audit(1759157273.747:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.3.1615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ec018eec9 code=0x0
[  134.654046][ T4856] SELinux:  Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped).
[  134.663769][   T36] audit: type=1400 audit(1759157273.807:450): avc:  denied  { relabelto } for  pid=4854 comm="syz.3.1615" name="bus" dev="tmpfs" ino=2700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_exec_t:s0"
[  134.690087][   T36] audit: type=1400 audit(1759157273.807:451): avc:  denied  { associate } for  pid=4854 comm="syz.3.1615" name="bus" dev="tmpfs" ino=2700 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_exec_t:s0"
[  134.775071][  T817] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  134.926128][  T817] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[  134.934495][  T817] usb 5-1: config 0 has no interface number 1
[  134.940663][  T817] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  134.949802][  T817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.958519][  T817] usb 5-1: config 0 descriptor??
[  135.166183][   T10] usb 5-1: USB disconnect, device number 12
[  135.343338][ T4860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1617'.
[  135.352452][ T4860] netlink: 'syz.2.1617': attribute type 6 has an invalid length.
[  135.360644][ T4860] netlink: 'syz.2.1617': attribute type 5 has an invalid length.
[  135.368461][ T4860] netlink: 'syz.2.1617': attribute type 4 has an invalid length.
[  135.390331][ T4863] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  135.887438][ T4901] netlink: 'syz.0.1631': attribute type 13 has an invalid length.
[  136.306719][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  136.326525][ T4941] overlayfs: failed to clone lowerpath
[  136.378820][ T4955] overlayfs: failed to clone lowerpath
[  136.475064][   T10] usb 5-1: Using ep0 maxpacket: 8
[  136.482998][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.492387][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.500746][   T10] usb 5-1: Product: syz
[  136.505215][   T10] usb 5-1: Manufacturer: syz
[  136.509902][   T10] usb 5-1: SerialNumber: syz
[  136.605732][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'.
[  136.615472][ T4965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4965 comm=syz.0.1655
[  136.718282][   T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  136.918904][   T36] audit: type=1400 audit(1759157276.072:452): avc:  denied  { read write } for  pid=4915 comm="syz.4.1637" name="lp0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  136.942501][   T36] audit: type=1400 audit(1759157276.072:453): avc:  denied  { open } for  pid=4915 comm="syz.4.1637" path="/dev/usb/lp0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  137.427430][   T10] usb 5-1: USB disconnect, device number 13
[  137.440930][   T10] usblp0: removed
[  138.012909][ T5012] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.025081][ T5012] IPv6: NLM_F_REPLACE set, but no existing node found!
[  138.045216][ T5011] IPv6: NLM_F_REPLACE set, but no existing node found!
[  139.243250][ T5038] 9pnet_fd: Insufficient options for proto=fd
[  139.250508][ T5038] 9pnet_fd: Insufficient options for proto=fd
[  139.558822][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.576275][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.590290][ T5051] bridge_slave_0: entered allmulticast mode
[  139.602866][ T5051] bridge_slave_0: entered promiscuous mode
[  139.609788][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.617103][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.624359][ T5051] bridge_slave_1: entered allmulticast mode
[  139.631192][ T5051] bridge_slave_1: entered promiscuous mode
[  139.689649][ T5070] netlink: 'syz.3.1693': attribute type 4 has an invalid length.
[  139.697818][ T5070] netlink: 'syz.3.1693': attribute type 5 has an invalid length.
[  139.705836][ T5070] netlink: 'syz.3.1693': attribute type 1 has an invalid length.
[  139.721745][ T5069] netlink: 'syz.3.1693': attribute type 4 has an invalid length.
[  139.729602][ T5069] netlink: 'syz.3.1693': attribute type 5 has an invalid length.
[  139.737678][ T5069] netlink: 'syz.3.1693': attribute type 1 has an invalid length.
[  139.825442][  T330] tipc: Left network mode
[  139.836367][  T330] veth1_macvtap: left promiscuous mode
[  139.842076][  T330] veth0_vlan: left promiscuous mode
[  139.902345][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.909477][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.916829][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.923889][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.978565][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.988285][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.002239][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.009349][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.028655][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.035774][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.089760][ T5051] veth0_vlan: entered promiscuous mode
[  140.106596][ T5051] veth1_macvtap: entered promiscuous mode
[  140.239584][ T5100] rust_binder: Read failure Err(EAGAIN) in pid:4
[  140.785114][   T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  140.804274][ T5122] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1709'.
[  140.850258][ T5129] overlayfs: failed to clone lowerpath
[  140.946232][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  140.957874][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  140.971249][   T31] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  140.981550][ T5133] 9pnet_fd: Insufficient options for proto=fd
[  140.987715][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.005329][   T31] usb 3-1: config 0 descriptor??
[  141.010861][ T5107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.025914][   T31] usbhid 3-1:0.0: can't add hid device: -22
[  141.031917][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  141.050652][   T36] audit: type=1400 audit(1759157280.202:454): avc:  denied  { read } for  pid=5134 comm="syz.4.1713" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  141.074490][   T36] audit: type=1400 audit(1759157280.202:455): avc:  denied  { open } for  pid=5134 comm="syz.4.1713" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  141.219926][ T2000] usb 3-1: USB disconnect, device number 14
[  141.475100][  T817] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  141.635091][  T817] usb 5-1: Using ep0 maxpacket: 16
[  141.641554][  T817] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  141.650856][  T817] usb 5-1: config 1 has no interface number 1
[  141.657201][  T817] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  141.668244][  T817] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  141.681973][  T817] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.695316][  T817] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.704508][  T817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.712739][  T817] usb 5-1: Product: syz
[  141.717218][  T817] usb 5-1: Manufacturer: syz
[  141.725870][  T817] usb 5-1: SerialNumber: syz
[  141.964620][   T36] audit: type=1400 audit(1759157281.112:456): avc:  denied  { audit_write } for  pid=5168 comm="syz.0.1724" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  141.995407][ T2000] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  142.125363][ T2000] usb 3-1: device descriptor read/64, error -71
[  142.145544][  T817] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  142.153058][  T817] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  142.234376][   T36] audit: type=1400 audit(1759157281.382:457): avc:  denied  { listen } for  pid=5173 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  142.385078][ T2000] usb 3-1: device descriptor read/64, error -71
[  142.635133][ T2000] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  142.765062][ T2000] usb 3-1: device descriptor read/64, error -71
[  143.007609][ T2000] usb 3-1: device descriptor read/64, error -71
[  143.115298][ T2000] usb usb3-port1: attempt power cycle
[  143.246087][ T5208] TCP: TCP_TX_DELAY enabled
[  143.455068][ T2000] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  143.476109][ T2000] usb 3-1: device descriptor read/8, error -71
[  143.513787][ T5228] binder: Unknown parameter 'measure'
[  143.513792][ T5226] virtiofs: Unknown parameter 'always'
[  143.606064][ T2000] usb 3-1: device descriptor read/8, error -71
[  143.845069][ T2000] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  143.866147][ T2000] usb 3-1: device descriptor read/8, error -71
[  143.996180][ T2000] usb 3-1: device descriptor read/8, error -71
[  144.105147][ T2000] usb usb3-port1: unable to enumerate USB device
[  144.246583][ T2000] usb 5-1: USB disconnect, device number 14
[  144.273355][ T5251] 9pnet_fd: Insufficient options for proto=fd
[  144.401325][ T5266] rust_binder: Write failure EFAULT in pid:238
[  144.482447][ T5276] fuse: Bad value for 'group_id'
[  144.493678][ T5276] fuse: Bad value for 'group_id'
[  144.545581][ T5290] tmpfs: Bad value for 'huge'
[  144.715077][ T2000] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  144.776924][ T5303] rust_binder: Write failure EFAULT in pid:14
[  144.865189][ T2000] usb 5-1: Using ep0 maxpacket: 32
[  144.877548][ T2000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.888536][ T2000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.898440][ T2000] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  144.907568][ T2000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.916830][ T2000] usb 5-1: config 0 descriptor??
[  144.925650][ T2000] hub 5-1:0.0: USB hub found
[  145.018563][ T5315] SELinux:  Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped).
[  145.028497][   T36] audit: type=1400 audit(1759157284.182:458): avc:  denied  { relabelto } for  pid=5314 comm="syz.0.1775" name="file0" dev="tmpfs" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0"
[  145.055388][   T36] audit: type=1400 audit(1759157284.182:459): avc:  denied  { associate } for  pid=5314 comm="syz.0.1775" name="file0" dev="tmpfs" ino=1958 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0"
[  145.101336][ T5324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1779'.
[  145.111707][ T5324] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.127284][ T2000] hub 5-1:0.0: 1 port detected
[  145.176798][ T5332] overlayfs: failed to clone upperpath
[  145.478008][   T36] audit: type=1400 audit(1759157284.632:460): avc:  denied  { accept } for  pid=5356 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  145.505143][ T5357] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›�X�ò۵רѳlú¶uË9vî�
[  145.548764][ T5359] rust_binder: Failed copying remainder into alloc: EFAULT
[  145.548792][ T5359] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  145.565174][ T5359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  145.573965][ T5359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:20
[  145.667395][ T5368] netlink: 1351 bytes leftover after parsing attributes in process `syz.0.1793'.
[  145.736785][   T31] hub 5-1:0.0: activate --> -90
[  145.938599][   T31] usb 5-1-port1: config error
[  146.156522][ T5421] tmpfs: Unknown parameter 'þ!T˜fû�Âü ž±Â[Ýå�èGƒî˜”Ȉ™�ÂZƒÁJîãJÏ ¼Ò5ÕqÍv_K’YºCæü0)Šd!FÄw˜sjîæ²G«°xKNN}ͤ
ù±soê0¤ASþjšR[УHuqùð[Y$#A­â‰Øõ¸BƾJ“Âu]ýGMïx*/�aÀhµ ð'
[  146.345574][  T348] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  146.507600][  T348] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  146.516734][  T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.524749][  T348] usb 3-1: Product: syz
[  146.528962][  T348] usb 3-1: Manufacturer: syz
[  146.533693][  T348] usb 3-1: SerialNumber: syz
[  146.538145][   T31] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  146.545686][ T2000] usb 5-1: USB disconnect, device number 15
[  146.551681][   T31] usb 5-1-port1: cannot reset (err = -71)
[  146.557643][   T31] usb 5-1-port1: attempt power cycle
[  147.360882][   T36] audit: type=1326 audit(1759157286.512:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.1830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ec018eec9 code=0x0
[  147.426349][ T5493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244
[  147.539625][ T5509] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  147.585192][ T5514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1838'.
[  147.680203][ T5526] overlayfs: failed to clone upperpath
[  147.697578][ T5531] tc_dump_action: action bad kind
[  147.744107][ T5537] 9pnet_fd: Insufficient options for proto=fd
[  147.777085][ T5539] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1848'.
[  147.786728][ T5539] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1848'.
[  147.795673][ T2000] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  147.918023][ T5558] fuse: Unknown parameter ''
[  147.957457][ T2000] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  147.968545][ T2000] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  147.978908][ T2000] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  147.990719][ T2000] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.000165][ T2000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.008462][ T2000] usb 5-1: Product: �
[  148.012845][ T2000] usb 5-1: Manufacturer: 騌㻸⠹痑᭽䭗ｗ�✑锘ㄑ��롑混栖ۀ誽骄ㅃѹ娥��뢞樿普�瓄앀瓀驉�
[  148.026068][ T2000] usb 5-1: SerialNumber: 첌꼲躹ㅎ
[  148.032728][ T5509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.443056][ T2000] cdc_ncm 5-1:1.0: bind() failure
[  148.450997][ T2000] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  148.458986][ T2000] cdc_ncm 5-1:1.1: bind() failure
[  148.465783][ T2000] usb 5-1: USB disconnect, device number 20
[  148.588834][   T36] audit: type=1400 audit(1759157287.742:462): avc:  denied  { accept } for  pid=5593 comm="syz.3.1864" path="socket:[25672]" dev="sockfs" ino=25672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  148.826402][ T5626] overlayfs: failed to clone lowerpath
[  148.970214][ T5633] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  149.117543][   T10] usb 3-1: USB disconnect, device number 19
[  149.169192][ T5654] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  149.169220][ T5654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  149.177214][ T5654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:49
[  149.265087][ T2000] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  149.445056][ T2000] usb 5-1: Using ep0 maxpacket: 8
[  149.451889][ T2000] usb 5-1: unable to get BOS descriptor or descriptor too short
[  149.460404][ T2000] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  149.468624][ T2000] usb 5-1: config 0 has no interface number 0
[  149.474748][ T2000] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  149.490161][ T2000] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  149.500113][ T2000] usb 5-1: config 0 interface 88 has no altsetting 0
[  149.510999][ T2000] usb 5-1: language id specifier not provided by device, defaulting to English
[  149.524597][ T2000] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  149.533809][ T2000] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  149.546891][ T2000] usb 5-1: Product: syz
[  149.551106][ T2000] usb 5-1: SerialNumber: syz
[  149.560441][ T2000] usb 5-1: config 0 descriptor??
[  149.615268][ T5680] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1896'.
[  149.685067][  T817] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  149.835122][  T817] usb 3-1: Using ep0 maxpacket: 32
[  149.841467][  T817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.841945][ T2000] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input9
[  149.861509][  T817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.864363][ T2000] usb 5-1: USB disconnect, device number 21
[  149.873666][  T817] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  149.886405][  T817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.897397][  T362] udevd[362]: Error opening device "/dev/input/event3": No such file or directory
[  149.906790][  T362] udevd[362]: Unable to EVIOCGABS device "/dev/input/event3"
[  149.914414][  T362] udevd[362]: Unable to EVIOCGABS device "/dev/input/event3"
[  149.922082][  T817] usb 3-1: config 0 descriptor??
[  150.153163][   T36] audit: type=1400 audit(1759157289.302:463): avc:  denied  { create } for  pid=5686 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  150.180407][ T5692] sit0: entered promiscuous mode
[  150.187837][ T5692] netlink: 'syz.0.1899': attribute type 1 has an invalid length.
[  150.195627][ T5692] netlink: 'syz.0.1899': attribute type 3 has an invalid length.
[  150.221178][ T5694] netlink: 'syz.0.1900': attribute type 1 has an invalid length.
[  150.229218][ T5694] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1900'.
[  150.291613][ T5708] EXT4-fs: dax option not supported
[  150.335224][  T817] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[  150.535800][  T817] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device
[  150.543988][  T817] koneplus 0003:1E7D:2D51.0009: couldn't install mouse
[  150.551668][  T817] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -71
[  150.563297][  T817] usb 3-1: USB disconnect, device number 20
[  151.052118][   T36] audit: type=1400 audit(1759157290.202:464): avc:  denied  { append } for  pid=5718 comm="syz.2.1907" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  151.123567][ T5729] binder: Binderfs stats mode cannot be changed during a remount
[  151.132141][ T5731] binder: Binderfs stats mode cannot be changed during a remount
[  152.002905][   T36] audit: type=1400 audit(1759157291.152:465): avc:  denied  { append } for  pid=5777 comm="syz.2.1926" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  152.027700][   T36] audit: type=1400 audit(1759157291.172:466): avc:  denied  { accept } for  pid=5777 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  152.576582][ T5784] overlayfs: failed to clone lowerpath
[  152.594065][ T5787] netlink: 'syz.3.1929': attribute type 27 has an invalid length.
[  152.616436][   T36] audit: type=1326 audit(1759157291.772:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045f8eec9 code=0x7fc00000
[  152.680149][ T5803] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.925634][ T5817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263
[  153.258917][ T5826] SELinux:  Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped).
[  153.279667][   T36] audit: type=1400 audit(1759157292.432:468): avc:  denied  { relabelto } for  pid=5825 comm="syz.0.1941" name="fuse" dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023"
[  153.307065][   T36] audit: type=1400 audit(1759157292.432:469): avc:  denied  { associate } for  pid=5825 comm="syz.0.1941" name="fuse" dev="tmpfs" ino=908 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023"
[  153.335515][   T36] audit: type=1400 audit(1759157292.432:470): avc:  denied  { setattr } for  pid=5825 comm="syz.0.1941" name="fuse" dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023"
[  153.735423][ T5843] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  153.735450][ T5843] rust_binder: Error while translating object.
[  153.744109][ T5843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.750377][ T5843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[  153.760319][ T5844] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.075109][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  154.087853][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  154.431520][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'.
[  154.443193][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.453289][ T5862] bridge_slave_0 (unregistering): left allmulticast mode
[  154.461081][ T5862] bridge_slave_0 (unregistering): left promiscuous mode
[  154.469670][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.491715][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'.
[  154.502027][ T5863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5863 comm=syz.0.1955
[  154.517603][ T5862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5862 comm=syz.0.1955
[  154.609173][ T5866] overlay: ./file0 is not a directory
[  154.810171][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.810203][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.816734][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.823286][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.838194][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.838218][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.844730][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.847250][ T5875] rust_binder: Error in use_page_slow: ESRCH
[  154.853108][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.863910][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.870558][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.876969][ T5875] rust_binder: use_range failure ESRCH
[  154.876998][ T5875] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  154.877019][ T5875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  154.877041][ T5875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:279
[  154.882072][ T5877] /dev/rnullb0: Can't open blockdev
[  154.891887][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.920843][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.924479][ T5879] rust_binder: Write failure EINVAL in pid:91
[  154.927518][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.939999][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.946685][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.953465][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.960337][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.967040][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.973591][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.980123][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.986609][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.993075][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.999671][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.006696][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.013167][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.019628][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.026103][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.032534][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.038999][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.045516][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.052062][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.058583][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.155284][   T36] audit: type=1400 audit(1759157294.312:471): avc:  denied  { map } for  pid=5885 comm="syz.4.1963" path="socket:[30980]" dev="sockfs" ino=30980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.162720][ T5886] /dev/rnullb0: Can't open blockdev
[  155.195444][  T348] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  155.345066][  T348] usb 3-1: Using ep0 maxpacket: 16
[  155.351363][  T348] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  155.360425][  T348] usb 3-1: config 1 has no interface number 1
[  155.366573][  T348] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  155.377300][  T348] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  155.390227][  T348] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  155.402665][  T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  155.411818][  T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.419917][  T348] usb 3-1: Product: syz
[  155.424226][  T348] usb 3-1: Manufacturer: syz
[  155.428918][  T348] usb 3-1: SerialNumber: syz
[  155.448932][   T36] audit: type=1400 audit(1759157294.602:472): avc:  denied  { read write } for  pid=5897 comm="syz.0.1967" name="fuse" dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023"
[  155.449006][ T5898] fuse: Bad value for 'fd'
[  155.476828][   T36] audit: type=1400 audit(1759157294.602:473): avc:  denied  { open } for  pid=5897 comm="syz.0.1967" path="/dev/fuse" dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023"
[  155.791178][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  155.846426][  T348] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  155.853939][  T348] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  156.278719][   T36] audit: type=1400 audit(1759157295.432:474): avc:  denied  { map } for  pid=5915 comm="syz.0.1973" path="socket:[31028]" dev="sockfs" ino=31028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  157.302111][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.309234][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.316422][ T5931] bridge_slave_0: entered allmulticast mode
[  157.322776][ T5931] bridge_slave_0: entered promiscuous mode
[  157.329522][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.336656][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.343799][ T5931] bridge_slave_1: entered allmulticast mode
[  157.351185][ T5931] bridge_slave_1: entered promiscuous mode
[  157.403819][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.410935][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.418269][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.425386][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.452241][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.460204][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.471188][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.478265][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.487046][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.494192][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.521007][ T5931] veth0_vlan: entered promiscuous mode
[  157.532386][ T5931] veth1_macvtap: entered promiscuous mode
[  157.625677][   T36] audit: type=1400 audit(1759157296.782:475): avc:  denied  { mount } for  pid=5961 comm="syz.3.1984" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  157.641130][ T5962] /dev/rnullb0: Can't open blockdev
[  157.649144][   T36] audit: type=1400 audit(1759157296.792:476): avc:  denied  { remount } for  pid=5961 comm="syz.3.1984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  157.674336][   T36] audit: type=1400 audit(1759157296.812:477): avc:  denied  { unmount } for  pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  157.796192][   T36] audit: type=1400 audit(1759157296.952:478): avc:  denied  { relabelfrom } for  pid=5996 comm="syz.0.1994" name="NETLINK" dev="sockfs" ino=30464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  157.796207][ T5997] SELinux:  Context ethtool is not valid (left unmapped).
[  157.828041][   T36] audit: type=1400 audit(1759157296.982:479): avc:  denied  { relabelto } for  pid=5996 comm="syz.0.1994" name="NETLINK" dev="sockfs" ino=30464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_audit_socket permissive=1 trawcon="ethtool"
[  157.854251][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  157.860366][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  157.868337][   T36] audit: type=1107 audit(1759157296.982:480): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='q2ÚÝê˜8I'v1ùs·R-å쳚Q�ץő’<ö'ôÜóËýýÎ]%XŠ´%èVgbÓEÂåü÷^tjÔ7ýÉ“h—ôÞIÉ™=Єp„ ì^<f°ô9ê÷Þ°�¸UeýktT�…!~Ü4_„œW[‹mgrŠý$ ¶ç¾ÊûN8ûIÞ¦ÈhÍ-ØÉAÍätAâ˜Ój¹øø'
[  157.948017][   T36] audit: type=1400 audit(1759157297.102:481): avc:  denied  { load_policy } for  pid=6002 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  157.948043][ T6003] SELinux:  policydb magic number 0x6000000 does not match expected magic number 0xf97cff8c
[  157.978546][ T6003] SELinux: failed to load policy
[  157.979638][  T817] usb 3-1: USB disconnect, device number 21
[  158.004559][   T36] audit: type=1400 audit(1759157297.152:482): avc:  denied  { view } for  pid=6004 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  158.027258][   T36] audit: type=1400 audit(1759157297.182:483): avc:  denied  { accept } for  pid=6004 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.091369][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'.
[  158.311461][ T6015] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.2001'.
[  158.372499][ T6016] rust_binder: Write failure EFAULT in pid:28
[  158.372952][ T6016] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.2001'.
[  158.427251][ T6024] netlink: 'syz.0.2004': attribute type 1 has an invalid length.
[  158.438695][   T36] audit: type=1400 audit(1759157297.592:484): avc:  denied  { mounton } for  pid=6021 comm="syz.3.2003" path="/9/file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  158.441027][ T6024] netlink: 'syz.0.2004': attribute type 3 has an invalid length.
[  158.594709][ T6029] binder: Unknown parameter 'contextÌðÔð[7’'
[  159.018640][ T6048] /dev/rnullb0: Can't open blockdev
[  159.047035][ T6062] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  159.062149][ T6064] fuse: Bad value for 'fd'
[  159.131361][ T6067] rust_binder: Write failure EFAULT in pid:326
[  159.315061][ T2000] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  159.486388][ T2000] usb 3-1: unable to get BOS descriptor or descriptor too short
[  159.494481][ T2000] usb 3-1: not running at top speed; connect to a high speed hub
[  159.504732][ T2000] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  159.513845][ T2000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.522116][ T2000] usb 3-1: Product: syz
[  159.526350][ T2000] usb 3-1: Manufacturer: syz
[  159.530960][ T2000] usb 3-1: SerialNumber: syz
[  159.837477][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.846958][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.855246][ T6064] binder: Unknown parameter ''
[  159.865721][ T2000] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  159.895084][  T817] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  159.895152][ T2000] usb 3-1: USB disconnect, device number 22
[  160.067106][  T817] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  160.075635][  T817] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  160.086015][  T817] usb 5-1: config 0 has no interface number 0
[  160.093550][  T817] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  160.102748][  T817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.110892][  T817] usb 5-1: Product: syz
[  160.116393][  T817] usb 5-1: Manufacturer: syz
[  160.120995][  T817] usb 5-1: SerialNumber: syz
[  160.126716][  T817] usb 5-1: config 0 descriptor??
[  160.448674][ T6134] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  160.456801][ T6134] rust_binder: Write failure EINVAL in pid:114
[  160.701673][ T6151] tipc: Started in network mode
[  160.713026][ T6151] tipc: Node identity ac14142f, cluster identity 4711
[  160.720329][ T6151] tipc: New replicast peer: 0.0.0.0
[  160.726211][ T6151] tipc: Enabled bearer <udp:syz2>, priority 10
[  161.815053][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  161.845052][  T346] tipc: Node number set to 2886997039
[  161.965111][   T10] usb 4-1: Using ep0 maxpacket: 16
[  161.971351][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.982483][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.992561][  T348] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  162.000207][   T10] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  162.009663][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.018862][   T10] usb 4-1: config 0 descriptor??
[  162.165056][  T348] usb 3-1: Using ep0 maxpacket: 16
[  162.171304][  T348] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  162.180528][  T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.189534][  T348] usb 3-1: config 0 descriptor??
[  162.195770][  T348] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  162.395640][  T348] usb 3-1: Detected FT232B
[  162.426619][   T10] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x1
[  162.435304][   T10] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  162.579909][  T817] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  162.595047][  T817] usb 5-1: No valid video chain found.
[  162.600691][  T348] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  162.609108][  T817] usb 5-1: USB disconnect, device number 22
[  162.615425][  T348] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  162.630642][ T6163] fuse: Unknown parameter 'I&@ì¼.´œÒϾÃ4—€×'
[  162.655203][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.664799][ T6163] /dev/rnullb0: Can't open blockdev
[  162.840584][ T6168] SELinux: failed to load policy
[  162.847407][ T6168] 9pnet_fd: Insufficient options for proto=fd
[  162.854364][  T817] usb 3-1: USB disconnect, device number 23
[  162.866573][  T817] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  162.883244][  T817] ftdi_sio 3-1:0.0: device disconnected
[  162.935049][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  162.935075][   T36] audit: type=1326 audit(1759157302.074:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.0.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045f8eec9 code=0x7fc00000
[  162.982484][ T6192] fuse: Bad value for 'group_id'
[  162.987621][ T6192] fuse: Bad value for 'group_id'
[  163.728849][ T6232] rust_binder: 369: no such ref 0
[  163.733950][ T6232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:369
[  163.801058][ T6228] cgroup: fork rejected by pids controller in /syz0
[  163.965073][  T346] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  164.125098][  T346] usb 5-1: Using ep0 maxpacket: 32
[  164.134788][  T346] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  164.150845][  T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.171029][  T346] usb 5-1: config 0 descriptor??
[  164.536153][ T6298] overlayfs: failed to clone upperpath
[  164.584009][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x0
[  164.591360][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x0
[  164.598693][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x3
[  164.606466][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x0
[  164.613987][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x0
[  164.621406][  T346] logitech 0003:046D:C29C.000B: unknown main item tag 0x0
[  164.630087][  T346] logitech 0003:046D:C29C.000B: hidraw1: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  164.650666][   T36] audit: type=1400 audit(1759157303.794:488): avc:  denied  { write } for  pid=6305 comm="syz.2.2075" name="file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  164.673247][   T46] Bluetooth: hci1: Frame reassembly failed (-84)
[  164.715070][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  164.715083][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  164.747433][   T36] audit: type=1400 audit(1759157303.894:489): avc:  denied  { mounton } for  pid=6308 comm="syz.0.2076" path="/505/file0" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  164.775827][   T36] audit: type=1400 audit(1759157303.894:490): avc:  denied  { setattr } for  pid=6308 comm="syz.0.2076" name="file0" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  164.784449][  T817] usb 4-1: USB disconnect, device number 4
[  164.811320][  T346] logitech 0003:046D:C29C.000B: no inputs found
[  164.817624][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2078'.
[  164.843536][  T346] usb 5-1: USB disconnect, device number 23
[  164.856343][ T6318] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  164.863691][ T6319] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  164.914231][ T6329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  164.914270][ T6329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156
[  165.225060][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  165.312013][   T36] audit: type=1400 audit(1759157304.454:491): avc:  denied  { unmount } for  pid=3426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  165.417475][   T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  165.427656][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.440056][   T10] usb 3-1: config 0 has no interface number 0
[  165.448064][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  165.457497][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.477602][   T10] usb 3-1: Product: syz
[  165.483771][   T10] usb 3-1: Manufacturer: syz
[  165.489008][   T10] usb 3-1: SerialNumber: syz
[  165.493788][ T6354] rust_binder: 375: no such ref 0
[  165.501473][   T10] usb 3-1: config 0 descriptor??
[  165.520701][ T6354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  165.528146][ T6354] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  165.553303][ T6356] netlink: 'syz.4.2094': attribute type 1 has an invalid length.
[  165.710096][ T6340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2088'.
[  165.726457][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.738105][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.764230][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  165.773400][   T10] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[  165.780012][   T10] usb 3-1: No valid video chain found.
[  165.790609][   T10] usb 3-1: USB disconnect, device number 24
[  165.823821][ T6378] netlink: 'syz.0.2103': attribute type 4 has an invalid length.
[  165.831638][ T6378] netlink: 'syz.0.2103': attribute type 5 has an invalid length.
[  165.839413][ T6378] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2103'.
[  166.003377][   T36] audit: type=1400 audit(1759157305.144:492): avc:  denied  { execute } for  pid=6391 comm="syz.0.2107" name="file0" dev="ramfs" ino=33500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  166.025345][   T36] audit: type=1400 audit(1759157305.144:493): avc:  denied  { execute_no_trans } for  pid=6391 comm="syz.0.2107" path="/file0" dev="ramfs" ino=33500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  166.110769][   T36] audit: type=1400 audit(1759157305.254:494): avc:  denied  { execute } for  pid=6393 comm="syz.0.2108" path="/521/bus" dev="tmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  166.271521][   T36] audit: type=1400 audit(1759157305.414:495): avc:  denied  { setattr } for  pid=5051 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  166.704687][   T36] audit: type=1326 audit(1759157305.844:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a118eec9 code=0x7fc00000
[  166.715259][   T54] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  167.000380][ T6444] overlayfs: failed to clone upperpath
[  167.075621][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'.
[  167.835106][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  167.835388][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  168.007363][ T6481] fuse: Bad value for 'fd'
[  168.013172][   T36] kauditd_printk_skb: 21 callbacks suppressed
[  168.013191][   T36] audit: type=1400 audit(1759157307.154:518): avc:  denied  { create } for  pid=6480 comm="syz.0.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  168.115161][ T6490] SELinux:  Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped).
[  168.125370][   T36] audit: type=1400 audit(1759157307.274:519): avc:  denied  { relabelto } for  pid=6489 comm="syz.0.2143" name="file0" dev="tmpfs" ino=3016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0"
[  168.164738][   T36] audit: type=1400 audit(1759157307.274:520): avc:  denied  { associate } for  pid=6489 comm="syz.0.2143" name="file0" dev="tmpfs" ino=3016 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0"
[  168.268690][ T6501] batadv_slave_0: mtu less than device minimum
[  168.283771][ T6501] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  168.292603][ T6501] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  168.415313][ T6516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.415353][ T6516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  168.612966][ T6537] cgroup: name respecified
[  168.640212][ T6542] rust_binder: Got transaction with invalid offset.
[  168.640258][ T6542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.645992][ T6540] overlayfs: failed to clone upperpath
[  168.651558][ T6542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396
[  168.885050][  T346] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  169.055036][  T346] usb 5-1: Using ep0 maxpacket: 32
[  169.065306][  T346] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  169.076908][  T346] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1024
[  169.097339][  T346] usb 5-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  169.125035][  T346] usb 5-1: config 1 interface 0 has no altsetting 0
[  169.143448][  T346] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  169.152815][  T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.172862][  T346] usb 5-1: Product: Ц
[  169.177027][  T346] usb 5-1: Manufacturer: 《
[  169.181651][  T346] usb 5-1: SerialNumber: ᵪ爫ꌄ祢覄���「書ﻈ�套媌㈛퉩늲팳�냕嬨禱
[  169.216254][ T6541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  169.233587][ T6541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  169.455380][  T346] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  169.473961][  T346] usb 5-1: USB disconnect, device number 24
[  170.045659][ T6579] netlink: 'syz.0.2174': attribute type 29 has an invalid length.
[  170.142736][ T6591] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  170.171792][ T6593] netlink: 'syz.4.2180': attribute type 1 has an invalid length.
[  170.195462][ T6593] rust_binder: Got transaction with invalid offset.
[  170.195563][ T6593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.202221][ T6593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399
[  170.225869][ T6595] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.432112][ T6609] rust_binder: Error while translating object.
[  170.438806][ T6609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  170.445081][ T6609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:93
[  170.494018][ T6612] bridge0: port 3(veth0_to_team) entered blocking state
[  170.516001][ T6612] bridge0: port 3(veth0_to_team) entered disabled state
[  170.523046][ T6612] veth0_to_team: entered allmulticast mode
[  170.529665][ T6612] veth0_to_team: entered promiscuous mode
[  170.536040][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'.
[  170.552012][ T6611] veth0_to_team: left allmulticast mode
[  170.571046][ T6611] veth0_to_team: left promiscuous mode
[  170.576728][ T6611] bridge0: port 3(veth0_to_team) entered disabled state
[  170.584469][ T6611] bridge_slave_1: left allmulticast mode
[  170.594273][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  170.602133][ T6611] bridge_slave_1: left promiscuous mode
[  170.607905][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.615723][ T6611] bridge_slave_0: left allmulticast mode
[  170.621485][ T6611] bridge_slave_0: left promiscuous mode
[  170.628012][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.636188][ T6616] rust_binder: 411: no such ref 0
[  170.650573][ T6616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:411
[  170.679036][ T6616] netlink: 'syz.4.2186': attribute type 27 has an invalid length.
[  170.696213][ T6616] lo: entered promiscuous mode
[  170.701078][ T6616] lo: entered allmulticast mode
[  170.707419][ T6616] tunl0: entered promiscuous mode
[  170.712561][ T6616] tunl0: entered allmulticast mode
[  170.718448][ T6616] gre0: entered promiscuous mode
[  170.723505][ T6616] gre0: entered allmulticast mode
[  170.732146][ T6616] gretap0: entered promiscuous mode
[  170.737615][ T6616] gretap0: entered allmulticast mode
[  170.743662][ T6616] erspan0: entered promiscuous mode
[  170.749932][ T6616] erspan0: entered allmulticast mode
[  170.756144][ T6616] ip_vti0: entered promiscuous mode
[  170.761456][ T6616] ip_vti0: entered allmulticast mode
[  170.767646][ T6616] ip6_vti0: entered promiscuous mode
[  170.773040][ T6616] ip6_vti0: entered allmulticast mode
[  170.779149][ T6616] sit0: entered allmulticast mode
[  170.794277][ T6616] ip6tnl0: entered promiscuous mode
[  170.799658][ T6616] ip6tnl0: entered allmulticast mode
[  170.805737][ T6616] ip6gre0: entered promiscuous mode
[  170.811106][ T6616] ip6gre0: entered allmulticast mode
[  170.817136][ T6616] syz_tun: entered promiscuous mode
[  170.822577][ T6616] syz_tun: entered allmulticast mode
[  170.829110][ T6616] ip6gretap0: entered promiscuous mode
[  170.834718][ T6616] ip6gretap0: entered allmulticast mode
[  170.841242][ T6616] bridge0: entered promiscuous mode
[  170.846753][ T6616] bridge0: entered allmulticast mode
[  170.852984][ T6616] vcan0: entered promiscuous mode
[  170.858610][ T6616] vcan0: entered allmulticast mode
[  170.863959][ T6616] dummy0: entered promiscuous mode
[  170.869603][ T6616] dummy0: entered allmulticast mode
[  170.875587][ T6616] veth0: entered promiscuous mode
[  170.880785][ T6616] veth0: entered allmulticast mode
[  170.887212][ T6616] veth1: entered promiscuous mode
[  170.892446][ T6616] veth1: entered allmulticast mode
[  170.898709][ T6616] wg0: entered promiscuous mode
[  170.903728][ T6616] wg0: entered allmulticast mode
[  170.909432][ T6616] wg1: entered promiscuous mode
[  170.914456][ T6616] wg1: entered allmulticast mode
[  170.920433][ T6616] wg2: entered promiscuous mode
[  170.925896][ T6616] wg2: entered allmulticast mode
[  170.931389][ T6616] veth0_to_bridge: entered promiscuous mode
[  170.937787][ T6616] veth0_to_bridge: entered allmulticast mode
[  170.945444][ T6616] veth1_to_bridge: entered promiscuous mode
[  170.951516][ T6616] veth1_to_bridge: entered allmulticast mode
[  170.959254][ T6616] veth0_to_bond: entered promiscuous mode
[  170.965697][ T6616] veth0_to_bond: entered allmulticast mode
[  170.972404][ T6616] bond_slave_0: entered promiscuous mode
[  170.985545][ T6616] bond_slave_0: entered allmulticast mode
[  170.994086][ T6616] veth1_to_bond: entered promiscuous mode
[  171.003864][ T6616] veth1_to_bond: entered allmulticast mode
[  171.010886][ T6616] bond_slave_1: entered promiscuous mode
[  171.016953][ T6616] bond_slave_1: entered allmulticast mode
[  171.030954][ T6616] veth0_to_team: entered promiscuous mode
[  171.041142][ T6616] veth0_to_team: entered allmulticast mode
[  171.049320][ T6616] team_slave_0: entered promiscuous mode
[  171.055397][ T6616] team_slave_0: entered allmulticast mode
[  171.062114][ T6616] veth1_to_team: entered promiscuous mode
[  171.068654][ T6616] veth1_to_team: entered allmulticast mode
[  171.088366][ T6616] team_slave_1: entered promiscuous mode
[  171.094259][ T6616] team_slave_1: entered allmulticast mode
[  171.101203][ T6616] veth0_to_batadv: entered promiscuous mode
[  171.107775][ T6616] veth0_to_batadv: entered allmulticast mode
[  171.114675][ T6616] batadv_slave_0: entered promiscuous mode
[  171.121120][ T6616] batadv_slave_0: entered allmulticast mode
[  171.144827][ T6616] veth1_to_batadv: entered promiscuous mode
[  171.158443][ T6616] veth1_to_batadv: entered allmulticast mode
[  171.175076][ T6616] batadv_slave_1: entered promiscuous mode
[  171.187808][ T6616] batadv_slave_1: entered allmulticast mode
[  171.194640][ T6616] veth0_to_hsr: entered promiscuous mode
[  171.201570][ T6616] veth0_to_hsr: entered allmulticast mode
[  171.208186][ T6616] hsr_slave_0: entered promiscuous mode
[  171.213879][ T6616] hsr_slave_0: entered allmulticast mode
[  171.231265][ T6616] veth1_to_hsr: entered promiscuous mode
[  171.238097][ T6616] veth1_to_hsr: entered allmulticast mode
[  171.244655][ T6616] hsr_slave_1: entered promiscuous mode
[  171.250538][ T6616] hsr_slave_1: entered allmulticast mode
[  171.257540][ T6616] veth1_virt_wifi: entered promiscuous mode
[  171.267551][ T6616] veth1_virt_wifi: entered allmulticast mode
[  171.275925][ T6616] veth0_virt_wifi: entered promiscuous mode
[  171.282054][ T6616] veth0_virt_wifi: entered allmulticast mode
[  171.289576][ T6616] veth1_vlan: entered promiscuous mode
[  171.295647][ T6616] veth1_vlan: entered allmulticast mode
[  171.301989][ T6616] veth0_vlan: entered allmulticast mode
[  171.309145][ T6616] vlan0: entered promiscuous mode
[  171.314357][ T6616] vlan0: entered allmulticast mode
[  171.320738][ T6616] vlan1: entered promiscuous mode
[  171.326327][ T6616] vlan1: entered allmulticast mode
[  171.332206][ T6616] veth1_macvtap: entered allmulticast mode
[  171.339312][ T6616] veth0_macvtap: entered promiscuous mode
[  171.345841][ T6616] veth0_macvtap: entered allmulticast mode
[  171.352512][ T6616] macsec0: entered promiscuous mode
[  171.358723][ T6616] macsec0: entered allmulticast mode
[  171.364744][ T6616] syztnl0: entered promiscuous mode
[  171.370510][ T6616] syztnl0: entered allmulticast mode
[  171.383646][ T6634] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  171.392478][ T6635] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  171.455972][ T6646] Dead loop on virtual device ip6_vti0, fix it urgently!
[  171.937604][ T6660] binder: Unknown parameter 'defcontext01777777777777777777777'
[  171.945696][ T6660] rust_binder: Failed to allocate buffer. len:64, is_oneway:true
[  172.149894][   T36] audit: type=1400 audit(1759157311.294:521): avc:  denied  { read } for  pid=6663 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  172.205073][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  172.230422][ T6665] fuse: Unknown parameter '0x00002000000006c0'
[  172.355054][   T10] usb 5-1: Using ep0 maxpacket: 16
[  172.361499][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  172.370738][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.381191][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  172.390409][   T10] usb 5-1: config 1 has no interface number 1
[  172.397066][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  172.410187][   T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.429709][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.439108][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.447359][   T10] usb 5-1: Product: syz
[  172.451633][   T10] usb 5-1: Manufacturer: syz
[  172.456548][   T10] usb 5-1: SerialNumber: syz
[  172.635101][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  172.641492][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  172.665049][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'.
[  172.682334][   T10] usb 5-1: USB disconnect, device number 25
[  172.698614][  T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  173.470511][ T6678] rust_binder: Error while translating object.
[  173.470557][ T6678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  173.476973][ T6678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422
[  173.547151][   T36] audit: type=1400 audit(1759157312.694:522): avc:  denied  { remove_name } for  pid=6680 comm="syz.4.2211" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.579169][   T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  173.625086][   T36] audit: type=1400 audit(1759157312.694:523): avc:  denied  { unlink } for  pid=6680 comm="syz.4.2211" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  173.758186][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  173.775053][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  173.805048][   T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  173.814164][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.835794][   T31] usb 4-1: config 0 descriptor??
[  173.841076][ T6676] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.865851][   T31] usbhid 4-1:0.0: can't add hid device: -22
[  173.873903][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  174.834322][ T6693] rust_binder: Error while translating object.
[  174.834367][ T6693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  174.840959][ T6693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:434
[  175.169319][ T6700] binder: Binderfs stats mode cannot be changed during a remount
[  176.119139][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.135478][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.149282][ T6724] bridge_slave_0: entered allmulticast mode
[  176.162561][ T6724] bridge_slave_0: entered promiscuous mode
[  176.176180][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.192157][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.209543][ T6724] bridge_slave_1: entered allmulticast mode
[  176.222706][ T6724] bridge_slave_1: entered promiscuous mode
[  176.335149][   T45] usb 4-1: USB disconnect, device number 5
[  176.377156][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.384289][ T6724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.391659][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.398748][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.435357][ T6735] netlink: 'syz.3.2228': attribute type 16 has an invalid length.
[  176.443247][ T6735] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2228'.
[  176.494210][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.505432][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.529363][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.536469][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.544046][ T6736] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614)
[  176.544074][ T6736] rust_binder: Error while translating object.
[  176.549097][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.569406][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.572169][ T6736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  176.584292][ T6736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110
[  176.660375][ T6724] veth0_vlan: entered promiscuous mode
[  176.716163][ T6724] veth1_macvtap: entered promiscuous mode
[  176.919038][ T6745] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  176.919070][ T6745] rust_binder: Error while translating object.
[  176.940884][ T6745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  176.954927][ T6745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[  177.027843][ T6751] tipc: Started in network mode
[  177.042068][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.053282][ T6751] tipc: Node identity ba9435dc9959, cluster identity 4711
[  177.055035][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.061221][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.077950][ T6750] tipc: Disabling bearer <eth:syzkaller0>
[  177.255837][ T6765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  177.255875][ T6765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:115
[  177.296694][ T6767] input: syz0 as /devices/virtual/input/input10
[  177.485040][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  177.575060][  T346] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  177.656765][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  177.666599][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  177.680827][   T10] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  177.690138][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.698375][   T10] usb 5-1: Product: syz
[  177.702562][   T10] usb 5-1: Manufacturer: syz
[  177.707428][   T10] usb 5-1: SerialNumber: syz
[  177.712918][   T10] usb 5-1: config 0 descriptor??
[  177.718542][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.725909][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.736140][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.747178][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17598, setting to 1024
[  177.759239][  T346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.772399][  T346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.781743][  T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.791881][  T346] usb 4-1: config 0 descriptor??
[  177.797420][ T6771] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  177.934000][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.941347][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  178.206975][  T346] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xe
[  178.216838][  T346] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  178.224563][  T346] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  178.249372][  T346] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  178.486105][   T31] usb 4-1: USB disconnect, device number 6
[  178.552640][   T10] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  179.115057][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  179.115057][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  179.306336][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'.
[  179.315454][ T6782] bridge_slave_1: left allmulticast mode
[  179.321631][ T6782] bridge_slave_1: left promiscuous mode
[  179.327738][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.335764][ T6782] bridge_slave_0: left allmulticast mode
[  179.341585][ T6782] bridge_slave_0: left promiscuous mode
[  179.347831][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.673772][   T36] audit: type=1400 audit(1759157318.814:524): avc:  denied  { mounton } for  pid=6795 comm="syz.3.2245" path="/file0/file0" dev="ramfs" ino=34806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  179.699063][ T6796] rust_binder: 6796 RLIMIT_NICE not set
[  179.717573][   T10] rust_binder: 6795: removing orphan mapping 0:1048
[  179.746065][ T6798] rust_binder: 133: no such ref 0
[  179.755224][ T6798] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  179.762487][ T6798] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  179.805817][ T6800] rust_binder: 133: no such ref 0
[  179.810996][ T6799] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  179.835094][ T6799] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  179.942641][ T6803] rust_binder: 6802 RLIMIT_NICE not set
[  179.942962][ T6802] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  179.975104][ T6802] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  179.975135][ T6802] rust_binder: Read failure Err(EFAULT) in pid:137
[  180.003499][   T45] rust_binder: 6801: removing orphan mapping 0:24
[  180.114425][ T6807] kvm: pic: non byte write
[  180.131465][ T6807] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  180.240293][   T45] usb 5-1: USB disconnect, device number 26
[  180.336093][ T6808] rust_binder: Error in use_page_slow: ESRCH
[  180.336120][ T6808] rust_binder: use_range failure ESRCH
[  180.342170][ T6808] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  180.362276][ T6812] rust_binder: Error in use_page_slow: ESRCH
[  180.370451][ T6808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  180.378307][ T6812] rust_binder: use_range failure ESRCH
[  180.392962][ T6808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:142
[  180.399067][ T6812] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  180.408514][ T6812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  180.417679][ T6812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:142
[  180.642340][ T6827] rust_binder: Error while translating object.
[  180.651572][ T6827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  180.657832][ T6827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36
[  180.776775][ T6834] binder: Binderfs stats mode cannot be changed during a remount
[  181.055102][   T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  181.091990][ T6847] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  181.092021][ T6847] rust_binder: Error while translating object.
[  181.102881][ T6847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  181.109352][ T6847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150
[  181.216396][   T45] usb 1-1: Using ep0 maxpacket: 16
[  181.237222][   T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  181.246389][   T45] usb 1-1: config 1 has no interface number 1
[  181.252514][   T45] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  181.263387][   T45] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  181.276410][   T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  181.288970][   T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.298275][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.306319][   T45] usb 1-1: Product: syz
[  181.310627][   T45] usb 1-1: Manufacturer: syz
[  181.315293][   T45] usb 1-1: SerialNumber: syz
[  181.581389][   T36] audit: type=1326 audit(1759157320.724:525): auid=4294967295 uid=0 gid=10 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.4.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9f8eec9 code=0x7ffc0000
[  181.645104][   T36] audit: type=1326 audit(1759157320.754:526): auid=4294967295 uid=0 gid=10 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.4.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bf9f8eec9 code=0x7ffc0000
[  181.657563][ T6853] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  181.687962][   T36] audit: type=1326 audit(1759157320.754:527): auid=4294967295 uid=0 gid=10 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.4.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9f8eec9 code=0x7ffc0000
[  181.756216][   T45] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  181.764356][   T45] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82
[  181.783463][   T45] usb 1-1: USB disconnect, device number 25
[  181.819621][  T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  181.909127][   T36] audit: type=1400 audit(1759157321.054:528): avc:  denied  { create } for  pid=6870 comm="syz.4.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  181.931997][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.939340][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.947459][ T6859] bridge_slave_0: entered allmulticast mode
[  181.953904][ T6859] bridge_slave_0: entered promiscuous mode
[  181.960840][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.968470][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.975819][ T6859] bridge_slave_1: entered allmulticast mode
[  181.982251][ T6859] bridge_slave_1: entered promiscuous mode
[  182.010551][ T6878] random: crng reseeded on system resumption
[  182.010623][   T36] audit: type=1400 audit(1759157321.154:529): avc:  denied  { write } for  pid=6877 comm="syz.4.2272" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  182.043465][   T36] audit: type=1400 audit(1759157321.184:530): avc:  denied  { ioctl } for  pid=6877 comm="syz.4.2272" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  182.043796][ T6878] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  182.068743][ T6878] rust_binder: Write failure EINVAL in pid:495
[  182.085063][  T346] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  182.137132][  T330] bridge_slave_1: left allmulticast mode
[  182.142832][  T330] bridge_slave_1: left promiscuous mode
[  182.148511][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.156177][  T330] bridge_slave_0: left allmulticast mode
[  182.161868][  T330] bridge_slave_0: left promiscuous mode
[  182.167619][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.238122][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.245228][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.252533][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.256312][  T346] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  182.259611][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.271074][  T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  182.286184][  T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.287789][ T6885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.294217][  T346] usb 4-1: Product: syz
[  182.315292][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.325153][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.332538][  T346] usb 4-1: Manufacturer: syz
[  182.339434][  T346] usb 4-1: SerialNumber: syz
[  182.346900][ T6868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.356079][  T330] tipc: Disabling bearer <udp:syz2>
[  182.365297][  T330] tipc: Left network mode
[  182.376813][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.383903][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.400152][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.407262][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.416113][  T330] veth1_macvtap: left promiscuous mode
[  182.421789][  T330] veth0_vlan: left promiscuous mode
[  182.488753][   T36] audit: type=1400 audit(1759157321.634:531): avc:  denied  { create } for  pid=6903 comm="syz.0.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  182.540997][ T6859] veth0_vlan: entered promiscuous mode
[  182.558109][ T6859] veth1_macvtap: entered promiscuous mode
[  182.607915][  T346] usb 4-1: USB disconnect, device number 7
[  182.619681][   T36] audit: type=1400 audit(1759157321.764:532): avc:  denied  { write } for  pid=6913 comm="syz.5.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  182.785062][   T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  182.792720][ T2000] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  182.881574][ T6927] 8021q: VLANs not supported on ip_vti0
[  182.887249][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  182.921564][   T36] audit: type=1400 audit(1759157322.064:533): avc:  denied  { read } for  pid=6933 comm="syz.3.2288" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  182.966589][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.976892][ T2000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  182.988037][   T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  182.997018][ T2000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.006839][   T45] usb 1-1: config 1 has no interface number 0
[  183.012973][   T45] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.023985][ T2000] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  183.033079][   T45] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  183.044258][ T2000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.052492][   T45] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  183.055070][   T10] usb 6-1: Using ep0 maxpacket: 16
[  183.062125][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  183.068530][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  183.077904][ T2000] usb 5-1: config 0 descriptor??
[  183.090755][   T10] usb 6-1: config 1 has no interface number 1
[  183.091635][   T45] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.098477][   T10] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.118003][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  183.121870][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  183.130869][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.143330][   T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.151696][   T45] usb 1-1: Product: syz
[  183.164463][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.166754][   T45] usb 1-1: Manufacturer: syz
[  183.176244][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.180355][   T45] usb 1-1: SerialNumber: syz
[  183.188522][   T10] usb 6-1: Product: syz
[  183.196619][ T6908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  183.197536][   T10] usb 6-1: Manufacturer: syz
[  183.208866][   T10] usb 6-1: SerialNumber: syz
[  183.405487][ T6908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  183.513748][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.520701][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.527930][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.534753][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.541586][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.548449][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.555275][ T2000] isku 0003:1E7D:319C.000D: unknown main item tag 0x0
[  183.562992][ T2000] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  183.613230][ T6908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  183.620742][   T10] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  183.713870][ T2000] isku 0003:1E7D:319C.000D: couldn't init struct isku_device
[  183.721384][ T2000] isku 0003:1E7D:319C.000D: couldn't install keyboard
[  183.729140][ T2000] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -71
[  183.739615][ T2000] usb 5-1: USB disconnect, device number 27
[  183.821969][   T45] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[  183.823597][ T6908] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  183.828282][   T45] cdc_ncm 1-1:1.1: bind() failure
[  183.845636][   T45] usb 1-1: USB disconnect, device number 26
[  184.107434][ T6950] binder: Unknown parameter 'fsmagic'
[  184.269544][ T6967] input: syz1 as /devices/virtual/input/input11
[  184.275885][ T6967] input: failed to attach handler leds to device input11, error: -6
[  184.422039][   T10] usb 6-1: 2:1: cannot get freq at ep 0x82
[  184.440487][   T10] usb 6-1: USB disconnect, device number 2
[  184.452677][ T2094] udevd[2094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  184.536763][ T6978] fuse: Unknown parameter 'romtmode'
[  184.547995][ T2000] rust_binder: 0: removing orphan mapping 0:4120
[  184.636095][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  184.765088][   T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  184.786122][   T31] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.796022][   T31] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  184.808830][   T31] usb 4-1: config 0 interface 0 has no altsetting 0
[  184.816599][   T31] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  184.825685][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.834349][   T31] usb 4-1: config 0 descriptor??
[  184.916042][   T45] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  184.924371][   T45] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  184.934711][   T45] usb 5-1: config 220 has no interface number 2
[  184.941068][   T45] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  184.957211][   T45] usb 5-1: config 220 interface 0 has no altsetting 0
[  184.964069][   T45] usb 5-1: config 220 interface 76 has no altsetting 0
[  184.970972][   T45] usb 5-1: config 220 interface 1 has no altsetting 0
[  184.979178][   T45] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  184.988376][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.988417][  T348] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  184.996416][   T45] usb 5-1: Product: syz
[  185.008195][   T45] usb 5-1: Manufacturer: syz
[  185.012818][   T45] usb 5-1: SerialNumber: syz
[  185.145049][  T348] usb 1-1: Using ep0 maxpacket: 16
[  185.151497][  T348] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  185.160667][  T348] usb 1-1: config 1 has no interface number 1
[  185.166816][  T348] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  185.179810][  T348] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.192141][  T348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  185.201297][  T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.209368][  T348] usb 1-1: Product: syz
[  185.213558][  T348] usb 1-1: Manufacturer: syz
[  185.218203][  T348] usb 1-1: SerialNumber: syz
[  185.223864][   T45] usb 5-1: selecting invalid altsetting 0
[  185.230287][   T45] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  185.236824][   T45] usb 5-1: No valid video chain found.
[  185.247006][   T31] a4tech 0003:09DA:000A.000E: item fetching failed at offset 5/7
[  185.255866][   T45] usb 5-1: USB disconnect, device number 28
[  185.263411][   T31] a4tech 0003:09DA:000A.000E: parse failed
[  185.269921][   T31] a4tech 0003:09DA:000A.000E: probe with driver a4tech failed with error -22
[  185.445436][   T45] usb 4-1: USB disconnect, device number 8
[  185.627671][  T348] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  185.761464][ T7000] rust_binder: Write failure EFAULT in pid:529
[  185.762875][ T7002] rust_binder: Write failure EFAULT in pid:529
[  185.810439][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  185.810477][   T36] audit: type=1400 audit(1759157324.954:538): avc:  denied  { mounton } for  pid=7005 comm="syz.5.2312" path="/3/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  185.819390][ T7006] overlay: Unknown parameter 'userxattr:index'
[  185.905694][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  186.051985][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.060833][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.275115][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  186.445039][   T31] usb 4-1: Using ep0 maxpacket: 16
[  186.451380][   T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  186.460566][   T31] usb 4-1: config 1 has no interface number 1
[  186.466766][   T31] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  186.470891][  T348] usb 1-1: 2:1: cannot get freq at ep 0x82
[  186.479861][   T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  186.496689][   T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.502127][  T348] usb 1-1: USB disconnect, device number 27
[  186.521103][   T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.530676][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.539634][   T31] usb 4-1: Product: syz
[  186.544315][   T31] usb 4-1: Manufacturer: syz
[  186.549652][   T31] usb 4-1: SerialNumber: syz
[  186.905038][ T2000] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  186.971712][   T31] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  187.056154][ T2000] usb 5-1: config 66 has an invalid interface number: 105 but max is 0
[  187.064650][ T2000] usb 5-1: config 66 has no interface number 0
[  187.071099][ T2000] usb 5-1: config 66 interface 105 has no altsetting 0
[  187.079676][ T2000] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d
[  187.088907][ T2000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.097028][ T2000] usb 5-1: Product: syz
[  187.097289][ T7026] rust_binder: Write failure EFAULT in pid:79
[  187.101331][ T2000] usb 5-1: Manufacturer: syz
[  187.112561][ T2000] usb 5-1: SerialNumber: syz
[  187.375737][   T36] audit: type=1400 audit(1759157326.524:539): avc:  denied  { create } for  pid=7021 comm="syz.4.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  187.396330][   T36] audit: type=1400 audit(1759157326.534:540): avc:  denied  { write } for  pid=7021 comm="syz.4.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  187.405078][   T45] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  187.416752][   T36] audit: type=1400 audit(1759157326.534:541): avc:  denied  { nlmsg_write } for  pid=7021 comm="syz.4.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  187.606033][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  187.617048][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  187.629910][   T45] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  187.639023][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.647951][   T45] usb 1-1: config 0 descriptor??
[  187.653244][ T7032] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  187.661460][   T45] usbhid 1-1:0.0: can't add hid device: -22
[  187.667498][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  187.774929][   T31] usb 4-1: 2:1: cannot get freq at ep 0x82
[  187.786055][   T31] usb 4-1: USB disconnect, device number 9
[  187.885943][ T7032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7032 comm=syz.0.2321
[  187.915141][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  187.915320][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  187.946141][  T348] usb 1-1: USB disconnect, device number 28
[  187.965863][ T7039] binder: Bad value for 'max'
[  187.977688][ T2000] usb 5-1: USB disconnect, device number 29
[  188.511969][ T7067] 9pnet_fd: Insufficient options for proto=fd
[  188.535133][  T346] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  188.546745][   T36] audit: type=1400 audit(1759157327.684:542): avc:  denied  { map } for  pid=7069 comm="syz.4.2335" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  188.705035][ T2000] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  188.725199][  T346] usb 4-1: Using ep0 maxpacket: 16
[  188.731496][  T346] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  188.740806][  T346] usb 4-1: config 1 has no interface number 1
[  188.747147][  T346] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  188.758335][  T346] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  188.771516][  T346] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.784234][  T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.793598][  T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.801860][  T346] usb 4-1: Product: syz
[  188.806301][  T346] usb 4-1: Manufacturer: syz
[  188.810997][  T346] usb 4-1: SerialNumber: syz
[  188.815701][  T348] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  188.845063][ T2000] usb 1-1: device descriptor read/64, error -71
[  188.965030][  T348] usb 5-1: Using ep0 maxpacket: 16
[  188.971361][  T348] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  188.980465][  T348] usb 5-1: config 1 has no interface number 1
[  188.986610][  T348] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  188.997381][  T348] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  189.010311][  T348] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.022734][  T348] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  189.031851][  T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.039949][  T348] usb 5-1: Product: syz
[  189.044149][  T348] usb 5-1: Manufacturer: syz
[  189.048855][  T348] usb 5-1: SerialNumber: syz
[  189.085057][ T2000] usb 1-1: device descriptor read/64, error -71
[  189.240587][  T346] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  189.325052][ T2000] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  189.455057][ T2000] usb 1-1: device descriptor read/64, error -71
[  189.695061][ T2000] usb 1-1: device descriptor read/64, error -71
[  189.805142][ T2000] usb usb1-port1: attempt power cycle
[  190.042473][  T346] usb 4-1: 2:1: cannot get freq at ep 0x82
[  190.051800][  T346] usb 4-1: USB disconnect, device number 10
[  190.058609][  T348] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  190.145059][ T2000] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  190.176159][ T2000] usb 1-1: device descriptor read/8, error -71
[  190.207752][ T7082] /dev/rnullb0: Can't open blockdev
[  190.306122][ T2000] usb 1-1: device descriptor read/8, error -71
[  190.465227][ T7093] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  190.465253][ T7093] rust_binder: Read failure Err(EFAULT) in pid:52
[  190.476153][ T7093] GUP no longer grows the stack in syz.5.2341 (7093): 200000004000-20000000a000 (200000002000)
[  190.493133][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.5.2341 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c
[  190.493170][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  190.493185][ T7093] Call Trace:
[  190.493194][ T7093]  <TASK>
[  190.493206][ T7093]  __dump_stack+0x21/0x30
[  190.493260][ T7093]  dump_stack_lvl+0x10c/0x190
[  190.493292][ T7093]  ? __cfi_dump_stack_lvl+0x10/0x10
[  190.493316][ T7093]  ? find_vma+0xcd/0x110
[  190.493332][ T7093]  ? vma_is_secretmem+0x11/0x50
[  190.493364][ T7093]  dump_stack+0x19/0x20
[  190.493395][ T7093]  __get_user_pages+0x1e34/0x22d0
[  190.493432][ T7093]  ? populate_vma_page_range+0x230/0x230
[  190.493456][ T7093]  get_user_pages_remote+0x392/0xbe0
[  190.493478][ T7093]  ? __cfi_mtree_load+0x10/0x10
[  190.493495][ T7093]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  190.493523][ T7093]  ? __cfi_get_user_pages_remote+0x10/0x10
[  190.493555][ T7093]  __access_remote_vm+0x1e2/0x640
[  190.493583][ T7093]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  190.493609][ T7093]  ? access_remote_vm+0x60/0x60
[  190.493628][ T7093]  ? _raw_spin_lock+0x8c/0x120
[  190.493652][ T7093]  ? __cfi__raw_spin_lock+0x10/0x10
[  190.493682][ T7093]  access_remote_vm+0x39/0x60
[  190.493717][ T7093]  proc_pid_cmdline_read+0x4bb/0xbf0
[  190.493744][ T7093]  ? __cfi_proc_pid_cmdline_read+0x10/0x10
[  190.493767][ T7093]  ? bpf_lsm_file_permission+0xd/0x20
[  190.493796][ T7093]  vfs_readv+0x62b/0xa50
[  190.493825][ T7093]  ? __cfi_proc_pid_cmdline_read+0x10/0x10
[  190.493854][ T7093]  ? do_readv+0x2d0/0x2d0
[  190.493887][ T7093]  __x64_sys_preadv+0x197/0x2a0
[  190.493904][ T7093]  ? __cfi___x64_sys_preadv+0x10/0x10
[  190.493922][ T7093]  ? switch_fpu_return+0x12/0x20
[  190.493948][ T7093]  x64_sys_call+0x1ee9/0x2ee0
[  190.493986][ T7093]  do_syscall_64+0x58/0xf0
[  190.494012][ T7093]  ? clear_bhb_loop+0x50/0xa0
[  190.494035][ T7093]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  190.494062][ T7093] RIP: 0033:0x7ff86f78eec9
[  190.494080][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.494102][ T7093] RSP: 002b:00007ff870665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  190.494134][ T7093] RAX: ffffffffffffffda RBX: 00007ff86f9e5fa0 RCX: 00007ff86f78eec9
[  190.494152][ T7093] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000008
[  190.494167][ T7093] RBP: 00007ff86f811f91 R08: 0000000000000000 R09: 0000000000000000
[  190.494183][ T7093] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  190.494193][ T7093] R13: 00007ff86f9e6038 R14: 00007ff86f9e5fa0 R15: 00007ffff4016bc8
[  190.494209][ T7093]  </TASK>
[  190.753397][ T2000] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  190.767240][  T348] usb 5-1: 2:1: cannot get freq at ep 0x82
[  190.776055][ T2000] usb 1-1: device descriptor read/8, error -71
[  190.791620][  T348] usb 5-1: USB disconnect, device number 30
[  190.906245][ T2000] usb 1-1: device descriptor read/8, error -71
[  191.005112][   T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  191.018881][ T2000] usb usb1-port1: unable to enumerate USB device
[  191.037649][ T7108] binder: Unknown parameter '‰'
[  191.175089][   T31] usb 6-1: Using ep0 maxpacket: 16
[  191.181302][   T31] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  191.189529][   T31] usb 6-1: config 0 has no interface number 0
[  191.197086][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  191.206224][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.214236][   T31] usb 6-1: Product: syz
[  191.218424][   T31] usb 6-1: Manufacturer: syz
[  191.223033][   T31] usb 6-1: SerialNumber: syz
[  191.228368][   T31] usb 6-1: config 0 descriptor??
[  191.434101][   T31] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  191.440575][   T31] usb 6-1: No valid video chain found.
[  191.490212][ T7115] rust_binder: inc_ref_done called when no active inc_refs
[  191.543443][ T7116] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  191.559864][ T7116] overlayfs: missing 'lowerdir'
[  191.641418][  T348] usb 6-1: USB disconnect, device number 3
[  191.652730][ T7121] netlink: 'syz.5.2350': attribute type 1 has an invalid length.
[  191.779096][ T7123] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.780932][ T7125] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.787583][ T7123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221
[  191.809177][ T7127] netlink: 'syz.3.2352': attribute type 64 has an invalid length.
[  191.826223][ T7127] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2352'.
[  191.836185][ T7127] rust_binder: Write failure EINVAL in pid:225
[  192.169079][ T7136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  192.184469][ T7136] 9pnet_fd: Insufficient options for proto=fd
[  192.314770][ T7144] netlink: 'syz.4.2357': attribute type 4 has an invalid length.
[  192.322612][ T7144] netlink: 'syz.4.2357': attribute type 5 has an invalid length.
[  192.330660][ T7144] netlink: 'syz.4.2357': attribute type 1 has an invalid length.
[  192.420041][ T7150] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2359'.
[  192.832910][ T7171] rust_binder: Error while translating object.
[  192.832960][ T7171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  192.840052][ T7171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584
[  192.873292][ T7173] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.882798][ T7173] rust_binder: Write failure EINVAL in pid:587
[  192.978431][ T7187] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.984967][ T7187] rust_binder: Error in use_page_slow: ESRCH
[  192.991504][ T7187] rust_binder: use_range failure ESRCH
[  192.997531][ T7187] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  193.003027][ T7187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  193.011070][ T7187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112
[  193.021210][ T7189] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.030361][ T7188] rust_binder: Read failure Err(EAGAIN) in pid:112
[  193.049624][ T7192] netlink: 'syz.0.2371': attribute type 9 has an invalid length.
[  193.064635][ T7192] netlink: 'syz.0.2371': attribute type 46 has an invalid length.
[  193.073488][ T7192] rust_binder: 117: no such ref 0
[  193.165128][ T2000] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  193.316160][ T2000] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  193.324209][ T2000] usb 5-1: config 1 has no interface number 0
[  193.330409][ T2000] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  193.341941][ T2000] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  193.351804][ T2000] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  193.361831][ T2000] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.374255][ T2000] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  193.383370][ T2000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.391426][ T2000] usb 5-1: Product: syz
[  193.395638][ T2000] usb 5-1: Manufacturer: syz
[  193.400235][ T2000] usb 5-1: SerialNumber: syz
[  193.406217][ T7178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  193.413424][ T7178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  193.822882][ T7178] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  193.830150][ T7178] rust_binder: Write failure EINVAL in pid:589
[  193.830971][ T2000] usb 5-1: USB disconnect, device number 31
[  193.915107][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  193.915288][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  193.947181][ T7202] rust_binder: 122: no such ref 0
[  193.952303][ T7202] rust_binder: Write failure EINVAL in pid:122
[  193.952362][ T7207] rust_binder: 122: no such ref 1
[  194.038409][ T7217] random: crng reseeded on system resumption
[  194.117864][ T7213] rust_binder: Write failure EFAULT in pid:237
[  194.143544][   T36] audit: type=1400 audit(1759157333.284:543): avc:  denied  { lock } for  pid=7219 comm="syz.3.2380" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  194.148742][ T7220] EXT4-fs: dax option not supported
[  194.175242][ T7221] rust_binder: Error in use_page_slow: ESRCH
[  194.175266][ T7221] rust_binder: use_range failure ESRCH
[  194.181352][ T7220] rust_binder: Error in use_page_slow: ESRCH
[  194.181366][ T7221] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  194.187219][ T7220] rust_binder: use_range failure ESRCH
[  194.192938][ T7221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  194.201152][ T7220] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  194.206514][ T7221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:239
[  194.215899][ T7220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  194.232734][ T7220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:239
[  194.353846][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'.
[  194.372324][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.381403][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.408643][  T331] Bluetooth: hci0: Frame reassembly failed (-84)
[  194.910308][ T7233] batadv_slave_1: entered promiscuous mode
[  194.922733][ T7233] tipc: Started in network mode
[  194.928341][ T7233] tipc: Node identity c2544518fd0d, cluster identity 4711
[  194.935968][ T7233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.175053][   T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  195.268096][ T7239] veth1: entered allmulticast mode
[  195.275749][ T7238] veth1: left allmulticast mode
[  195.336496][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.346724][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.356565][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2391'.
[  195.365646][   T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  195.367679][ T7248] overlayfs: failed to clone upperpath
[  195.374719][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  195.374750][   T31] usb 1-1: SerialNumber: syz
[  195.535075][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  195.607610][   T31] usb 1-1: 0:2 : does not exist
[  195.612559][   T31] usb 1-1: unit 5: unexpected type 0x0b
[  195.621837][   T31] usb 1-1: USB disconnect, device number 33
[  195.632047][  T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  195.649829][ T7233] batadv_slave_1: left promiscuous mode
[  195.657485][ T7233] tipc: Disabling bearer <eth:syzkaller0>
[  195.695095][   T10] usb 4-1: Using ep0 maxpacket: 8
[  195.701659][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  195.710368][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.723598][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  195.732057][   T36] audit: type=1400 audit(1759157334.874:544): avc:  denied  { create } for  pid=7261 comm="syz.5.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  195.738206][   T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  195.764923][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.773156][   T10] usb 4-1: Product: syz
[  195.777517][   T10] usb 4-1: Manufacturer: syz
[  195.782143][   T10] usb 4-1: SerialNumber: syz
[  195.787908][   T10] usb 4-1: config 0 descriptor??
[  195.798878][   T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  195.815798][ T7099] udevd[7099]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  195.849924][ T7271] 9p: Unknown uid 00000000004294967295
[  196.000362][   T31] usb 4-1: USB disconnect, device number 11
[  196.241799][ T7310] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  196.241854][ T7311] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  196.475042][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  196.475672][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  196.493772][   T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  196.646656][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.657078][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  196.670278][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  196.679870][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.690375][   T10] usb 1-1: config 0 descriptor??
[  196.699876][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  197.027346][ T7327] binder: Unknown parameter 'dont_hash'
[  197.045099][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  197.113464][ T7336] block device autoloading is deprecated and will be removed.
[  197.130142][   T36] audit: type=1400 audit(1759157336.274:545): avc:  denied  { module_load } for  pid=7337 comm="syz.5.2425" path="/54/file0" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  197.130173][ T7338] Invalid ELF header len 1
[  197.196138][   T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  197.204278][   T10] usb 4-1: config 0 has no interface number 0
[  197.211865][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  197.221239][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.229301][   T10] usb 4-1: Product: syz
[  197.233590][   T10] usb 4-1: Manufacturer: syz
[  197.238256][   T10] usb 4-1: SerialNumber: syz
[  197.245155][   T10] usb 4-1: config 0 descriptor??
[  197.250325][   T36] audit: type=1400 audit(1759157336.394:546): avc:  denied  { read } for  pid=7309 comm="syz.0.2414" path="socket:[39699]" dev="sockfs" ino=39699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  197.304744][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  197.364623][ T7347] tc_dump_action: action bad kind
[  197.453544][   T36] audit: type=1400 audit(1759157336.594:547): avc:  denied  { shutdown } for  pid=7321 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  197.461618][   T10] usb 4-1: Found UVC 0.08 device syz (046d:0823)
[  197.482555][   T10] usb 4-1: No valid video chain found.
[  197.495253][   T10] usb 4-1: USB disconnect, device number 12
[  197.975445][   T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  197.985365][   T10] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  198.270378][ T7389] binder: Bad value for 'defcontext'
[  198.315061][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  198.465102][   T10] usb 5-1: Using ep0 maxpacket: 16
[  198.471419][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.483295][   T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  198.492403][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.501085][   T10] usb 5-1: config 0 descriptor??
[  198.525100][   T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  198.675067][   T31] usb 4-1: Using ep0 maxpacket: 8
[  198.681519][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  198.689953][   T31] usb 4-1: config 9 has an invalid interface number: 97 but max is 0
[  198.698104][   T31] usb 4-1: config 9 has no interface number 0
[  198.704209][   T31] usb 4-1: config 9 interface 97 has no altsetting 0
[  198.712387][   T31] usb 4-1: New USB device found, idVendor=8550, idProduct=03bc, bcdDevice=8d.d4
[  198.721801][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.729840][   T31] usb 4-1: Product: syz
[  198.734018][   T31] usb 4-1: Manufacturer: syz
[  198.738704][   T31] usb 4-1: SerialNumber: syz
[  198.909975][   T10] uclogic 0003:28BD:0042.0010: interface is invalid, ignoring
[  198.943394][   T36] audit: type=1400 audit(1759157338.084:548): avc:  denied  { create } for  pid=7407 comm="syz.5.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  198.963705][ T7391] rust_binder: Error while translating object.
[  198.963756][ T7391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  198.970394][ T7391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[  198.987586][   T31] usb 4-1: USB disconnect, device number 13
[  199.110594][ T7384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  199.110634][ T7384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:613
[  199.120834][   T45] usb 5-1: USB disconnect, device number 32
[  199.355087][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  199.355361][ T1272] Bluetooth: hci0: command 0x1003 tx timeout
[  199.368291][   T10] usb 1-1: USB disconnect, device number 34
[  199.382445][ T7415] overlayfs: missing 'lowerdir'
[  199.388244][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'.
[  199.449102][ T7421] /dev/rnullb0: Can't open blockdev
[  199.644084][   T36] audit: type=1400 audit(1759157338.784:549): avc:  denied  { append } for  pid=7433 comm="syz.4.2455" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.645904][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'.
[  199.680471][  T331] Bluetooth: hci0: Frame reassembly failed (-84)
[  199.683225][   T36] audit: type=1400 audit(1759157338.834:550): avc:  denied  { map } for  pid=7433 comm="syz.4.2455" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  199.687114][  T331] Bluetooth: hci0: Frame reassembly failed (-84)
[  199.735038][   T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  199.871831][   T36] audit: type=1400 audit(1759157339.014:551): avc:  denied  { lock } for  pid=7442 comm="syz.5.2458" path="socket:[40873]" dev="sockfs" ino=40873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  199.905208][   T45] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  199.913522][   T45] usb 4-1: config 0 has no interface number 0
[  199.922966][   T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  199.932343][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.940594][   T45] usb 4-1: Product: syz
[  199.944862][   T45] usb 4-1: Manufacturer: syz
[  199.949712][   T45] usb 4-1: SerialNumber: syz
[  199.962559][   T45] usb 4-1: config 0 descriptor??
[  200.336018][ T7488] tmpfs: Too few inodes for current use
[  200.341894][ T7488] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  200.350408][ T7488] rust_binder: Write failure EINVAL in pid:628
[  200.771204][ T7431] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  200.810338][   T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  200.824309][   T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  200.840460][   T45] asix 4-1:0.251: probe with driver asix failed with error -71
[  200.853476][   T45] usb 4-1: USB disconnect, device number 14
[  200.896348][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.896379][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.902912][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.909637][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.916316][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.923057][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.929779][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.936423][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.947625][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.959517][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.023057][ T7546] 9pnet_fd: Insufficient options for proto=fd
[  201.057354][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2493'.
[  201.092663][   T36] audit: type=1400 audit(1759157340.234:552): avc:  denied  { connect } for  pid=7551 comm="syz.3.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  201.142630][ T7561] ------------[ cut here ]------------
[  201.148181][ T7561] WARNING: CPU: 0 PID: 7561 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  201.157622][ T7561] Modules linked in:
[  201.161543][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.3.2497 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c
[  201.173223][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  201.183368][ T7561] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  201.189326][ T7561] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 24 ee 05 00 0f 85 be 00 00 00 c6 05 25 24 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  201.209104][ T7561] RSP: 0018:ffffc900022879a0 EFLAGS: 00010246
[  201.215070][   T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  201.215354][ T7561] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000
[  201.230808][ T7561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002287a58
[  201.238860][ T7561] RBP: ffffc90002287ac8 R08: ffffc90002287a57 R09: 0000000000000000
[  201.246910][ T7561] R10: ffffc90002287a40 R11: fffff52000450f4b R12: ffffc900022879e0
[  201.254926][ T7561] R13: dffffc0000000000 R14: 1ffff92000450f38 R15: 0000000000000000
[  201.262978][ T7561] FS:  00007f01a1fea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  201.272074][ T7561] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.278799][ T7561] CR2: 0000000000000000 CR3: 0000000129b02000 CR4: 00000000003526b0
[  201.286850][ T7561] Call Trace:
[  201.290158][ T7561]  <TASK>
[  201.293169][ T7561]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  201.298985][ T7561]  ? futex_wait_setup+0x1bc/0x260
[  201.304074][ T7561]  ? __futex_wait+0x218/0x2a0
[  201.308820][ T7561]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  201.315054][ T7561]  ___kmalloc_large_node+0x81/0x220
[  201.320277][ T7561]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  201.326475][ T7561]  __kmalloc_large_node_noprof+0x1e/0xe0
[  201.332139][ T7561]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  201.338348][ T7561]  __kmalloc_noprof+0x26d/0x450
[  201.343229][ T7561]  ? __kasan_check_write+0x18/0x20
[  201.348396][ T7561]  pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  201.354420][ T7561]  ? futex_setup_timer+0xb4/0xd0
[  201.359452][ T7561]  ? futex_wait+0x29a/0x7a0
[  201.363991][ T7561]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  201.370549][ T7561]  ? selinux_file_ioctl+0x6e0/0x1360
[  201.375058][   T31] usb 5-1: Using ep0 maxpacket: 16
[  201.375893][ T7561]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  201.382593][   T31] usb 5-1: config 4 has an invalid interface number: 215 but max is 0
[  201.386585][ T7561]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  201.395330][   T31] usb 5-1: config 4 has no interface number 0
[  201.400001][ T7561]  ? _raw_spin_lock+0x8c/0x120
[  201.408128][   T31] usb 5-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b
[  201.410869][ T7561]  ? do_futex+0x309/0x500
[  201.420413][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.424307][ T7561]  ? __kasan_check_write+0x18/0x20
[  201.432724][   T31] usb 5-1: Product: syz
[  201.437473][ T7561]  ? __cfi_do_futex+0x10/0x10
[  201.441958][   T31] usb 5-1: Manufacturer: syz
[  201.446349][ T7561]  ? __fget_files+0x2c5/0x340
[  201.451347][   T31] usb 5-1: SerialNumber: syz
[  201.455684][ T7561]  ? bpf_lsm_file_ioctl+0xd/0x20
[  201.465261][ T7561]  ? security_file_ioctl+0x34/0xd0
[  201.470382][ T7561]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  201.476878][ T7561]  __se_sys_ioctl+0x132/0x1b0
[  201.481949][ T7561]  __x64_sys_ioctl+0x7f/0xa0
[  201.486624][ T7561]  x64_sys_call+0x1878/0x2ee0
[  201.491394][ T7561]  do_syscall_64+0x58/0xf0
[  201.495877][ T7561]  ? clear_bhb_loop+0x50/0xa0
[  201.500589][ T7561]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  201.506547][ T7561] RIP: 0033:0x7f01a118eec9
[  201.510996][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.530708][ T7561] RSP: 002b:00007f01a1fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.539204][ T7561] RAX: ffffffffffffffda RBX: 00007f01a13e5fa0 RCX: 00007f01a118eec9
[  201.547315][ T7561] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004
[  201.555352][ T7561] RBP: 00007f01a1211f91 R08: 0000000000000000 R09: 0000000000000000
[  201.563373][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.571410][ T7561] R13: 00007f01a13e6038 R14: 00007f01a13e5fa0 R15: 00007fff93ed97a8
[  201.579467][ T7561]  </TASK>
[  201.582506][ T7561] ---[ end trace 0000000000000000 ]---
[  201.680971][  T331] Bluetooth: hci1: Frame reassembly failed (-84)
[  201.755056][ T1273] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  201.755066][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  203.755044][ T1272] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  203.761201][ T1273] Bluetooth: hci1: command 0x1003 tx timeout
[  203.770800][   T31] hub 5-1:4.215: bad descriptor, ignoring hub
[  203.776951][   T31] hub 5-1:4.215: probe with driver hub failed with error -5
[  203.784372][   T31] usb 5-1: bad CDC descriptors
[  203.806175][   T31] usb 5-1: USB disconnect, device number 33