last executing test programs:

6m29.783315376s ago: executing program 1 (id=1043):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/25, 0x19, 0x0, 0x3a}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x10}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x6, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) (async)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async)
keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/25, 0x19, 0x0, 0x3a}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) (async)

6m29.732509167s ago: executing program 1 (id=1044):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r0, 0x29, 0x4, 0x0, 0x0) (async)
setsockopt(r0, 0x29, 0x4, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private1, @in6}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r3, &(0x7f0000000480)='./file0\x00')
write(r2, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc)
accept$inet(0xffffffffffffffff, 0x0, 0x0) (async)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf2503000000080006000000000008000b007e7dca4b7f21165dbbb491f9e9bcb9ad9684c18c57b966d4973d89f401bbf0d69aacdd2c32003e201369552610ba52c67c0bd9f2837948e24274f7f8a8528a9f5a11f8c651828b9c292e01611a165d1ed684e0e3dab347eb79194764f234", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012"], 0x26}}, 0x0)
lsm_set_self_attr(0x65, 0x0, 0x0, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
socket(0x15, 0x5, 0xf9c)
vmsplice(r8, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0) (async)
close_range(r7, 0xffffffffffffffff, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0)
futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}, {0x40, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)

6m29.698707797s ago: executing program 1 (id=1045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
ppoll(&(0x7f0000000100)=[{r1, 0x50}], 0x1, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

6m28.828398641s ago: executing program 1 (id=1056):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
close(0x3) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
fchdir(r3) (async)
mkdir(&(0x7f0000000100)='./control\x00', 0x0) (async)
rmdir(&(0x7f0000000040)='./control\x00') (async, rerun: 64)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async, rerun: 64)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x5) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0)
dup3(r2, r5, 0x0)

6m28.750263532s ago: executing program 1 (id=1058):
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00])
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r1, 0x10001, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)

6m28.549822885s ago: executing program 1 (id=1059):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000001c0)={0x43, 0x2, &(0x7f0000000840)="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"})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

6m28.443077327s ago: executing program 32 (id=1059):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000001c0)={0x43, 0x2, &(0x7f0000000840)="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"})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

3m24.697439357s ago: executing program 4 (id=4000):
r0 = socket$pptp(0x18, 0x1, 0x2)
accept(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

3m24.644749878s ago: executing program 4 (id=4001):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51)
sendto$inet(r1, &(0x7f0000000700)="1ede55aa6d3e592729d4017273db3c80c7d4bd1b385095a92fbbf21fd438", 0x1e, 0x40011, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
shutdown(r1, 0x1) (async)
shutdown(r1, 0x1)
read(r0, &(0x7f0000000080)=""/93, 0xffffff6c)

3m24.644223758s ago: executing program 4 (id=4002):
openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
read$FUSE(r0, 0x0, 0x0) (async)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x6a400, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r7 = syz_usb_connect$hid(0x2, 0xffffff06, &(0x7f0000000040)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xf4f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa6, 0x2}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x801}}]}) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0xb, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0xa799, 0x1, 0x8000000000000001, 0x9}, {0x2, 0x40000000001, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x350753, 0x1004}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "2c95"}}, 0x0, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xec, 0x1, {0x22, 0xc78}}}}, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syz_open_dev$evdev(0x0, 0x4, 0x20)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x4000003, 0x418e, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x1}, &(0x7f0000000540)={0x400000000001f, 0x8, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x437dad84}, 0x0, 0x0, 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

3m24.644039188s ago: executing program 4 (id=4003):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040)=0x80000001, 0x4)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x69, 0x0, 0x1, 0x8}}], 0x18}, 0xc804)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00'])

3m24.636596898s ago: executing program 4 (id=4004):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0x8008b705, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m24.49283378s ago: executing program 4 (id=4006):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a041, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000340))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r2, 0x1, 0x31, 0x0, &(0x7f00000040c0))
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x8001}, 0x8)
setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"})

3m24.456989461s ago: executing program 33 (id=4006):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a041, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000340))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r2, 0x1, 0x31, 0x0, &(0x7f00000040c0))
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x8001}, 0x8)
setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"})

2m52.032980437s ago: executing program 2 (id=4508):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4)

2m52.025277347s ago: executing program 2 (id=4509):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x8, 0x8003}, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000000c0), 0x4)
sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r2, 0x0, 0x0, 0x12000000, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={@broadcast, 0x0, 0x0, 0xa0, 0x0, [{@multicast2}, {@loopback}, {@empty}, {@local}, {@dev}, {@broadcast}, {@initdev}, {@initdev}, {@initdev}, {@multicast1}]}})
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x95}, 0x40)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"})

2m51.972762358s ago: executing program 2 (id=4510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x53, {"c4e2f925f266ba610066edb9520a00000f32a50f215e3ef3410f58ab5629000066b893008ee866baf80cb874a34687ef66bafc0cb000eec4a1f97e7f00460fae6f00"}}, @code={0x1, 0x80, {"440f01c948b807000000000000000f23d80f21f835000000d00f23f8400f01c5c74424001d000000c744240200500000ff1c240f01c9470f786d0d66baf80cb834fa998fef66bafc0cedc4a34178f0edb9800000c00f3235000400000f30b938090000b828c27659ba000000000f30"}}, @cpuid={0x2, 0x18, {0x4e, 0x3}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x67, {"f6ff66ba2100ec660f38f5a8c3af69550fc7880100000066b862000f00d8f0450fc11f6464d27593b8010000000f01d9643e420f1515000044c7c7442400e4340000c744240203000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x401, 0x5}}, @cpuid={0x2, 0x18, {0x40000000, 0x7f}}, @cpuid={0x2, 0x18, {0x80000000, 0x101}}, @code={0x1, 0x51, {"0f01ca0f01c20fc7bf000000802e64410f3805874f96f2aec401f9d63f0fc77b2b65f3a466ba2100edc483655fa9a700000078440f20c03506000000440f22c0"}}], 0x203})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000880)={{0x1, 0x0, 0x80, {0xf000, 0x4, 0x1}}, "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", "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"})
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xa, 0x40000}, 0x4000850)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

2m50.889727144s ago: executing program 2 (id=4517):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000200)={[0x14f]}, 0x8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24000010)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300091000000000000000feffffff05000500000000000a004e22000000fffc000000000000000000000000000001f90600000000000005000600000000000a004e2200000081fc020000000000000000000000000001ff03000000000000020001000000000000000000000000000200130003000000000000000000000009c0cedbfb1476db0f057035b215e55d29a4f5b0f5336224045051f441bafa70b3d3f9479cfaaa53f6760c11d1b953df6c3fceb420f73124b3d3cf6922551b2fb2349307dd150532"], 0x80}, 0x1, 0x7}, 0x10010000)
write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x7, 0x4, 0x6, 0x2, 0x3e, 0x0, 0x39a, 0x40, 0xcf, 0x2, 0x0, 0x38, 0x1, 0x58, 0x9, 0xf}, [{0x6474e551, 0xb, 0xfffffffffffffff6, 0x6, 0x8001, 0x15, 0x5, 0x280000000}], "b6772e34e759c5a47236a1de79b4c2c476888cc5ab77bb5fe706a2abba21523841801007390ea22dc7b5f1817d8c692e508df4ec6b2dafb5256349d93fa288bb99ea4982822effa7733e2cb44b5607d63b420ae1b54d47a6d0", ['\x00']}, 0x1d1)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd}, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
copy_file_range(r0, &(0x7f0000000000)=0x2, r5, &(0x7f0000000100)=0x5, 0x401, 0x0)

2m50.020737597s ago: executing program 2 (id=4534):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = fsopen(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
dup3(r0, r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0000002000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d53200000000000000000000000000000a000000000000000000000000000000000000000000000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0)

2m49.986597668s ago: executing program 2 (id=4536):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000003c0)=0x200)
r5 = socket(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x200, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0xb}, {0x0, 0x0, 0x1}}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x80000000}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3}]}]}, 0x17c}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'gre0\x00', {0x2, 0x0, @dev}})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

2m49.958768478s ago: executing program 34 (id=4536):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000003c0)=0x200)
r5 = socket(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x200, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0xb}, {0x0, 0x0, 0x1}}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x80000000}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3}]}]}, 0x17c}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'gre0\x00', {0x2, 0x0, @dev}})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

2m47.18018665s ago: executing program 5 (id=4572):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x3f8})
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x80001)
socket(0x8000000010, 0x2, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xfffffffc, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES16=r2], 0x20}}, 0x4000)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r4, 0x4a9b6000)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x400c620e, 0xfffffffffffffffe)

2m46.316548464s ago: executing program 5 (id=4598):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0xfffffffffffffffc})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0)

2m46.258736155s ago: executing program 5 (id=4599):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x2e, 0xa7, 0xa1, 0x38, 0x7aa, 0x51, 0xe880, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfc, 0x3, 0x0, 0x88, 0x54, 0xd9, 0xa4}}]}}]}}, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0)

2m43.232817231s ago: executing program 5 (id=4654):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

2m43.225096171s ago: executing program 5 (id=4655):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0}) (async)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000140)="240000000100", 0x6)
socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x329c43, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xee01]) (async)
getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, <r6=>0xee01])
r7 = geteuid()
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000280)=0x10)
read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) (async)
read$FUSE(r8, &(0x7f0000000400)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1081000, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="732a6f8e07000000000000245711fa8fc4dae9c6f8a48d92aea03bd4fb1b078822cb8bd992ac02000000580a2499392d668204546f0233d9863ebf783c5ec617da2b1d414ddeb60acb3ae3a595b5f4038a1354052deb", @ANYRESDEC=r6, @ANYRESHEX=r9, @ANYRESDEC=r7, @ANYRES8=r3])
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xffffffffffffffff}}, "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", "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"})
socket$xdp(0x2c, 0x3, 0x0) (async)
r14 = socket$xdp(0x2c, 0x3, 0x0)
r15 = userfaultfd(0x100001)
ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000610000/0x4000)=nil, 0x4000}, 0x6}) (async)
ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000610000/0x4000)=nil, 0x4000}, 0x6})
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000300))
setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0)

2m43.148621742s ago: executing program 5 (id=4656):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x7, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
setuid(0xee01)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2ca200, 0x0)
mmap(&(0x7f0000568000/0x3000)=nil, 0x3000, 0x5a051feb1f984a1d, 0x202832, r0, 0x16526000)

2m28.095523569s ago: executing program 35 (id=4656):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x7, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
setuid(0xee01)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2ca200, 0x0)
mmap(&(0x7f0000568000/0x3000)=nil, 0x3000, 0x5a051feb1f984a1d, 0x202832, r0, 0x16526000)

7.108826779s ago: executing program 6 (id=6695):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffeffffffff7fb)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x7, 0x7, 0x0, 0x3, 0x10005, 0xcf5c, 0x1a, [0x1, 0x40100]}})
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r2, 0x4758f000)

5.637196182s ago: executing program 6 (id=6709):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"])
fadvise64(r0, 0x3, 0x3, 0x5)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800)
getsockname$packet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x14)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)

5.635290072s ago: executing program 6 (id=6711):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000500)={0x20, 0x12, 0xa, 0x4, 0x5, 0x2, &(0x7f00000004c0)="06a86845ce"}) (fail_nth: 3)

5.392656556s ago: executing program 6 (id=6712):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x408f80, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8080, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2, 0x1, 0x6, 0x0, 0x100, 0x6, 0x5c03c3, r5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random})
read(r1, &(0x7f0000000380)=""/1, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)

2.374671043s ago: executing program 0 (id=6740):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async)

2.345781603s ago: executing program 0 (id=6742):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = fsopen(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
dup3(r0, r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0000002000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d5320000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0)

2.331024043s ago: executing program 0 (id=6743):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000007200), 0x44ce00, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000))

2.276643654s ago: executing program 0 (id=6744):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)="8de546bb8559fab766fc47dcca30ee6bdd424171549029ea5e9d89ecc9e5045c0d9e0c14af60808e82760d04ed957e4afb64a83c7750a543746c9d95", 0x3c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d80f22d8c4e18173f53866bab0f80c0c3879e487ef66bafc0c66b88e008ec0460f1c460041ae", 0x3d}], 0x1, 0x74, 0x0, 0x0)
syz_io_uring_setup(0x9c, &(0x7f0000000640)={0x0, 0x100ed94, 0x3401, 0x0, 0x60b}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000017b000/0x1000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2.102710657s ago: executing program 6 (id=6745):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x4e24, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
syz_usb_connect(0x0, 0x505, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x11, 0xe4, 0x8e, 0x20, 0x17cc, 0x1000, 0x6604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f3, 0x4, 0x8, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0xc1, 0x0, 0x9, 0xa3, 0x69, 0xc2, 0x88, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xf69}}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x3, 0x7}, [@acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x39}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x4, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x101}]}], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x5, 0x0, 0x1, [@generic={0xcb, 0x10, "23665803a4bf0215f287f17dab5e678cd13357d0084bbfd344a8b7c5118623c98355cc18b894278c9b3f23ae6bdc4cb47695ab3d7ac6f7dfdbaedbb6855bde1c97a496f004596bf916063552ce89eee0a07506a5c574e07ddf60b199248a764084a17a256f021489798279c1e27ad287ebfd6820dcdeccf77be3739fa1fc4414eb638920c5c61c4c6fc691993248745e29244e2cb0466f740c01680ba088328a1d88cca946bdea01cd35a78b0c01adb7bf673ad9a577d1b031993b145e0e9edc6347b43f169f32f204"}, @generic={0x66, 0x23, "85ea032f0eb590f59fc780e3d2acbfa55aa8eb716ff6177189599e27098218020c98d927d2c4b7623ccc44ca5c9487fa52274bacb03df5ed1ad989821de8640e58299e6d458440bdd5336ce058f830564feddb98a0c04dd12eaa0b8997828bacf814272d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0xa42}, @generic={0xd2, 0xc, "068acc7f55f1dfdfcf6ac06757a8e58804c183b0b0751d09fd9671382d2510514770f5ac3b8ee26c095f3bfb928a22d6354a2421733a3d98bde273b6fd63ae9c7b7ef4e2a789b7b22a10e174d20a729079cf845db55581c0c16307f69fbcd657d64d0621f0da316d53ad93b7895dada4d72e78211436fd62973366667278d4e64299301a0e8ab28b5ce4e1926947ef73bfba746f2faf2dd4d00b42f25c6c09ec238742e88ecae639654c9b07315b59d910f3b75fd5fc74872d40555fb2dff7540ab6a38bb3c1b68cf9f3b5527cba1584"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0xfffe}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x10, 0x3, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x40, 0xfc, 0x40}}]}}, {{0x9, 0x4, 0x25, 0xfe, 0x0, 0x3, 0xab, 0x2, 0x81, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x3, 0x7, "f32e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9a, 0x2, 0x3, "9dea869431"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xc9, 0x7, '=', "2d73b1"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfffa, 0x6, 0x9, "0f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x3, "e030f6fef20c107990"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf7, 0x4, '='}]}, @uac_control={{0xa, 0x24, 0x1, 0xc38, 0x5}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0xa, 0x5, 0x3], 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xf9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x81, 0x1, 0x8370, 0x3d, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0xe, 0x401, 0x3c, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x6}]}]}}, {{0x9, 0x4, 0xe0, 0x50, 0x6, 0x86, 0x8a, 0xee, 0xd, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xff1, 0x6, 0xab88}, @obex={0x5, 0x24, 0x15, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x6e2, 0x6}}], [{{0x9, 0x5, 0xd, 0xb34e9e9fc12738eb, 0x8, 0xb8, 0x6, 0x8, [@generic={0x4, 0x9, "d31a"}, @generic={0xb8, 0x22, "7bddc3da8db01753572a82d96f2962aea7070b0e8941d302f3c381dafb4d2338ff75b8682dfdd6523a431cd483ca056a797ad1b5d8f07e17df542913d58ad8fec1b04b381d119fc578af030330c0b1f0729b1e8ecde612646273d7698a648a5bea2f87fcc6df5ace9a1de079450683c8d62e0832f69ddaa293a2775441c0d2a4e738ffa6296785dcda38fc6108b14df32092d40536ee717a31029b2712366a2008c6437bba81ef7efdce097d374e8aec8e4ae67589be"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x1b7, 0x1, 0xce, 0x5}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x60, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xc8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1c, 0x7703}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xa, 0x21, 0x7, [@generic={0x3, 0xac685c50043ef25a, "b9"}, @generic={0x47, 0x30, "7b57dc5412431e6dc0798ad667c83cf8e6b27ffa2c73527f1cda42d6d43e380a34a30a982fcc02342cb94d8247fed094da762157a834f17659de555a2995efde3c1a708059"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x9, 0xa, 0x81}}]}}, {{0x9, 0x4, 0xb9, 0x6, 0x0, 0xff, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x9c1}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0xc, 0xff, 0x1, 0xff, 0x40}, 0x10, &(0x7f00000011c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfd, 0x8, 0x3309, 0xd}]}, 0x9, [{0x20, &(0x7f0000001200)=@string={0x20, 0x3, "0757aa885fd479f5dd52aa16972e17a238c6e30451397d15e865c95e4e55"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x404}}, {0xa3, &(0x7f0000001280)=@string={0xa3, 0x3, "4832d033f4deaabf1e668c9d7aecdb84ca809e7cdae33a4089b191b6bd96e80a9e39d565e790dbe9d0634a31e395f7c8a6ae55491b977a6ce757a89856c61e2a49115d68a9d81ec5d445db1d19962462cd2965187b33c2f2380b601dc05b2664ed0833b56e4c467ade240c02980ea49f358b6f4c339fbd88e419d10ea67df94711d67a6f3d7bd0cf77198caa6ffdf7af9a05718261f58154181350d5ff2a60a4bf"}}, {0x53, &(0x7f0000001340)=@string={0x53, 0x3, "5484e04d048fedfc78f262cf2c08c6b8f66250917a88015c11cf3898341666e954da08e5d8c927e0dcce6da00dc6628821da729e6b7485e729c59b8d5544125389bbc09829fbe5f7a0d1c42286afdba6f1"}}, {0x34, &(0x7f00000013c0)=@string={0x34, 0x3, "5109c84bc688a82907f971a54cd4fb504da7f4a880c2bab5d5806836752a3aef82ca25f2dfb239d3ee63cd565052910d0e9a"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x807}}, {0xe8, &(0x7f0000001480)=@string={0xe8, 0x3, "243bf82d71245e6d4eaa1f61dc3c605e4df64c458922f65a66c3a5d9b5943bedcd96bf9fbff7d08dec8728ea9c3730db7fc00ee93fc881efa092196ac757cc11dba03ee63422b84e148a53081250f68e0e4371ce059ae2be41a55e45b154a0c885eda04a3a244b6649397c52bc7d66495f593d35f96263a1921b5928b8fa12c59dbec9c66ce75f25af6a7cbce9f41340a073a25af61b489ad832b30b0940f05c63585b81ae86c3f8db7faa82a1b015b4e791f7e6d82895f714cac08b33cdf0cad80fcd38eb150b1f1030589440c6a814f6f187189cbba364cc356eae8640988b3f6a57ac6bfd"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x340a}}]})
syz_open_dev$MSR(&(0x7f0000001680), 0x510d, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4000000)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000018c0)={0x0, 0x0, @ioapic})

1.392978228s ago: executing program 3 (id=6751):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)={0x54000, 0x0, 0x11}, 0x18)
setresgid(0xee00, 0xee01, 0x0)
r2 = syz_clone(0x209c4580, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r3)
socket$pppl2tp(0x18, 0x1, 0x1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000200)='auxv\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="945852b93ed6928adda8e9d22ceab98d8bee23a04bba6f6c281b03e87666c140aa48f15d94c2be303380f830570f1a84194fcc7f27a2870d285e66f81f3587f03781a7e6368c9cd1555bbfd0f3cb1b970c26b099ca9a4273a6c13f581aa204c14836e63f91392b22c37ffaf2c1118ebfb926c87109e49b06b53dc45bbe4d23cfccbd4c970ac064fc59d5ddee7c62baa24a2fedd6035ce30509098eeaf2bc079fbc91000163c5daaf06cdeaee7a3ad464d759", 0xb2}, 0x1, 0x0, 0x0, 0x8014}, 0x4040480)
fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x2, 0x1, 0x3, 0x2, r2})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)={0x54000, 0x0, 0x11}, 0x18) (async)
setresgid(0xee00, 0xee01, 0x0) (async)
syz_clone(0x209c4580, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') (async)
fchdir(r3) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) (async)
syz_open_procfs(r2, &(0x7f0000000200)='auxv\x00') (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
sendmsg$802154_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="945852b93ed6928adda8e9d22ceab98d8bee23a04bba6f6c281b03e87666c140aa48f15d94c2be303380f830570f1a84194fcc7f27a2870d285e66f81f3587f03781a7e6368c9cd1555bbfd0f3cb1b970c26b099ca9a4273a6c13f581aa204c14836e63f91392b22c37ffaf2c1118ebfb926c87109e49b06b53dc45bbe4d23cfccbd4c970ac064fc59d5ddee7c62baa24a2fedd6035ce30509098eeaf2bc079fbc91000163c5daaf06cdeaee7a3ad464d759", 0xb2}, 0x1, 0x0, 0x0, 0x8014}, 0x4040480) (async)
fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x2, 0x1, 0x3, 0x2, r2}) (async)

1.377178028s ago: executing program 3 (id=6752):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = fsopen(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
dup3(r0, r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0000002000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000000000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0)

1.302698089s ago: executing program 3 (id=6753):
userfaultfd(0x0)
r0 = epoll_create(0x3)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1ff)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffeffffffff7fb)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r1, 0x4758f000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

1.302393449s ago: executing program 0 (id=6754):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000700), 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x408001, 0x0)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e22, @remote}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000665c0c2a24c14f95bc0261d45dc4000000000076010000000000000200000000000000"])
ioctl$BLKZEROOUT(r1, 0x127f, 0x0)

1.26372067s ago: executing program 0 (id=6755):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x1, 0xd, {0xd, 0x30, "808b7bf889df5e8775ab0b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
fadvise64(r0, 0x3, 0x3, 0x5)
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0c240201060201400a000c0509040100000102000009040101010102000009050109758b06200107250100060d000904020000010200000904020101010200001124020106040803000000000033bbf81307240116050110090582090002"], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000102505a1a4400001020301090265000106000c06240600009a0524000864689db12fc86b85fe000d240f010200000003001000811524120010a317a88b045e4f01a607c0ffcb7e392a0724143b000400042402030905810308000605050905820200045d090809050302200000000e"], &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x0, 0xb1, 0x40, 0xf}, 0x116, &(0x7f0000000540)={0x5, 0xf, 0x116, 0x6, [@generic={0x4e, 0x10, 0x1, "9dd02620fb838d64d9d7c2aab76536b46c1ecfd6ac167c35b2fdb636e4c65c3a7accf558161ea91e58fcf00558de39c56041e4aa5dcd61cbb70d8a7dfbbe03c78f0c8d2da965cc9acf61f6"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xc, 0xff0f, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3e, 0x4, 0x0, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b9bf8503c8f3cce07975eb3ecb5c9d32"}, @generic={0x91, 0x10, 0xa, "f0d8829f66b614ed79174dcc56542684de316d5ae3869e26bd422b3ec8b99953255a69f57d94f218ade70b39f742961786ced2793120a9652f6e1209f7048eccc65cd47c2c784c766e7f875883b26c3bde6ecac7ddf33442992bb9efa1f582ad5fd3f99cee6c353233225cd9dc5ddbc4c849de49feccfabf17cb38a54189e1ac90479f52af573f3716c92f2957a8"}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1001}}, {0xfa, &(0x7f0000000680)=@string={0xfa, 0x3, "52a842a9de46051848b6e011841ca3fc7c99571ac7be6892964c4d29b052d2e6cc7bddd125175a08f91d981700dccc2a080c53c5d5c479e38823feb6073cc5fec2af70fd266773f734af511e6113bad28062b298df75fb1876969f281106cd64474af31a05c6e6cd168311b49ee0adda339282cdb3f42ba7dc078e56a227ceee6a3d81d26e0c6adf036363b8b6718826d3be5ea4ea32bf392764f88635fc7ffc13982fdd222162556e78fd462a1f9f7282d6022795e52ba48bbe07ea373400997687a7ca8f4e787495254f056348fb2b23eda41f117b9ea5bdb3070e1a714cda9d91b700777e549fc1260eefd5421551924c90db83e56f78"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1004}}, {0xaf, &(0x7f00000007c0)=@string={0xaf, 0x3, "50c2376f9fe35913fb705ed58930dc189302d47790e027ff4d3cf41aaff5675f5c64c83ae098b524e836a28365b2cf3dc270443e4210b2279132879fa30204947b98b25f1fbb7714e98782fd58841ed800e7e52dc1479eb7b45cced78e7d1f038348310631c74883c4ee38c7c0a52706b42a7b8586c97a07ebe246e770d2f8661bcd4c99a88acec8025cc496f71e037e51cde830891cf96349e95b1eb80b39c473c9f412a4c961ecbef2a1e896"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_connect(0x3, 0x103c, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0xbd, 0xfe, 0x1, 0x20, 0x1199, 0x6833, 0xeb87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102a, 0x3, 0x2, 0x9, 0x0, 0x6, [{{0x9, 0x4, 0x3, 0x2d, 0xe, 0xd3, 0xab, 0xf0, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'BL'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0xff, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xe1, 0x0, 0xb5, 0x10}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '{\'m'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x10, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x87, 0xffff, [0xf, 0x40]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x9}, @country_functional={0x6, 0x24, 0x7, 0xbf, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xd}]}], [{{0x9, 0x5, 0xf, 0x1, 0x20, 0x34, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x2, 0x6, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x6, 0x18}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x1f, 0x8, 0xc}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xf8, 0x7, 0x8, [@generic={0x80, 0x26, "00f341138fda2a5d053724e74c7faf066815e4dabde5e041c8aeb6cc6ea7b717004ec25ce63dc4edd65fef731c3a09c4fbae7d9b475b5b1a19f4d6c1be6fd1b7a2d2ab21bf432be958a2aea426faf86e939c820b96cca4ac36f69592297bb54867d0b00d1a713a455b9b94f339bfd6dca6c348e5633eb6bd30dd1ebd5c15"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xf9, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0xf}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x8a, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x50, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x24, 0x4, 0x1b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x93, 0xfffa}]}}, {{0x9, 0x5, 0x8, 0x10, 0x7f7, 0x6, 0xcd, 0x0, [@generic={0xe2, 0x31, "155c548de028bbf88f2f8c06b947a6a3e5b92f6eeefa336d657abfe183ad3ea7a25c500e223f2cb955c0a862eed8014d362b1364514ee8f69e5955ce4c0e28587bc87090101f07af20f28d7780157df3ab88a5ca74b295226d54aca918234fd2d9fa6f633753ae37525c944be4e52d2653f8d609b36f0c51acdc1103d32a3d9d552e2c3e73d360b767cc2175e97bb71c250ea11ca8e8088a0017a460745c974aeede87328ad747cae575003e83c73bfca5d8900a4b4e6385ccc6f241764d46ea738b2d38fcbe299413dcd4a503368cba8f8d6b3ca1c4de5d87edc5d72fe47e7e"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x2, 0x7, [@generic={0xe, 0x31, "ff33ca9d55f98fc457b1a07d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x1, 0xe5, 0xd4, [@generic={0xe4, 0x24, "d31ab90cd1668bb73df51854b6969efcc4716bc0233cf9f5e9c285cdff35228bb976745ebd6c51d0ab34dd2b5cdd1384a96ca04a3cfcad0d24844952121f2e54ca1ccd8e71ad6b0b4cb6a1c0c24e1ef9a8ca097b2cfe46e3003de538857143ee8f55406daa7203a99a4c11f6474aa316b671ca4f8ef1cd1255ce8c11da714d4315314a9afc9ff934e0387169886a7ca7a80f76332a570bd0358cbdb694edb413c461e6391a4f99621b8f3529656d106c2afebd5aa33034b58c7f547b9d191a0a38cd86c2e5801f58e99fc3683f3857d63698bc2c4d75198f4366e790b568c150875b"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x0, 0x87, 0x76}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x1, 0x8, 0x7, [@generic={0xb1, 0x10, "150c8172a3a00dafb7bc8e91d1c2f1f46e6f3d770a4987e33256cefa24b7eff6ee62834af7b3ff19865315300f663db34de2d4ffae5cf08d9dff7b2ab0ca04a1cfef6e8a6806ecbde39d762b781e5fead5e1b17a69df81ed59334518c56698bd8040855a171cc8df07680ea360ca5a0bc319f28798c29ea1e6710e4c9647524f740e2d141306475abad49429e9169f6a7ca14c940f1550a85b805ddbb0dac00d18c8622284fb42f814685a0590add1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x371a2de362ee06e8, 0xb, 0x52ba}]}}]}}, {{0x9, 0x4, 0xde, 0xa, 0xe, 0xff, 0x2, 0x19, 0xfa, [], [{{0x9, 0x5, 0x9, 0x1, 0x3ff, 0xb, 0x7, 0x9, [@generic={0xba, 0x3, "30171aee6fe993c412796e8595ea26f5b6b7d63c137b3dd7b6dc6572d5d99c4a730d195ddf6dabb007db27e1b55499da2bb242e96af1c1fb74ca307e1829abce48f7512f59657ffbba8528e6dc7ae850639248c626eb694c88984fcc4fb1a948c7056c10a4900b5b5d8c8f9df38ac59ede62953928cd2963b6faf010b7bfb67edfaa12efa18f61964d1a632a8ac0707198b8269903e49de6c24641bfb7545a5b32809fdd0e7a70318bc2fefa2a56a89edd2adf14a8c31fcf"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x400}, @generic={0xb6, 0x21, "9b552eaf4a287273b85f808715f99c8627b91cce8b995af6988dcbac49b47f5a44f0b8fe2099cdd19930ff71a0ff48a93f2dddcd09237455a732f9f84b2a173abed079c0c1fc85457e7be1fb065637f89e8c89ec3dee37c63d7b3962f9a6f88293bd66bf9fee56a1b617d0db8385285fa4b3a97c164960c5df0363accf1a3b1b78b2c64c9daf24b058a4b8920a1020babc26612e5f8c61152ea5cb1f78d69ef9a28115e5c5f1683a205e60976b23e7a726fce5d7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x80, 0x8, 0xa, [@generic={0x8f, 0xc, "6bbca525859ae93ded08e6284062d1a4303446e7189f94829105e7d4b09de413c3e783e8be1f569906bc86accbb8904ef09c490298cca3a43f2133e34899c7c99243f444f596a94ad1e16fd0596077fd6ba3f721d109b521cf9388d411ca4d88b76a57a825e389723ce100bf7120d78cf01621ffff9173b999df11083eb428575ed8e5c3619216b358fc49df64"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x9, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x100}]}}, {{0x9, 0x5, 0xf, 0x0, 0x420, 0x8, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x12, 0x20, 0x0, 0xb1, 0x5, [@generic={0x3a, 0xe, "de73f070676f6ed4589e59c8195bb85600b1fc9c2e02133c34f6be0a2ee3360defc26cb0105d30639765e3b54c16a977bac7c42d516539d6"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x80, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x80, 0x1, 0x8, [@generic={0xa0, 0x4, "26cbd68517e34a16d935a7bccaea0560c46caa705a5d4b848a311b7a63b77a43e15a82eb2c57d42c51815491534e53f23316193048960a293b1513233363e1c7a542f934e412d6e29d99c666db975b8a94f2e6d0169e86c267076612fd9b153eb3344c61b521b9e89c2a605ca8817076c4fba1d61b15c3f72f6a4a77dd12bd38d884d48cf231e755cd452ee7ddc7f43e6f2ec30d1a4ea8f5a4e7ca5b2c0d"}, @generic={0x6a, 0x1, "84f8b8d2552cd074e92bdcc8794f1016b7e6aad4d52f989446ee83edffea72d3c375304a15b5ca9a68d1a3f0a6ba1d88d2575b1a30b9de04024f0382a5017f4ae27278e3fb497965f883d378741ebc9dd187d625906e412186f6225c30cff859d9c10c02df766e38"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x4, 0x6, 0xb}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x3, 0x6, [@generic={0xb1, 0x31, "aeecc9a61a2da253de83c9c81ccde6cf23d34ce68cc897dfc0300167959e8438c83a8fab8dbeaaf5f8e8e5f6f2f0349d8831d1f783c8218bd451d60486883c32ae5623faa1b6c1a54b47f3a0d8557ce9d4d6bdf1da5a773cafcdc0e50bbd922e3061b62107295a8c383ec8b087e180b3759b2ff93c35bfd8e7844878ea037c8402bbb0ca4c8a98294dd95bee5d4bbf5c37a1e323747f294c8ca12c7a9283a302f2aac04942d6a0cc72851d5c06127d"}, @generic={0xf8, 0x9, "dba70fd4769c95d95f73eb3ef0f29c9cc4ed1e88c22279fb1485bba8aee83f763a134cf56b62d8408b1d45e749ce2e7ddf336054cfd0b7881ff152e28bc0959cf1145a634d5c75b2f050500345acd1ae1f90a11adca67d0714de3376fbc194905acd2264244b08f93da35024ce3b1d1be532b2631781c5e71a43f175a5bfb0f10dd7c08e27ef27d546746bcf6abdeaa3b8e65ee6c8eb569fdbb871be2a61b3b45cba8afa28ec390b9ea3bd73e8523703f9ac2691bb86e2d9a7f22790206c7f066c4a70174d8514d4b19aca687527241287cc26f3773bf81ecb2cf7609795a7b7a5be40489dcaa31cbfe03059b578a1509e36b87ef5f3"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x9, 0x2, [@generic={0xaa, 0x5, "31cb465821ac7ba1c73d210b6723f846f7f7338ca932b8dc3397206edf8194dd5ca41c0cd93d709f662a82b0ff9fafe1f9b25ee46a3703d579887bfcd1ccdadbdbda1b05d2b3655ecef895f6fca9eaab518e3ce00326f6128ce7351450d9b0334ce6677b813d7f3d6644f0044786674ed17c2cb32a2950bc4b59467ec2fc2d0f718470e44ef276e40e575bf375a2e94dc78218d858040792df845317f5d2092e72f0a4ffb0e917c3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x7, 0x1a, 0x20, [@generic={0xbd, 0xf, "11c41b70fb5cbe79ffa773db1190eddca3f9ebd9113d135e5ee24f8cf19dc899dbb51de19593e3b9d5c87a222b7f5626802fe7da1aa70cd37e447e5f12b3f1828387881dee5ee27a09e224838688c37c8651b38d3b30149b13abe54dff1791ab2c4dc619ca0da16f77537c56bab86ff7be7066fa3c241f79610a5f825298ed9065ce78332f36aaff1cb39dbb13c0bbd0a659a0b308ed48c71b6416aea6a3f375ec7e5f75ca1db5fd110786283302717db7c8803e7dda6de95ed5b5"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xf, 0x3, 0xc, [@generic={0x1e, 0xa, "0026c8b3d67fd7e0019545bf6b16d09f53e23ee07a53b502b2078de8"}, @generic={0x98, 0x31, "86736c12e98925fdb2246b8c2d03ebac9067dcc5e649188a2896a4c18e3dc4544e396226e52b0943032c95e66408ad7d792b3b9a5f9409c3bff52373e6615f408f92485c71b4fcfc540595853c3d60ddb20ed151af1c432d8fe37848cc2f69b46bdab60f66572498121c6e450d5d180d72ecba1d103f909e6122dc683db5679986e656d75694a280f03219816ec173944009731a9e83"}]}}]}}, {{0x9, 0x4, 0x8b, 0xe, 0xe, 0x21, 0x2f, 0x71, 0x9, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x3, 0x4, [@generic={0xb6, 0x24, "f978d0225d93e612401c9d08368e66910c955490f6dabf0a52bb1f8c6fa5066119525e2272ab389725714dc510eca1b3e0b8baed1a6557b9d357bd95928be0ffcfa0642d57205209365c83d61337b3240d2f862e0e85bfca6f7d51c43b787f946650571d71a986418b82110dbece34bc04a5c0b487589f7fc782889d4c46eae4b23cb0647cff80759f83265bddab9a85078ba64958ad5c3a7088d0f923f755bd7cbf1c42b8097af27f3815f2b5e41536dbb54afa"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2d, 0x3c}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x48, 0x3, 0x0, [@generic={0x92, 0x20, "6d5b6d0e834589dd9f9b91c31cbc3f3950a6f1a1264ddd3cad30aae3ac531ad683a31e4ca9548f3edc82e775554d2283544b3820a3255e6f826e58e23126bdb6924bd6347f1fbfb111abeedf3126022ccd4ca0fcc2114f54e4c166ad519940a19e841fcfd5c57a517ee5247f05186c83a7527e394a8da3f8a2f367d3f335ca348f2a3420b73fb121e1128585f4e1b26c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8f7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5e, 0xa, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x3, 0x6, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xf8, 0x3}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x6, 0x6, 0x9, [@generic={0xfa, 0x9, "b76b7134c9c41922df0635fd621226687f63536657504f818778d92b7763328ab9a14e362e2ef7efe10ea59200204ec30b635cb232095866e04bbe8171000db9cc11448b80e928239cc4291ebca47666319394f4321a02489013084a20a74bf25fc71b0b34ef58a3de7802658ebb5064887fe734006ced77c2c730f4cfae4168faaa929041873db95bbf048c4ee33566b2dd1030b5ece78c76a1ac47287f5b648d516ad933d4edf190abbc78dabe98af4a0834b35750456fb04a87c60f02f8956e579196ae11073eb9151fa00c185bfbaf2a733251d0be627d5c38e2c5aab5d31fa7e9bb9651250c8e8ab0b6691d320d3225e9c40f3ff53a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0xfb, 0x9, 0x2d, [@generic={0xeb, 0x10, "f8150e5cba74b7d48e7ca068aebd608814b154fed980e6941310f5a22dc41be43c6f2f9034d47867001fab9f7409c7faba7cccb498577972cafe6cea7c47640284aa9d508a53af09b58a66e197b5bd7d32d520e4f711bb425b832ddd4669eee2067ec9616606018e3841e48392664fb90d055b497a428fe02e69097f3b5e4990f4b8868a9172850ed3a330426cbb70045fcce3937248e4fe19e64fc689263767af8004b182104f5599c022775460bd793cab225c741d92d8b52405f0bca19abbf80ef60a6cd87d54c986efcfcbf30c5d974bf6317ed7a6e7153bc210e5e86b85a5169259da9203a283"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9d, 0x6a}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x2d, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x18, 0x400, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1f, 0x5, 0x3, [@generic={0x5b, 0x3, "20f9844700e3ff60c0a6c649da1e74ca8e311141114639bfcaaa149d4d715a89c770564cdbd7485ca90879616c2e6f1806270c62e729df5ac90eff86ffca8e64a35766ccff4e81c34757319d01d112de7edadc36ac406be1d0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xd6, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x7f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x8, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xf7, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x201, 0x7, 0x6, 0x2, 0xff, 0x8}, 0x5, &(0x7f0000001a00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x340a}}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
syz_usb_connect$uac1(0x1, 0xa0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0xfe, 0x7, 0x40, 0x5}, 0x36, &(0x7f0000001c80)=ANY=[@ANYBLOB="050f36000503100b0c100a06200100000ff009000710020c5804000a10030209000b090a0011100a761d6526cfde5fec8f335cd904a1514428aa241f5c165f015f381988f4441ffa51413701d1848a7ae6479f2ec1a7bf920f5da8e7d343ac2516b9b08bd180e72ba9d62a611f6508cb105c0588c6b57d2f10130b4e68a2326314f4cb9a93ddbe4d7209d3fcf1a205c7c8b01aaa78bd471e63ea9bc484bda8fce0ebfe1bd82fd4e5c384"], 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40a}}]})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x101000)
openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x23, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
dup3(r0, r2, 0x80000)
syz_usb_disconnect(r3)
r4 = syz_clone(0xe1b64b11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"/431], 0x0)
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000003280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003140)={0x20, 0x80, 0x1c, {0x9, 0x7832, 0x3ff, 0xf, 0x82a9, 0x0, 0xafc, 0x2, 0x94a7, 0xfffc, 0x501a, 0x4}}, 0x0, 0x0, 0x0, 0x0})
ptrace(0x10, r4)
ptrace(0x4207, r4)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0x400448de, 0x0)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')

995.755714ms ago: executing program 7 (id=6760):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x14dc00, 0x5)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x40)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x8)
execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000100)='$+\x00{%7{@[])\x00', &(0x7f0000000140)='B}@/]\x00']}, &(0x7f0000000300)={[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='*B%\x0e@\x00', &(0x7f0000000240)='{)&\x00', &(0x7f0000000280)='!*&\x97}%*{\x00', &(0x7f00000002c0)='*\x00']}, 0x1000)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
statx(r0, &(0x7f0000000580)='./file0/file0\x00', 0x800, 0x4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {}, [{0x2, 0x0, r2}], {0x4, 0xc}, [{0x8, 0x2, r3}, {0x8, 0x1237ccd0c4e5e126, r4}, {0x8, 0x1, r5}], {0x10, 0x6}, {0x20, 0x4}}, 0x44, 0x2)
mount$bind(&(0x7f0000000740)='./file0/file0/file0\x00', &(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0), 0x2008012, 0x0)
statx(r0, &(0x7f00000008c0)='./file0/file0\x00', 0x1000, 0x8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_unix(&(0x7f0000000800)='./file0/file0/file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x18001, &(0x7f0000000a00)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x6}}, {@posixacl}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x35, 0x37, 0x35, 0x61, 0x34, 0x65], 0x2d, [0x0, 0x63, 0x64, 0x31], 0x2d, [0x37, 0x37, 0x36, 0x61], 0x2d, [0x65, 0x34, 0x32, 0x7983732ef4afbb6e], 0x2d, [0x51, 0x35, 0x60, 0x63, 0x61, 0x30, 0x62, 0x63]}}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@obj_user={'obj_user', 0x3d, '*B%\x0e@\x00'}}]}})
getdents(r1, &(0x7f0000000ac0)=""/38, 0x26)
lseek(r1, 0xfffffffffffffff7, 0x3)
r7 = openat2(0xffffffffffffff9c, &(0x7f0000000b00)='./file0/file0\x00', &(0x7f0000000b40)={0x44a940, 0x4f, 0x4}, 0x18)
sendmsg$NFT_BATCH(r7, &(0x7f0000000e80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x304, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x180, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x104, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x45, 0x6, "cf5bdd8bc798b6cdebac5f22d4acbc4de291472e1ab06807c73b1cb0f51644bd7d24f80eb1b844953230e49f50007d0621c157b62b0bbb94e3f954df0fc67cfff5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x248}, 0x1, 0x0, 0x0, 0x44000}, 0x844)
r8 = open(&(0x7f0000000ec0)='./file0\x00', 0x20002, 0x12eeea39549431c5)
fcntl$notify(r1, 0x402, 0x4)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
fstat(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
write$FUSE_CREATE_OPEN(r9, &(0x7f0000000fc0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x3, 0x400, 0x13dc, 0x10000, 0x5, {0x5, 0xc, 0xe17, 0x2, 0x3, 0xa14e, 0x5, 0x5, 0x6, 0x1000, 0x3e, r10, r3, 0x0, 0xffffffff}}, {0x0, 0x4}}}, 0xa0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x7ff, 0x8, 0x7, 0xffff0000}]})
r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001180)={0x4, 0x0, [{0x927, 0x0, 0x1}, {0xbfc, 0x0, 0x8001}, {0x4b564d02, 0x0, 0x3}, {0xb27, 0x0, 0x9}]})
finit_module(r7, &(0x7f0000001200)='afid', 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x100, 0x0)
read$FUSE(r8, &(0x7f0000001280)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f00000032c0)={0x50, 0xfffffffffffffff5, r12, {0x7, 0x2b, 0x0, 0x24010400, 0x7ff, 0x1, 0x8, 0x200, 0x0, 0x0, 0x2, 0x4}}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

953.458075ms ago: executing program 7 (id=6761):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240))
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000040)=0x44, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0})

950.089685ms ago: executing program 7 (id=6762):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000180)=0xa, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000054d564b0000000001000000000000d0"])
r5 = socket$inet6(0xa, 0x802, 0x88)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2f, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @tcp_ip4_spec={@empty, @loopback, 0x4e23, 0x4e24, 0x7f}, {0x0, @local, 0xb289, 0x3, [0x401]}, 0xfffffffffffff200, 0xe}}})
write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x2}}, 0x30)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
close(r6)
sendto$inet6(r5, 0x0, 0x0, 0x40040c0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
recvfrom(r10, 0x0, 0x0, 0x100, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000000740)={0x30}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x2})

948.681165ms ago: executing program 7 (id=6763):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000), 0xfffffffffffffce2)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
getpeername(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setsig(0x4203, r7, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x8002, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

948.229445ms ago: executing program 7 (id=6764):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
fchdir(r5)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
sendfile(r1, r1, 0x0, 0x7ffff000)

748.822788ms ago: executing program 3 (id=6765):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00')
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)=ANY=[@ANYRESHEX=r5], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040))
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000500)={0x20, 0x12, 0xa, 0x4, 0x5, 0x2, &(0x7f00000004c0)="06a86845ce"})

746.102338ms ago: executing program 3 (id=6766):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8=r2])
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x100, 0x2}, {0x9}]}, 0x18, 0x0)
ftruncate(r3, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')
r4 = syz_pidfd_open(0xffffffffffffffff, 0x0)
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0)
fcntl$dupfd(r4, 0x0, r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80)
read(r6, &(0x7f0000000080)=""/1, 0x1)
socket(0x1d, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048002)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r7, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r7, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x402480, 0x100, 0x6c}, 0x18)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020)

665.34612ms ago: executing program 6 (id=6767):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, 0x75}, 0x1c)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr(r2, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

643.45626ms ago: executing program 3 (id=6768):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=0x0], 0x40}, 0x6048090)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4)
close(r2)
sendmsg(r3, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000"])
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140))

0s ago: executing program 7 (id=6769):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x603, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x400c8d4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
pselect6(0x40, &(0x7f0000000180)={0x7, 0x4, 0x4, 0xd242, 0x6, 0x1000, 0x7fffffffffffffff, 0xfffffffffffffff1}, &(0x7f00000001c0)={0x72, 0x2, 0x3, 0x7df0, 0x5, 0xffffffffffff8001, 0x8001}, &(0x7f0000000200)={0x7fffffffffffffff, 0x1, 0x8, 0x2, 0x6, 0x4, 0xe, 0x1}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x800]}, 0x8})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xd4, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x4}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x40}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x1, 0x0, 0x36}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x2, 0x4}}, &(0x7f0000000500)={0x0, 0x20, 0x38}}}], 0x1d, 0x0, &(0x7f0000000640)="32b643517003e9d50e3760ea03c473d9c1bead0e6de2e0d03154014347"})
r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x40)
r2 = syz_io_uring_setup(0x47cb, &(0x7f0000000700)={0x0, 0x9136, 0x1000, 0x2, 0x31, 0x0, r1}, &(0x7f0000000780), &(0x7f00000007c0))
setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r4, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x44, 0x80}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf38}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x77}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe88d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
mount(&(0x7f0000000a80)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='nfs\x00', 0x800020, &(0x7f0000000b40)='\x00')
r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x480e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xc3, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x3f5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x3f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x7f, 0x7d, 0x7, 0x10}, 0x4e, &(0x7f0000000c00)={0x5, 0xf, 0x4e, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x889}, @generic={0x42, 0x10, 0xa, "6762f092924c975a67bd2850cb26ea547defe1a664e2a21294a62b7be634341cf1d2db2a8ddec1b58463c19c8c8eeffa69b03e02908991484581370db7cb5b"}]}, 0x7, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4c, &(0x7f0000000d00)=@string={0x4c, 0x3, "9ec108f8c4c7586fae074eee179e3934326bcde1d9c46ac69bfd2b8bfb500c95c1dcb4e2e52a723ee6711f89dfde6ab47f4b1cbad6afd222ec639ba9e6e7df408dafa329037c19244081"}}, {0xa1, &(0x7f0000000d80)=@string={0xa1, 0x3, "594cf5fe2e71ac4ed0dab5a12793b131fcac633b6142beb1e27d59b270c8cefe44c042e5942d00e327437a1cf9ea7d98f3b49399cbb10d9f323ca0e9056f8d3ed884ac310843f33cfc3a5d2eeab22017bcd3c0964170d491e3af3658bbf7984a7025bb76ee424b7130abc97288608524fcb8664451991ee24cd630b8880dd57f256cc002990a2d1738951f5ef02110589b99f1a0a899c74792833222daab1c"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x2, &(0x7f0000000ec0)=@string={0x2}}]})
syz_usb_disconnect(r5)
socket$inet6(0xa, 0x80004, 0x9)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000f80)=0x9)
renameat2(r1, &(0x7f0000000fc0)='./file0\x00', r1, &(0x7f0000001000)='./file0\x00', 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000001040)={0x8, 'team0\x00', {'gre0\x00'}, 0x4})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4f01, 0x46}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x902f}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x34}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20000051)
syz_io_uring_setup(0x4559, &(0x7f00000011c0)={0x0, 0x76df, 0x1000, 0x1, 0x196}, &(0x7f0000001240), &(0x7f0000001280))
openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x109080, 0x110)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000015c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={0x238, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x160, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffd}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2286997}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff452}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6b626c3a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8339}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x986}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x97}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4fabdf6b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10}]}]}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xdcf534d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x73}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x39b8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40000000}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x25f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x238}, 0x1, 0x0, 0x0, 0x10}, 0x40)
fsetxattr$security_capability(r2, &(0x7f0000001600), &(0x7f0000001640)=@v1={0x1000000, [{0x3ff, 0xca}]}, 0xc, 0x1)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000016c0), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001a00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001700)={0x298, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x258, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1e8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x23)
syz_usb_connect$cdc_ecm(0x0, 0x9a, &(0x7f0000001a40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xf6, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "fd"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xce6, 0x9, 0x10}, [@ncm={0x6, 0x24, 0x1a, 0xef0}, @mdlm={0x15, 0x24, 0x12, 0xfffa}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x36}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0xfa, 0x7, 0x7}, @obex={0x5, 0x24, 0x15, 0xfff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x3, 0x81}}}}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x310, 0x4, 0x5, 0x6, 0x8, 0x1}, 0x19, &(0x7f0000001b40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "a4c3b4182567a6ec6453126f06f48d0e"}]}, 0x1, [{0x79, &(0x7f0000001b80)=@string={0x79, 0x3, "4077a8d0137b477a2d71f75073275c3e943302e6d6327606eb8504cd48bc4de810f880a95e8814485bbdc48e0bcc1e90276fe43da4cb3159dcbea506443045f901547dde1aabd0c87a592528648ef5b8970fdde21ce11ff2216a006c1f7c59a151b9195ffd94ecbd26679827eaa011aa437a83d01bd59d"}}]})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x11c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2e1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xb36c}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x939f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffff6c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000)
syz_usb_connect(0x4, 0x224, &(0x7f0000001e40)={{0x12, 0x1, 0x201, 0x48, 0xe1, 0xdd, 0xff, 0x15ba, 0x2a, 0x30ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x212, 0x2, 0x4, 0x3, 0x3f96234614639d0d, 0x60, [{{0x9, 0x4, 0x1, 0x1, 0x8, 0x9, 0xd5, 0x96, 0xe6, [@generic={0x34, 0x21, "c3dbb730dd5bc5e7ccdd180450ca66cfeaf7841eb57bf4d9eb24a67f9fb8b9786582d85030ffb11a5312ea87b0e1e27d351a"}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x5, 0x8, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x10, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xcc, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x8, 0x8e2520bed342230d, 0x7, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x81, 0x7, 0x5}}, {{0x9, 0x5, 0xa, 0x4, 0x648, 0xf0, 0x1, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffb}]}}]}}, {{0x9, 0x4, 0x4b, 0xe, 0x4, 0xc6, 0x77, 0xc0, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "70bda5"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6ff, 0x5, 0x4}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x7, [0x800, 0x9, 0x3, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xb7, 0x7, 0xa, [@generic={0x44, 0x31, "e2e44d86fb5a1f8f294ff177cca62ac76393165b515d45227655451d92d5a1e9e1ba3e902eba7875e5336fed88fa379504548d695fd459a1e0fa85c092cc3eb50094"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0xf7, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x24, 0x67, 0x5, [@generic={0xd6, 0x4, "0101649ae02f485b671b575ed91b3c12bf4565ed281f4c8448a16f691fc18b1eb6c7f9883f0f357c616789a4a1113e4e22f6805d98c431905393779bfd882f3c3bc62fba08b7c1f168f310f6e3d22d80c66f8cbbe55a2608af8522977324a1fd7397b66c27a6778fb02224e52f28b9fb43c87010ad983e0f972a4b53babeea90c2b75f76555547556bfa0dd0bf0d146a8f00a3a020e83eeae8af25b2cd92e1fe1ccbac530900a65d858a0b7f6931f0c913a288af46b8217ea2dc15ae3816e19e6d963e20bb176d302c035ee4f0abc3a4f5c43ae9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x2f, 0x9, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x200, 0xfc, 0xb1, 0x7f, 0x5006b5475726a87f, 0x5}, 0xb1, &(0x7f00000020c0)={0x5, 0xf, 0xb1, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x5, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x4, 0x101}, @generic={0x9b, 0x10, 0xb, "2b8c8c6df4a896c654ca2bf2b47fa30f2ffaad9d523d77486accb105c9cfbca1b53c8ec29e34180ecda5fb33c6f9ffa629ad2caf96db58e92bc30591211b1764171356eac205839b580b5e1dc9d0aaf00d133275a51c16113cef6117069366675c5f796ae8a7810d91bef9fbbe113bbdfcbf8e1133e3135bf367f2fa4cfc20e9173a902fe14462b72116ceb1a6ac7bbfe07ed0588e9008ec"}]}, 0x7, [{0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x410}}, {0x60, &(0x7f00000021c0)=@string={0x60, 0x3, "9629bc60fec131c1248d64897298f8e088c1a0566b42502b2ca4a1132fbbed99b24fdedfdaceeca3b1223c7ffc2da4218ab2c7b85c77e00e511144eea038c2c651e112a661999ae8ac7fc41c90a396c86254bcdd723614abe571966c1c49"}}, {0xa3, &(0x7f0000002240)=@string={0xa3, 0x3, "a1e6e00820855764191318b5acba78f13836bdeaec7ed3356b09b73abcd2cf9edfd20e6ec34418f2b32212d453f32e88ac8669a284630334c5d6e3b6e37088434bf922a7d7bea1e286f1d2f8b010cab409bdef7f83bfc64341a6793ad8ec34cc3935211e8ad001d62ed76c0c12a9f83fac58e579b7e64fd3f21d7314e359884e0d68c427000eb68c218cb85a786dcc2d12ddd3e36192a4c8476c3488d1ffeb1593"}}, {0x93, &(0x7f0000002300)=@string={0x93, 0x3, "15dac661990890af15cc9875acf947a2c2fbfac793530f4eb8eda4b54f33fbeed09a664e197fa025c98612f34ee46964f78dd51de5ceac2f403b4472a059485dd15926cca90e58b67429d34328105b34ebccc33f9e9fa83102ff29b223cdd63ac0a8a9157ede297d170aaa976b90ac02abbe1b135bcae3ba58221f51b45057a7ad707d39906efad65b9ff941ab22881733"}}, {0x51, &(0x7f00000023c0)=@string={0x51, 0x3, "82f96c094ee1b1f16019cdbbe318e0fe1e1bf617c57aff6aec7c91500d137d40ec59a79109d3e9e2330262d6733b54178d15647c3606e727e8598ca38c6a662eaa47c1070d51531940b1e5f6fca049"}}, {0x4a, &(0x7f0000002440)=@string={0x4a, 0x3, "7ad16e55481b261ba334e3a21c7df167851e3bf1ac313d94d65a9ea92ded15fc52825ab4f1d4277c3625db04f13831225e576fa8b858de80f7ba56a486f36113e10ca8497ff80fb9"}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x402}}]})

0s ago: executing program 3 (id=6770):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x2, r4})
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x10, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
futex(&(0x7f0000000180), 0xd, 0x0, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240), 0x1)

kernel console output (not intermixed with test programs):

923011][T16908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[  381.038547][T16925] overlayfs: failed to clone upperpath
[  381.067013][T16927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5740'.
[  381.180603][  T833] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  381.331874][  T833] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.339931][  T833] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  381.348390][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.358636][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.371536][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.378800][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.389014][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.403522][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.411287][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.421635][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.434675][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.442005][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.452346][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.465362][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.475872][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.487890][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.510572][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.526355][T16949] rust_binder: Error while translating object.
[  381.526390][T16949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  381.530718][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.533364][T16949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:594
[  381.542308][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.580489][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.588254][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.599247][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.615988][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.624708][  T833] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  381.635701][  T833] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  381.649037][  T833] usb 4-1: config 1 interface 0 has no altsetting 0
[  381.659774][  T833] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  381.669372][  T833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.680484][  T833] usb 4-1: Product: syz
[  381.684947][  T833] usb 4-1: Manufacturer: syz
[  381.689571][  T833] usb 4-1: SerialNumber: syz
[  381.795382][   T36] audit: type=1326 audit(1750753771.227:29239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.6.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7fc00000
[  381.932848][  T833] usb 4-1: USB disconnect, device number 50
[  382.580792][   T36] audit: type=1326 audit(1750753772.007:29240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.6.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfd732ab19 code=0x7fc00000
[  382.610665][   T36] audit: type=1326 audit(1750753772.007:29241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.6.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbfd732abdf code=0x7fc00000
[  382.637830][   T36] audit: type=1326 audit(1750753772.007:29242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.6.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbfd738e929 code=0x7fc00000
[  382.653295][T16957] rust_binder: Error in use_page_slow: ESRCH
[  382.661591][T16957] rust_binder: use_range failure ESRCH
[  382.667603][T16957] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  382.670394][T16966] 9pnet_fd: p9_fd_create_tcp (16966): problem connecting socket to 127.0.0.1
[  382.673234][T16957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  382.690174][T16957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:600
[  383.343964][T17005] incfs: Can't find or create .incomplete dir in ./file0
[  383.360697][T17005] incfs: mount failed -17
[  383.402299][T17013] tipc: Started in network mode
[  383.409358][T17013] tipc: Node identity 40120000000000000000000000000001, cluster identity 4711
[  383.419661][T17013] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  383.511831][T17025] input: syz1 as /devices/virtual/input/input44
[  384.243038][T17039] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5782'.
[  384.253782][T17039] binder: Bad value for 'max'
[  384.410392][T17053] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5786'.
[  384.423503][T17051] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  384.423601][T17051] rust_binder: Error in use_page_slow: EBUSY
[  384.434448][T17051] rust_binder: use_range failure EBUSY
[  384.441141][T17051] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  384.446942][T17051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  384.456268][T17051] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  384.466707][T17051] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:623
[  384.514162][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5789'.
[  384.603172][T17063] rust_binder: inc_ref_done called when no active inc_refs
[  384.623811][T17067] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5791'.
[  384.656285][T17074] binder: Unknown parameter ''
[  384.910797][  T808] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  385.060502][  T808] usb 4-1: Using ep0 maxpacket: 32
[  385.067387][  T808] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  385.075773][  T808] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  385.084088][  T808] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  385.093139][  T808] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  385.101587][  T808] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  385.112292][  T808] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  385.122535][  T808] usb 4-1: config 8 has no interface number 0
[  385.131718][  T808] usb 4-1: config 8 has no interface number 1
[  385.137800][  T808] usb 4-1: config 8 has no interface number 2
[  385.144008][  T808] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  385.155011][  T808] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  385.167207][  T808] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  385.177509][  T808] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  385.188479][  T808] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  385.201289][  T808] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  385.214971][  T808] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  385.229002][  T808] usb 4-1: config 8 interface 37 has no altsetting 0
[  385.235730][  T808] usb 4-1: config 8 interface 224 has no altsetting 0
[  385.244203][  T808] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  385.253410][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.261518][  T808] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  385.286437][  T808] usb 4-1: Manufacturer: Є
[  385.292030][  T808] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  385.310105][T17078] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  385.522401][  T808] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  385.534805][  T808] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  385.542905][  T808] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  385.553357][  T808] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  385.565188][  T808] usb 4-1: USB disconnect, device number 51
[  385.674907][T17113] binder: Bad value for 'max'
[  385.696077][T17115] futex_wake_op: syz.6.5809 tries to shift op by -1; fix this program
[  385.735622][T17119] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  385.869914][T17131] binder: Unknown parameter 'fscontext?}'
[  386.038112][T17147] rust_binder: Write failure EFAULT in pid:39
[  386.180565][  T307] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  386.341529][  T307] usb 8-1: config 0 has no interfaces?
[  386.347049][  T307] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  386.356328][  T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.361146][  T379] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  386.365390][  T307] usb 8-1: config 0 descriptor??
[  386.530540][  T379] usb 4-1: Using ep0 maxpacket: 32
[  386.536951][  T379] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  386.548653][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  386.560459][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  386.571870][  T379] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  386.581045][  T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.590641][  T307] usb 8-1: USB disconnect, device number 23
[  386.593545][  T379] usb 4-1: config 0 descriptor??
[  386.605548][T17156] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  386.613993][  T379] hub 4-1:0.0: USB hub found
[  386.820285][  T379] hub 4-1:0.0: 2 ports detected
[  387.178208][T17182] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  387.178243][T17182] rust_binder: Error in use_page_slow: EBUSY
[  387.189111][T17182] rust_binder: use_range failure EBUSY
[  387.195397][T17182] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  387.202691][T17182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  387.210469][T17182] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  387.220867][T17182] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:677
[  387.234233][T17200] overlayfs: failed to clone upperpath
[  387.260043][T17202] netlink: 'syz.7.5842': attribute type 4 has an invalid length.
[  387.268054][T17202] netlink: 3581 bytes leftover after parsing attributes in process `syz.7.5842'.
[  387.274101][T17206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17206 comm=syz.6.5843
[  387.290060][T17206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17206 comm=syz.6.5843
[  387.303784][T17206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17206 comm=syz.6.5843
[  387.317517][T17206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=17206 comm=syz.6.5843
[  387.331612][T17206] netlink: 'syz.6.5843': attribute type 4 has an invalid length.
[  387.339369][T17206] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5843'.
[  387.381257][T17224] overlay: Unknown parameter '/lan0'
[  388.110565][   T36] audit: type=1326 audit(1750753777.537:29243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.7.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7458e929 code=0x7fc00000
[  388.223755][T17277] rust_binder: Error while translating object.
[  388.223789][T17277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  388.230238][T17277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:707
[  388.402454][  T319] usb 4-1: USB disconnect, device number 52
[  388.433269][T17284] tipc: Failed to remove unknown binding: 66,3,3/0:3853345244/3853345245
[  388.444167][T17284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:713
[  388.450275][T17284] rust_binder: Write failure EINVAL in pid:713
[  398.652805][T17318] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 4096)
[  398.659092][T17318] rust_binder: Error while translating object.
[  398.670050][T17318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  398.676989][T17318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725
[  398.704477][T17329] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  398.714151][T17329] rust_binder: Error while translating object.
[  398.725516][T17329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  398.732624][T17329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:727
[  398.771312][T17341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[  398.785440][T17341] rust_binder: Write failure EINVAL in pid:76
[  398.812154][T17348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79
[  399.080521][  T319] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  399.240474][  T319] usb 4-1: Using ep0 maxpacket: 32
[  399.246858][  T319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  399.255313][  T319] usb 4-1: config 0 has no interface number 0
[  399.262117][  T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.273351][  T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.287718][  T319] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  399.297649][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.307726][  T319] usb 4-1: config 0 descriptor??
[  400.074439][T17408] fuse: Bad value for 'fd'
[  400.090776][T17414] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  400.091175][T17413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753
[  400.110582][T17416] binder: Unknown parameter 'statsRglobalѾ&T��S�'
[  400.211234][  T319] uclogic 0003:28BD:0094.0021: failed retrieving string descriptor #100: -71
[  400.220116][  T319] uclogic 0003:28BD:0094.0021: failed retrieving pen parameters: -71
[  400.228532][  T319] uclogic 0003:28BD:0094.0021: pen probing failed: -71
[  400.235862][  T319] uclogic 0003:28BD:0094.0021: failed probing parameters: -71
[  400.243605][  T319] uclogic 0003:28BD:0094.0021: probe with driver uclogic failed with error -71
[  400.254790][  T319] usb 4-1: USB disconnect, device number 53
[  400.845062][   T36] audit: type=1400 audit(1750753790.277:29244): avc:  denied  { map } for  pid=17442 comm="syz.3.5920" path="/proc/107/task/107/oom_adj" dev="proc" ino=96716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  400.868949][   T36] audit: type=1400 audit(1750753790.277:29245): avc:  denied  { execute } for  pid=17442 comm="syz.3.5920" path="/proc/107/task/107/oom_adj" dev="proc" ino=96716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  400.878025][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5921'.
[  400.906392][T17445] 9pnet_fd: Insufficient options for proto=fd
[  400.913162][T17445] rust_binder: Error while translating object.
[  400.913198][T17445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  400.919675][T17445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[  401.232343][T17481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781
[  401.470317][T17503] netlink: 'syz.6.5944': attribute type 11 has an invalid length.
[  401.480475][   T31] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  401.491302][T17503] netlink: 'syz.6.5944': attribute type 1 has an invalid length.
[  401.504561][T17503] netlink: 3593 bytes leftover after parsing attributes in process `syz.6.5944'.
[  401.519801][T17503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=17503 comm=syz.6.5944
[  401.591171][T17503] overlay: ./file0 is not a directory
[  401.641520][   T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.660265][   T31] usb 8-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  401.674829][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.706514][   T31] usb 8-1: config 0 descriptor??
[  401.966391][T17534] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  402.080189][T17550] syzkaller0: entered promiscuous mode
[  402.093673][T17550] syzkaller0: entered allmulticast mode
[  402.100910][T17550] vlan1: mtu less than device minimum
[  402.108010][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5960'.
[  402.120515][   T31] elecom 0003:056E:00FF.0022: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.7-1/input0
[  402.329841][T17481] rust_binder: Read failure Err(EFAULT) in pid:781
[  402.330217][  T808] usb 8-1: USB disconnect, device number 24
[  402.919805][T17589] rust_binder: inc_ref_done called when no active inc_refs
[  402.930177][T17591] FAULT_INJECTION: forcing a failure.
[  402.930177][T17591] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.950866][T17591] CPU: 0 UID: 0 PID: 17591 Comm: syz.7.5973 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  402.950901][T17591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  402.950910][T17591] Call Trace:
[  402.950915][T17591]  <TASK>
[  402.950921][T17591]  __dump_stack+0x21/0x30
[  402.950941][T17591]  dump_stack_lvl+0x10c/0x190
[  402.950952][T17591]  ? __cfi_dump_stack_lvl+0x10/0x10
[  402.950965][T17591]  ? is_bpf_text_address+0x17b/0x1a0
[  402.950981][T17591]  dump_stack+0x19/0x20
[  402.950992][T17591]  should_fail_ex+0x3d9/0x530
[  402.951006][T17591]  should_fail+0xf/0x20
[  402.951017][T17591]  should_fail_usercopy+0x1e/0x30
[  402.951029][T17591]  _copy_to_iter+0x1a3/0x14b0
[  402.951043][T17591]  ? __kasan_check_write+0x18/0x20
[  402.951055][T17591]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  402.951071][T17591]  ? __cfi__copy_to_iter+0x10/0x10
[  402.951084][T17591]  ? __kasan_check_write+0x18/0x20
[  402.951095][T17591]  ? _raw_spin_lock+0x8c/0x120
[  402.951109][T17591]  ? __cfi__raw_spin_lock+0x10/0x10
[  402.951122][T17591]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  402.951137][T17591]  ? finish_wait+0x182/0x1c0
[  402.951151][T17591]  vhost_chr_read_iter+0x4ed/0x6e0
[  402.951164][T17591]  ? avc_policy_seqno+0xd/0x30
[  402.951176][T17591]  ? __cfi_vhost_chr_read_iter+0x10/0x10
[  402.951189][T17591]  ? __cfi_autoremove_wake_function+0x10/0x10
[  402.951202][T17591]  ? __kasan_check_write+0x18/0x20
[  402.951224][T17591]  ? proc_fail_nth_write+0x17e/0x210
[  402.951235][T17591]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  402.951246][T17591]  vhost_vsock_chr_read_iter+0x7a/0xb0
[  402.951257][T17591]  vfs_read+0x540/0xb60
[  402.951270][T17591]  ? __cfi_vfs_read+0x10/0x10
[  402.951284][T17591]  ksys_read+0x141/0x250
[  402.951296][T17591]  ? __cfi_ksys_read+0x10/0x10
[  402.951308][T17591]  ? __kasan_check_read+0x15/0x20
[  402.951319][T17591]  __x64_sys_read+0x7f/0x90
[  402.951331][T17591]  x64_sys_call+0x2638/0x2ee0
[  402.951344][T17591]  do_syscall_64+0x58/0xf0
[  402.951358][T17591]  ? clear_bhb_loop+0x50/0xa0
[  402.951370][T17591]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  402.951380][T17591] RIP: 0033:0x7f3f7458e929
[  402.951391][T17591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.951400][T17591] RSP: 002b:00007f3f7533c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  402.951414][T17591] RAX: ffffffffffffffda RBX: 00007f3f747b5fa0 RCX: 00007f3f7458e929
[  402.951422][T17591] RDX: 0000000000002020 RSI: 0000200000000b00 RDI: 0000000000000003
[  402.951429][T17591] RBP: 00007f3f7533c090 R08: 0000000000000000 R09: 0000000000000000
[  402.951436][T17591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.951442][T17591] R13: 0000000000000000 R14: 00007f3f747b5fa0 R15: 00007fffd380f668
[  402.951451][T17591]  </TASK>
[  403.299041][T17608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[  403.399317][T17611] netlink: 'syz.6.5980': attribute type 4 has an invalid length.
[  403.416493][T17611] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5980'.
[  403.540499][   T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  403.691543][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.701389][   T31] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  403.710630][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.719442][   T31] usb 4-1: config 0 descriptor??
[  404.133823][   T31] elecom 0003:056E:00FF.0023: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.3-1/input0
[  404.337108][T17608] rust_binder: Read failure Err(EFAULT) in pid:160
[  404.337478][  T319] usb 4-1: USB disconnect, device number 54
[  404.944906][T17655] syzkaller0: left promiscuous mode
[  404.950148][T17655] syzkaller0: left allmulticast mode
[  405.310832][T17600] Bluetooth: hci0: command 0x1003 tx timeout
[  405.310957][ T1484] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  405.342127][T17667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  405.342160][T17667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177
[  405.443268][T17692] overlayfs: failed to clone upperpath
[  405.481043][T17697] SELinux:  policydb version 555993776 does not match my version range 15-33
[  405.489921][T17697] SELinux: failed to load policy
[  405.600571][  T319] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  405.760455][  T319] usb 4-1: Using ep0 maxpacket: 8
[  405.769278][  T319] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.783659][  T319] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.800492][  T319] usb 4-1: config 0 interface 0 has no altsetting 0
[  405.808322][  T319] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  405.821484][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.848908][  T319] usb 4-1: config 0 descriptor??
[  406.296622][T17674] kvm: pic: single mode not supported
[  406.296641][T17674] kvm: pic: level sensitive irq not supported
[  406.311316][T17674] kvm: pic: single mode not supported
[  406.450945][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6034'.
[  406.487861][T17761] overlayfs: failed to clone upperpath
[  406.494865][T17755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:834
[  406.601113][  T319] usbhid 4-1:0.0: can't add hid device: -71
[  406.622864][  T319] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  406.629448][T17779] can: request_module (can-proto-0) failed.
[  406.636338][  T319] usb 4-1: USB disconnect, device number 55
[  406.839766][   T31] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  407.000120][   T31] usb 8-1: Using ep0 maxpacket: 32
[  407.007106][   T31] usb 8-1: config 8 has an invalid interface number: 193 but max is 3
[  407.015755][   T31] usb 8-1: config 8 has an invalid interface number: 37 but max is 3
[  407.023910][   T31] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  407.032690][   T31] usb 8-1: config 8 has an invalid interface number: 224 but max is 3
[  407.041246][   T31] usb 8-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  407.051618][   T31] usb 8-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  407.060592][   T31] usb 8-1: config 8 has no interface number 0
[  407.066823][   T31] usb 8-1: config 8 has no interface number 1
[  407.072910][   T31] usb 8-1: config 8 has no interface number 2
[  407.079268][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  407.090383][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  407.101464][   T31] usb 8-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  407.111587][   T31] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  407.122940][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  407.134012][   T31] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  407.145055][   T31] usb 8-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  407.158225][   T31] usb 8-1: config 8 interface 37 has no altsetting 0
[  407.165202][   T31] usb 8-1: config 8 interface 224 has no altsetting 0
[  407.174061][T17781] xfrm0: mtu less than device minimum
[  407.179882][   T31] usb 8-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  407.185648][T17781] rust_binder: Write failure EFAULT in pid:183
[  407.189301][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.209256][   T31] usb 8-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  407.240359][   T31] usb 8-1: Manufacturer: Є
[  407.246513][   T31] usb 8-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  407.265772][T17774] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  407.489486][   T31] snd-usb-audio 8-1:8.193: probe with driver snd-usb-audio failed with error -71
[  407.499719][  T307] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  407.508728][   T31] usbhid 8-1:8.37: couldn't find an input interrupt endpoint
[  407.516540][   T31] snd-usb-audio 8-1:8.37: probe with driver snd-usb-audio failed with error -71
[  407.527756][   T31] snd-usb-audio 8-1:8.224: probe with driver snd-usb-audio failed with error -71
[  407.539724][   T31] usb 8-1: USB disconnect, device number 25
[  407.652265][  T307] usb 4-1: device descriptor read/64, error -71
[  407.908843][  T307] usb 4-1: device descriptor read/64, error -71
[  408.110473][T17804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  408.140617][T17811] binder: Unknown parameter '01777777777777777777777'
[  408.154474][T17812] binder: Unknown parameter '01777777777777777777777'
[  408.165394][  T307] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  408.315105][  T307] usb 4-1: device descriptor read/64, error -71
[  408.466918][T17821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6056'.
[  408.571722][  T307] usb 4-1: device descriptor read/64, error -71
[  408.690566][  T307] usb usb4-port1: attempt power cycle
[  409.052745][  T307] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  409.075189][  T307] usb 4-1: device descriptor read/8, error -71
[  409.214560][  T307] usb 4-1: device descriptor read/8, error -71
[  409.352357][   T31] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  409.469656][  T307] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  409.492061][  T307] usb 4-1: device descriptor read/8, error -71
[  409.512439][   T31] usb 8-1: Using ep0 maxpacket: 32
[  409.519502][   T31] usb 8-1: config 8 has an invalid interface number: 193 but max is 3
[  409.527914][   T31] usb 8-1: config 8 has an invalid interface number: 37 but max is 3
[  409.536029][   T31] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  409.545213][   T31] usb 8-1: config 8 has an invalid interface number: 224 but max is 3
[  409.553370][   T31] usb 8-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  409.563630][   T31] usb 8-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  409.572706][   T31] usb 8-1: config 8 has no interface number 0
[  409.578831][   T31] usb 8-1: config 8 has no interface number 1
[  409.584977][   T31] usb 8-1: config 8 has no interface number 2
[  409.591302][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  409.602355][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  409.613529][   T31] usb 8-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  409.623916][   T31] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  409.634835][   T31] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  409.646023][   T31] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  409.657011][   T31] usb 8-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  409.670285][   T31] usb 8-1: config 8 interface 37 has no altsetting 0
[  409.677095][   T31] usb 8-1: config 8 interface 224 has no altsetting 0
[  409.684281][  T307] usb 4-1: device descriptor read/8, error -71
[  409.691648][   T31] usb 8-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  409.700835][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.709368][   T31] usb 8-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  409.733490][   T31] usb 8-1: Manufacturer: Є
[  409.738022][   T31] usb 8-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  409.753335][T17824] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  409.801160][  T307] usb usb4-port1: unable to enumerate USB device
[  409.976791][   T31] snd-usb-audio 8-1:8.193: probe with driver snd-usb-audio failed with error -71
[  409.989039][   T31] usbhid 8-1:8.37: couldn't find an input interrupt endpoint
[  409.996896][   T31] snd-usb-audio 8-1:8.37: probe with driver snd-usb-audio failed with error -71
[  410.006922][   T31] snd-usb-audio 8-1:8.224: probe with driver snd-usb-audio failed with error -71
[  410.017666][   T31] usb 8-1: USB disconnect, device number 26
[  410.586920][   T36] audit: type=1326 audit(1750753799.746:29246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.7.6069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7458e929 code=0x0
[  410.934297][   T31] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  410.945129][  T307] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  411.094768][   T31] usb 4-1: Using ep0 maxpacket: 32
[  411.101823][   T31] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  411.110082][  T307] usb 8-1: Using ep0 maxpacket: 32
[  411.115252][   T31] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  411.124040][   T31] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  411.133352][   T31] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  411.143436][   T31] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  411.153755][   T31] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  411.162836][   T31] usb 4-1: config 8 has no interface number 0
[  411.168948][   T31] usb 4-1: config 8 has no interface number 1
[  411.175181][  T307] usb 8-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  411.186092][   T31] usb 4-1: config 8 has no interface number 2
[  411.192263][  T307] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.203453][   T31] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  411.214653][  T307] usb 8-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  411.220814][T17873] bpf: Bad value for 'mode'
[  411.228115][   T31] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  411.243190][  T307] usb 8-1: config 0 interface 0 has no altsetting 0
[  411.249847][   T31] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  411.259983][  T307] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  411.269103][   T31] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  411.280624][  T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.289786][  T307] usb 8-1: config 0 descriptor??
[  411.295285][   T31] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  411.307035][   T31] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  411.319727][   T31] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  411.334541][   T31] usb 4-1: config 8 interface 37 has no altsetting 0
[  411.341404][   T31] usb 4-1: config 8 interface 224 has no altsetting 0
[  411.349791][   T31] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  411.358901][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.366936][   T31] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  411.391743][   T31] usb 4-1: Manufacturer: Є
[  411.397118][   T31] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  411.412556][T17870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  411.636708][   T31] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  411.647721][   T31] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  411.655968][   T31] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  411.666244][   T31] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  411.677218][   T31] usb 4-1: USB disconnect, device number 60
[  411.749941][  T307] zeroplus 0003:0C12:0030.0024: item fetching failed at offset 3/7
[  411.758157][  T307] zeroplus 0003:0C12:0030.0024: parse failed
[  411.764473][  T307] zeroplus 0003:0C12:0030.0024: probe with driver zeroplus failed with error -22
[  412.559237][   T31] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  412.720781][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.731884][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.741651][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  412.754763][   T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  412.764172][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.772874][   T31] usb 4-1: config 0 descriptor??
[  413.207765][   T31] plantronics 0003:047F:FFFF.0025: item fetching failed at offset 13/15
[  413.216287][   T31] plantronics 0003:047F:FFFF.0025: parse failed
[  413.222895][   T31] plantronics 0003:047F:FFFF.0025: probe with driver plantronics failed with error -22
[  413.424185][   T31] usb 4-1: USB disconnect, device number 61
[  413.849270][   T31] usb 8-1: USB disconnect, device number 27
[  413.957820][T17898] SELinux: security_context_str_to_sid () failed with errno=-22
[  413.975971][T17901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  414.050280][T17911] overlayfs: failed to resolve './bus': -2
[  414.117060][T17914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  414.117096][T17914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:221
[  414.301818][   T31] usb 8-1: new full-speed USB device number 28 using dummy_hcd
[  414.398042][   T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  414.428441][   T36] audit: type=1400 audit(1750753803.338:29247): avc:  denied  { execmod } for  pid=17919 comm="syz.6.6090" path="/dev/rnullb0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  414.451683][   T36] audit: type=1400 audit(1750753803.338:29248): avc:  denied  { listen } for  pid=17919 comm="syz.6.6090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  414.474004][   T31] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  414.476781][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6092'.
[  414.485168][   T31] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  414.507874][   T31] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  414.519035][   T31] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  414.531627][   T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  414.540768][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.548851][   T31] usb 8-1: Product: syz
[  414.553027][   T31] usb 8-1: Manufacturer: syz
[  414.557638][   T31] usb 8-1: SerialNumber: syz
[  414.563555][T17906] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  414.579837][   T10] usb 4-1: Using ep0 maxpacket: 32
[  414.591916][   T10] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  414.600109][   T10] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  414.608258][   T10] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  414.616990][   T10] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  414.625242][   T10] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  414.635515][   T10] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  414.644563][   T10] usb 4-1: config 8 has no interface number 0
[  414.652592][   T10] usb 4-1: config 8 has no interface number 1
[  414.659021][   T10] usb 4-1: config 8 has no interface number 2
[  414.665152][   T10] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  414.676132][   T10] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  414.687592][   T10] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  414.697845][   T10] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.709159][   T10] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  414.720316][   T10] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.731616][   T10] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  414.744799][   T10] usb 4-1: config 8 interface 37 has no altsetting 0
[  414.751696][   T10] usb 4-1: config 8 interface 224 has no altsetting 0
[  414.760008][   T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  414.769095][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.777126][   T10] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  414.786440][T17906] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  414.801338][   T10] usb 4-1: Manufacturer: Є
[  414.812923][   T10] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  414.814530][T17906] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  414.835275][T17918] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  414.898885][T17952] fuse: Unknown parameter ''
[  414.944107][   T36] audit: type=1400 audit(1750753803.824:29249): avc:  denied  { create } for  pid=17960 comm="syz.0.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  414.947402][T17961] rust_binder: Error while translating object.
[  414.964710][T17961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  414.970978][T17961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286
[  414.981239][T17961] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  415.060864][   T10] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  415.083918][   T10] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  415.092008][   T10] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  415.104978][   T10] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  415.120790][   T10] usb 4-1: USB disconnect, device number 62
[  415.225604][T17968] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  415.286607][T17978] overlayfs: failed to clone upperpath
[  415.374347][T17982] netlink: 'syz.6.6109': attribute type 12 has an invalid length.
[  415.507671][T17906] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  415.514926][T17906] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  415.612208][T17986] rust_binder: Error while translating object.
[  415.612230][T17986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  415.618490][T17986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227
[  415.736721][   T31] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[  415.752459][   T31] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  415.759948][   T31] cdc_ncm 8-1:1.0: setting rx_max = 2048
[  415.953054][   T31] cdc_ncm 8-1:1.0: setting tx_max = 184
[  415.960040][   T31] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  416.173516][T17906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.182171][T17906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.192432][  T808] usb 8-1: USB disconnect, device number 28
[  416.198830][  T808] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[  416.548745][T18025] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  416.579007][T18032] @: renamed from vlan0 (while UP)
[  416.599810][T18035] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6118'.
[  416.608856][T18035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6118'.
[  416.628395][   T36] audit: type=1326 audit(1750753805.396:29250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.653157][   T36] audit: type=1326 audit(1750753805.396:29251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.670370][T18040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6121'.
[  416.681030][   T36] audit: type=1326 audit(1750753805.396:29252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.710605][   T36] audit: type=1326 audit(1750753805.396:29253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.739252][   T36] audit: type=1326 audit(1750753805.396:29254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.764325][   T36] audit: type=1326 audit(1750753805.396:29255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.788309][   T36] audit: type=1326 audit(1750753805.396:29256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.793880][T18043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237
[  416.813014][   T36] audit: type=1326 audit(1750753805.396:29257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.846363][   T36] audit: type=1326 audit(1750753805.396:29258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.870228][   T36] audit: type=1326 audit(1750753805.396:29259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.6.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  416.916050][T18048] kvm: pic: non byte write
[  416.920704][T18048] kvm: vcpu 0: requested 80 ns lapic timer period limited to 200000 ns
[  416.964202][T18058] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  417.022179][T18059] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6129'.
[  417.038372][T18059] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6129'.
[  417.053775][T18059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  417.053815][T18059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:888
[  417.166956][   T31] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  417.316720][   T31] usb 4-1: device descriptor read/64, error -71
[  417.594525][   T31] usb 4-1: device descriptor read/64, error -71
[  417.754904][   T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  417.861789][   T31] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  417.915277][   T10] usb 8-1: Using ep0 maxpacket: 16
[  417.921448][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[  417.928245][   T10] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  417.937744][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.946657][   T10] usb 8-1: config 0 descriptor??
[  418.000880][   T31] usb 4-1: device descriptor read/64, error -71
[  418.202316][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6140'.
[  418.257330][   T31] usb 4-1: device descriptor read/64, error -71
[  418.363529][T18100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=18100 comm=syz.0.6143
[  418.376447][T18100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18100 comm=syz.0.6143
[  418.385935][   T31] usb usb4-port1: attempt power cycle
[  418.389386][T18100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=18100 comm=syz.0.6143
[  418.424234][   T10] hid (null): unknown global tag 0xc
[  418.430416][T18100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=18100 comm=syz.0.6143
[  418.443231][   T10] hid (null): invalid report_size 53633
[  418.448795][   T10] hid (null): bogus close delimiter
[  418.454438][   T10] hid (null): unknown global tag 0xe
[  418.460510][   T10] hid (null): unknown global tag 0xc
[  418.465825][   T10] hid (null): global environment stack underflow
[  418.474422][   T10] hid (null): unknown global tag 0xe
[  418.479785][   T10] hid (null): report_id 4160080533 is invalid
[  418.485935][   T10] hid (null): report_id 29837 is invalid
[  418.491627][   T10] hid (null): invalid report_size 57783
[  418.498511][   T10] hid (null): usage index exceeded
[  418.749223][   T31] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  418.771454][   T31] usb 4-1: device descriptor read/8, error -71
[  418.910714][   T31] usb 4-1: device descriptor read/8, error -71
[  419.166058][   T31] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  419.188749][   T31] usb 4-1: device descriptor read/8, error -71
[  419.327445][   T31] usb 4-1: device descriptor read/8, error -71
[  419.444143][   T31] usb usb4-port1: unable to enumerate USB device
[  420.138524][T18117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.147282][T18117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.515666][   T31] usb 8-1: USB disconnect, device number 29
[  420.555826][   T10] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  420.694874][   T10] usb 4-1: device descriptor read/64, error -71
[  420.887245][   T31] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  420.951379][   T10] usb 4-1: device descriptor read/64, error -71
[  421.048824][   T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.059829][   T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.069618][   T31] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  421.078815][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.083134][T18125] netlink: 268 bytes leftover after parsing attributes in process `syz.6.6152'.
[  421.087828][   T31] usb 8-1: config 0 descriptor??
[  421.207949][   T10] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  421.346909][   T10] usb 4-1: device descriptor read/64, error -71
[  421.397508][T18182] overlayfs: failed to clone upperpath
[  421.414502][T18184] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6171'.
[  421.531699][   T31] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0
[  421.538557][   T31] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0
[  421.549848][   T31] kone 0003:1E7D:2CED.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0
[  421.550896][T18195] overlayfs: failed to clone lowerpath
[  421.603492][   T10] usb 4-1: device descriptor read/64, error -71
[  421.721232][   T10] usb usb4-port1: attempt power cycle
[  422.084674][   T10] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  422.107002][   T10] usb 4-1: device descriptor read/8, error -71
[  422.245959][   T10] usb 4-1: device descriptor read/8, error -71
[  422.501514][   T10] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  422.524113][   T10] usb 4-1: device descriptor read/8, error -71
[  422.662879][   T10] usb 4-1: device descriptor read/8, error -71
[  422.779554][   T10] usb usb4-port1: unable to enumerate USB device
[  423.355415][T18262] rust_binder: Write failure EINVAL in pid:248
[  423.544009][T18271] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  423.731425][   T36] audit: type=1326 audit(1750753812.047:29260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.763366][   T36] audit: type=1326 audit(1750753812.047:29261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.787650][   T36] audit: type=1326 audit(1750753812.047:29262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.802085][  T808] usb 8-1: USB disconnect, device number 30
[  423.814365][   T36] audit: type=1326 audit(1750753812.047:29263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.842340][   T36] audit: type=1326 audit(1750753812.047:29264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.866477][   T36] audit: type=1326 audit(1750753812.047:29265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.878763][T18308] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  423.891029][   T36] audit: type=1326 audit(1750753812.047:29266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.894553][T18309] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  423.897851][   T36] audit: type=1326 audit(1750753812.047:29267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.921784][T18307] overlayfs: failed to clone lowerpath
[  423.929049][   T36] audit: type=1326 audit(1750753812.047:29268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.952542][T18310] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  423.957744][T18309] rust_binder: Write failure EINVAL in pid:901
[  423.981636][T18310] rust_binder: Write failure EINVAL in pid:901
[  423.989281][   T36] audit: type=1326 audit(1750753812.047:29269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7ffc0000
[  423.995663][T18311] fuse: Bad value for 'fd'
[  424.031071][  T307] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  424.036676][T18307] 9pnet_fd: Insufficient options for proto=fd
[  424.089623][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.098916][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.106807][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.114516][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.123436][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.130886][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.140213][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.147629][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.155098][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.162541][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.170304][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.177790][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.185213][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.192639][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.197115][T18335] netlink: 'syz.6.6233': attribute type 4 has an invalid length.
[  424.200199][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.208242][  T307] usb 4-1: Using ep0 maxpacket: 32
[  424.215763][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.222023][T18335] netlink: 'syz.6.6233': attribute type 5 has an invalid length.
[  424.229543][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.237317][T18335] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6233'.
[  424.244759][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.255409][  T307] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  424.265472][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.273915][  T307] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  424.277756][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.284840][  T307] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  424.292416][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.300999][  T307] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  424.310753][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.317991][  T307] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  424.326125][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.343475][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.351140][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.357566][  T307] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  424.358596][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.375298][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.378431][  T307] usb 4-1: config 8 has no interface number 0
[  424.382755][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.396329][  T307] usb 4-1: config 8 has no interface number 1
[  424.397274][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.408361][  T307] usb 4-1: config 8 has no interface number 2
[  424.410185][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.421943][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  424.423998][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.442222][  T379] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  424.445486][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  424.454522][  T379] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  424.470896][  T307] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  424.489938][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  424.501933][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  424.513234][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  424.525085][  T307] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  424.538482][  T307] usb 4-1: config 8 interface 37 has no altsetting 0
[  424.545364][  T307] usb 4-1: config 8 interface 224 has no altsetting 0
[  424.553755][  T307] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  424.563184][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.571569][  T307] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  424.595935][  T307] usb 4-1: Manufacturer: Є
[  424.600624][  T307] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  424.626733][T18288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  424.851171][  T307] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  424.862592][  T307] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  424.870647][  T307] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  424.881289][  T307] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  424.894276][  T307] usb 4-1: USB disconnect, device number 71
[  425.655241][  T379] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  425.655241][  T307] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  425.815608][  T379] usb 8-1: Using ep0 maxpacket: 32
[  425.824607][  T379] usb 8-1: config 8 has an invalid interface number: 193 but max is 3
[  425.833176][  T379] usb 8-1: config 8 has an invalid interface number: 37 but max is 3
[  425.841505][  T379] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  425.850469][  T379] usb 8-1: config 8 has an invalid interface number: 224 but max is 3
[  425.858953][  T379] usb 8-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  425.869386][  T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.869544][  T379] usb 8-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  425.889535][  T379] usb 8-1: config 8 has no interface number 0
[  425.890494][  T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.895910][  T379] usb 8-1: config 8 has no interface number 1
[  425.911775][  T379] usb 8-1: config 8 has no interface number 2
[  425.916360][  T307] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  425.917947][  T379] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  425.938027][  T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.938347][  T379] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  425.954837][  T307] usb 4-1: config 0 descriptor??
[  425.957284][  T379] usb 8-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  425.972375][  T379] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  425.983582][  T379] usb 8-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  425.994800][  T379] usb 8-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  426.006920][  T379] usb 8-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  426.023084][  T379] usb 8-1: config 8 interface 37 has no altsetting 0
[  426.029990][  T379] usb 8-1: config 8 interface 224 has no altsetting 0
[  426.038682][  T379] usb 8-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  426.047799][  T379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.055899][  T379] usb 8-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  426.080092][  T379] usb 8-1: Manufacturer: Є
[  426.084637][  T379] usb 8-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  426.100464][T18342] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  426.325724][  T379] snd-usb-audio 8-1:8.193: probe with driver snd-usb-audio failed with error -71
[  426.337867][  T379] usbhid 8-1:8.37: couldn't find an input interrupt endpoint
[  426.345835][  T379] snd-usb-audio 8-1:8.37: probe with driver snd-usb-audio failed with error -71
[  426.356452][  T379] snd-usb-audio 8-1:8.224: probe with driver snd-usb-audio failed with error -71
[  426.369508][  T379] usb 8-1: USB disconnect, device number 31
[  426.402815][  T307] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0
[  426.409715][  T307] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0
[  426.418165][  T307] kone 0003:1E7D:2CED.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  426.889328][T18362] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  426.892512][T18362] kvm: user requested TSC rate below hardware speed
[  426.907311][T18362] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  426.907332][T18362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  426.916796][T18362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:920
[  426.981912][T18365] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  427.010209][T18369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  427.017586][T18369] rust_binder: Error while translating object.
[  427.024415][T18369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  427.030658][T18369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:927
[  427.048278][T18371] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  427.141807][T18379] /dev/sg0: Can't lookup blockdev
[  428.074941][T18393] 9pnet: Could not find request transport: vp
[  428.142384][T18397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=18397 comm=syz.6.6250
[  428.155169][T18397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18397 comm=syz.6.6250
[  428.168005][T18397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=18397 comm=syz.6.6250
[  428.181101][T18397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=18397 comm=syz.6.6250
[  428.224880][T18407] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6253'.
[  428.338592][  T379] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  428.509697][  T379] usb 8-1: Using ep0 maxpacket: 8
[  428.518312][  T379] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  428.527644][  T379] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  428.535665][  T379] usb 8-1: Product: syz
[  428.539875][  T379] usb 8-1: Manufacturer: syz
[  428.544503][  T379] usb 8-1: SerialNumber: syz
[  428.549721][  T379] usb 8-1: config 0 descriptor??
[  428.615921][  T379] usb 4-1: USB disconnect, device number 72
[  428.860757][T18436] fuse: Bad value for 'user_id'
[  428.865832][T18436] fuse: Bad value for 'user_id'
[  429.225913][  T307] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  429.386257][  T307] usb 4-1: Using ep0 maxpacket: 32
[  429.392749][  T307] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  429.401418][  T307] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  429.410236][  T307] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  429.419233][  T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  429.428876][  T307] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  429.438628][  T307] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  429.451607][  T307] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  429.460696][  T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.469349][  T307] usb 4-1: config 0 descriptor??
[  429.690023][  T307] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  429.702776][  T307] usb 4-1: USB disconnect, device number 73
[  429.709515][  T307] usblp0: removed
[  430.413667][T18460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6269'.
[  430.451713][T18468] binder: Bad value for 'max'
[  430.457109][T18469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.465826][T18469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.469522][T18472] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  430.481860][T18472] rust_binder: Write failure EINVAL in pid:302
[  430.557361][T18480] rust_binder: Write failure EINVAL in pid:310
[  431.096747][  T307] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  431.267790][  T307] usb 4-1: Using ep0 maxpacket: 32
[  431.274679][  T307] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  431.283038][  T307] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  431.291280][  T307] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  431.300093][  T307] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  431.308264][  T307] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  431.318573][  T307] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  431.319006][  T379] usb 8-1: USB disconnect, device number 32
[  431.327552][  T307] usb 4-1: config 8 has no interface number 0
[  431.327575][  T307] usb 4-1: config 8 has no interface number 1
[  431.347269][  T307] usb 4-1: config 8 has no interface number 2
[  431.353694][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  431.364661][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  431.375893][  T307] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  431.386262][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.404206][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  431.415325][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.428712][  T307] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  431.428794][T18499] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=18499 comm=syz.7.6281
[  431.455564][  T307] usb 4-1: config 8 interface 37 has no altsetting 0
[  431.462481][  T307] usb 4-1: config 8 interface 224 has no altsetting 0
[  431.472174][  T307] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  431.481228][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.490585][  T307] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  431.515392][  T307] usb 4-1: Manufacturer: Є
[  431.519908][  T307] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  431.535612][T18492] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  431.756477][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  431.756496][   T36] audit: type=1400 audit(1750753819.539:29275): avc:  denied  { map } for  pid=18512 comm="syz.7.6284" path="socket:[100203]" dev="sockfs" ino=100203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  431.792219][   T36] audit: type=1400 audit(1750753819.577:29276): avc:  denied  { read } for  pid=18512 comm="syz.7.6284" path="socket:[100203]" dev="sockfs" ino=100203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  431.818913][  T307] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  431.831282][  T307] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  431.840089][  T307] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  431.853451][  T307] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  431.869842][  T307] usb 4-1: USB disconnect, device number 74
[  432.164992][T18530] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  432.220170][   T36] audit: type=1326 audit(1750753819.988:29277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.6.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd738e929 code=0x7fc00000
[  432.422377][  T808] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  432.593428][  T808] usb 8-1: Using ep0 maxpacket: 32
[  432.603104][  T808] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  432.611801][  T808] usb 8-1: config 0 has no interface number 0
[  432.625691][  T808] usb 8-1: config 0 interface 184 has no altsetting 0
[  432.633967][  T808] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  432.645311][  T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.661119][  T808] usb 8-1: Product: syz
[  432.665451][  T808] usb 8-1: Manufacturer: syz
[  432.670525][  T808] usb 8-1: SerialNumber: syz
[  432.680490][  T808] usb 8-1: config 0 descriptor??
[  432.697291][  T808] smsc75xx v1.0.0
[  433.003052][   T36] audit: type=1326 audit(1750753820.718:29278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.6.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfd732ab19 code=0x7fc00000
[  433.117270][  T319] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  433.278989][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.293537][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.303796][  T319] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  433.312861][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.321541][  T319] usb 4-1: config 0 descriptor??
[  433.453589][  T808] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  433.464427][  T808] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  433.756337][  T319] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0
[  433.763250][  T319] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0
[  433.770967][  T319] kone 0003:1E7D:2CED.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  434.116511][  T808] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  434.127357][  T808] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  434.136988][  T808] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  434.146500][  T808] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32
[  435.383356][  T808] usb 8-1: USB disconnect, device number 33
[  436.071927][  T379] usb 4-1: USB disconnect, device number 75
[  436.899007][T18598] binder: Unknown parameter 'hash'
[  436.906774][T18598] binder: Bad value for 'max'
[  437.211777][  T379] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  437.373205][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.384236][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.394232][  T379] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  437.403287][  T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.412014][  T379] usb 4-1: config 0 descriptor??
[  437.805538][T18624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:994
[  437.847603][  T379] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0
[  437.863929][  T379] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0
[  437.872405][  T379] kone 0003:1E7D:2CED.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  438.677822][T18648] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  439.649572][T18661] rust_binder: Error while translating object.
[  439.656305][T18661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  439.662581][T18661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1028
[  440.175131][  T379] usb 4-1: USB disconnect, device number 76
[  440.223689][T18666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  440.223726][T18666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:341
[  440.257242][   T36] audit: type=1400 audit(1750753827.490:29279): avc:  denied  { shutdown } for  pid=18669 comm="syz.3.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  440.286816][   T36] audit: type=1400 audit(1750753827.490:29280): avc:  denied  { map } for  pid=18669 comm="syz.3.6338" path="socket:[102197]" dev="sockfs" ino=102197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  440.311631][   T36] audit: type=1400 audit(1750753827.490:29281): avc:  denied  { read } for  pid=18669 comm="syz.3.6338" path="socket:[102197]" dev="sockfs" ino=102197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  440.347548][T18674] rust_binder: Write failure EINVAL in pid:343
[  440.348158][T18674] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  440.363189][T18674] rust_binder: Write failure EINVAL in pid:343
[  440.545603][T18691] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  440.590370][T18697] rust_binder: Write failure EFAULT in pid:1038
[  440.664902][  T379] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  440.717273][T18705] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  440.727008][T18705] netlink: 'syz.7.6350': attribute type 4 has an invalid length.
[  440.837149][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.848292][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.858541][  T379] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  440.867630][  T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.876343][  T379] usb 4-1: config 0 descriptor??
[  440.920687][T18711] cgroup: subsys name conflicts with all
[  441.017653][  T808] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  441.179293][  T808] usb 8-1: unable to read config index 0 descriptor/start: -61
[  441.186904][  T808] usb 8-1: can't read configurations, error -61
[  441.311143][  T379] kone 0003:1E7D:2CED.002C: unknown main item tag 0x0
[  441.318106][  T379] kone 0003:1E7D:2CED.002C: unknown main item tag 0x0
[  441.325523][  T379] kone 0003:1E7D:2CED.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  441.337045][  T808] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  441.501866][  T808] usb 8-1: unable to read config index 0 descriptor/start: -61
[  441.509509][  T808] usb 8-1: can't read configurations, error -61
[  441.516093][  T808] usb usb8-port1: attempt power cycle
[  441.528326][  T379] usb 4-1: USB disconnect, device number 77
[  441.883604][  T808] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  441.917361][  T808] usb 8-1: unable to read config index 0 descriptor/start: -61
[  441.925038][  T808] usb 8-1: can't read configurations, error -61
[  442.065380][  T808] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  442.086192][T18764] rust_binder: Write failure EFAULT in pid:362
[  442.088918][  T808] usb 8-1: unable to read config index 0 descriptor/start: -61
[  442.102946][  T808] usb 8-1: can't read configurations, error -61
[  442.109469][  T808] usb usb8-port1: unable to enumerate USB device
[  442.629838][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6375'.
[  442.665924][T18773] rust_binder: Error while translating object.
[  442.665964][T18773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  442.672451][T18773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369
[  443.284092][   T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  443.466920][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.478033][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.487850][   T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  443.497036][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.505871][   T31] usb 4-1: config 0 descriptor??
[  443.768559][T18815] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  443.941679][   T31] kone 0003:1E7D:2CED.002D: unknown main item tag 0x0
[  443.948564][   T31] kone 0003:1E7D:2CED.002D: unknown main item tag 0x0
[  443.955989][   T31] kone 0003:1E7D:2CED.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  443.992083][T18819] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  443.992391][T18819] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  444.006164][T18819] rust_binder: Write failure EINVAL in pid:1050
[  444.019818][T18827] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  444.029769][   T36] audit: type=1326 audit(1750753831.026:29282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.7.6399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f7458e929 code=0x0
[  444.045523][T18835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6401'.
[  444.158848][  T808] usb 4-1: USB disconnect, device number 78
[  444.806964][T18858] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6410'.
[  444.818103][T18858] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  444.820191][T18854] tmpfs: Unknown parameter 'usrquota���rR����Z��g���&'
[  444.826963][T18858] rust_binder: Write failure EINVAL in pid:366
[  444.864359][T18850] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.877742][T18850] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.884838][T18850] bridge_slave_0: entered allmulticast mode
[  444.891132][T18850] bridge_slave_0: entered promiscuous mode
[  444.897769][T18850] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.905073][T18850] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.912966][T18850] bridge_slave_1: entered allmulticast mode
[  444.920352][T18850] bridge_slave_1: entered promiscuous mode
[  444.923336][T18869] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  444.969284][T18850] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.983461][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.990805][T18850] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.997876][T18850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.023426][T14312] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.030902][T14312] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.030934][T18872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  445.058977][T13586] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.066055][T13586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.076436][T14312] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.083506][T14312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.109906][T18850] veth0_vlan: entered promiscuous mode
[  445.120879][T18850] veth1_macvtap: entered promiscuous mode
[  445.219097][  T808] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  445.227652][T18882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  445.229982][T18882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9
[  445.236954][T18882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9
[  445.327992][T18889] rust_binder: Error in use_page_slow: ESRCH
[  445.337018][T18889] rust_binder: use_range failure ESRCH
[  445.343122][T18889] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  445.348691][T18889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  445.356765][T18889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16
[  445.366923][T18891] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  445.381960][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.391410][T18894] rust_binder: Write failure EINVAL in pid:21
[  445.401153][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.406353][T18894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21
[  445.407311][  T808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  445.436009][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.447028][  T808] usb 4-1: config 0 descriptor??
[  445.721543][   T31] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  445.882235][  T808] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0
[  445.883935][   T31] usb 7-1: not running at top speed; connect to a high speed hub
[  445.889329][  T808] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0
[  445.905187][   T31] usb 7-1: config 1 interface 0 altsetting 65 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  445.914014][  T808] kone 0003:1E7D:2CED.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  445.921278][   T31] usb 7-1: config 1 interface 0 has no altsetting 0
[  445.942829][   T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.40
[  445.952024][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.960090][   T31] usb 7-1: Product: ࠠ
[  445.964383][   T31] usb 7-1: Manufacturer: 釫䬄뀻떌뻍渥뒴맆涮ꍜ䖣⹌ࠀ〣뾃卶폳錅尫ᐼ꯿Ո貓種ǃ輕䗅猭಻暄糪䓓ԩꤡ諣ગ덗ｫ芣曐⊌䛲ᨏ
[  445.981225][   T31] usb 7-1: SerialNumber: 껦Ｐ岟稡쩨夶娨⛌뵢Ꮝￗ敬埰炉尰니쿳玟Ꭸ➤￙髻㋻ꟵႷ㺂ТᝦҐ꠭ṟ㠡Ͻ摵돞럙혛䋩螱챟빉䭬똠⡖ 周邟㈡潃地ֳ홀⸄绺뢹铼㻦㚙툺ꩦ顇꣢⸞툿朅枧詔㳀ꭓ
[  446.010045][T18902] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  446.106851][  T307] usb 4-1: USB disconnect, device number 79
[  446.451836][   T31] usbhid 7-1:1.0: can't add hid device: -71
[  446.457797][   T31] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  446.470927][   T31] usb 7-1: USB disconnect, device number 31
[  446.800858][T18922] /dev/rnullb0: Can't open blockdev
[  446.815467][T18924] rust_binder: Write failure EINVAL in pid:415
[  446.819026][T18924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:415
[  446.892912][T18928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.902754][T18928] rust_binder: Write failure EINVAL in pid:1063
[  446.980019][T14312] bridge_slave_1: left allmulticast mode
[  447.010559][T14312] bridge_slave_1: left promiscuous mode
[  447.019060][T14312] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.029062][T14312] bridge_slave_0: left allmulticast mode
[  447.035196][T14312] bridge_slave_0: left promiscuous mode
[  447.044949][T14312] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.144067][T18937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  447.178405][T14312] tipc: Left network mode
[  447.184062][T14312] veth1_macvtap: left promiscuous mode
[  447.190360][T14312] veth0_vlan: left promiscuous mode
[  447.303799][  T307] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  447.465121][  T307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.476215][  T307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.486283][  T307] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  447.495405][  T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.504916][  T307] usb 8-1: config 0 descriptor??
[  447.940793][  T307] kone 0003:1E7D:2CED.002F: unknown main item tag 0x0
[  447.947719][  T307] kone 0003:1E7D:2CED.002F: unknown main item tag 0x0
[  447.956005][  T307] kone 0003:1E7D:2CED.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0
[  448.072587][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6441'.
[  448.082207][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6441'.
[  448.108509][T18959] rust_binder: Write failure EINVAL in pid:370
[  448.146202][T18959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370
[  448.160486][  T307] usb 8-1: USB disconnect, device number 38
[  448.382921][T18967] rust_binder: Error while translating object.
[  448.382953][T18967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  448.393777][T18967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377
[  448.540009][T18978] overlay: Unknown parameter 'obj_role'
[  448.743803][T18980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  448.757630][  T307] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  448.922055][  T307] usb 4-1: Using ep0 maxpacket: 32
[  448.944958][  T307] usb 4-1: config 8 has an invalid interface number: 193 but max is 3
[  448.953580][  T307] usb 4-1: config 8 has an invalid interface number: 37 but max is 3
[  448.971445][  T307] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  448.980352][  T307] usb 4-1: config 8 has an invalid interface number: 224 but max is 3
[  448.987508][T18985] rust_binder: Write failure EINVAL in pid:38
[  448.989300][  T307] usb 4-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  448.991754][T18985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38
[  448.996039][  T307] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  449.024225][  T307] usb 4-1: config 8 has no interface number 0
[  449.030969][  T307] usb 4-1: config 8 has no interface number 1
[  449.039222][  T307] usb 4-1: config 8 has no interface number 2
[  449.047848][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  449.058980][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  449.070109][  T307] usb 4-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  449.071046][T18989] incfs: Error accessing: ./file0.
[  449.087867][T18989] incfs: mount failed -20
[  449.099720][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  449.112127][  T307] usb 4-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  449.123145][  T307] usb 4-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  449.134194][  T307] usb 4-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  449.147629][  T307] usb 4-1: config 8 interface 37 has no altsetting 0
[  449.155148][  T307] usb 4-1: config 8 interface 224 has no altsetting 0
[  449.162665][T18989] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  449.162690][T18989] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  449.170848][T18989] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  449.179123][  T307] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  449.198283][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.206387][  T307] usb 4-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  449.235230][T18992] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  449.236742][  T307] usb 4-1: Manufacturer: Є
[  449.247884][  T307] usb 4-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  449.255653][T18993] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  449.267963][T18973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  449.270943][T18993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  449.286688][T18993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1076
[  449.372424][T19002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  449.447513][T19002] rust_binder: Error in use_page_slow: ESRCH
[  449.447540][T19002] rust_binder: use_range failure ESRCH
[  449.452241][T19005] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  449.456846][T19002] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  449.463502][T19005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  449.475506][T19005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:49
[  449.485726][T19002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  449.495793][T19002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49
[  449.506004][  T307] snd-usb-audio 4-1:8.193: probe with driver snd-usb-audio failed with error -71
[  449.547493][  T307] usbhid 4-1:8.37: couldn't find an input interrupt endpoint
[  449.555925][  T307] snd-usb-audio 4-1:8.37: probe with driver snd-usb-audio failed with error -71
[  449.567085][  T307] snd-usb-audio 4-1:8.224: probe with driver snd-usb-audio failed with error -71
[  449.581543][  T307] usb 4-1: USB disconnect, device number 80
[  450.051529][T19018] rust_binder: Write failure EINVAL in pid:439
[  450.149882][T19033] binder: Bad value for 'stats'
[  450.267166][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6469'.
[  450.307941][  T319] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  450.575056][   T45] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  450.714151][   T45] usb 7-1: device descriptor read/64, error -71
[  450.970617][   T45] usb 7-1: device descriptor read/64, error -71
[  451.227187][   T45] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  451.366151][   T45] usb 7-1: device descriptor read/64, error -71
[  451.438116][T19059] rust_binder: Write failure EFAULT in pid:475
[  451.458187][T19063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479
[  451.622783][   T45] usb 7-1: device descriptor read/64, error -71
[  451.729633][  T379] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  451.751363][   T45] usb usb7-port1: attempt power cycle
[  451.890102][  T379] usb 4-1: Using ep0 maxpacket: 16
[  451.896748][  T379] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  451.905488][  T379] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  451.913852][  T379] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  451.922675][  T379] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  451.930867][  T379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  451.939763][  T379] usb 4-1: config 0 has no interface number 0
[  451.945893][  T379] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  451.956975][  T379] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  451.966830][  T379] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  451.976704][  T379] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  451.989762][  T379] usb 4-1: config 0 interface 125 has no altsetting 0
[  451.996528][  T379] usb 4-1: config 0 interface 125 has no altsetting 2
[  452.004789][  T379] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  452.013931][  T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.022140][  T379] usb 4-1: Product: syz
[  452.026326][  T379] usb 4-1: Manufacturer: syz
[  452.030949][  T379] usb 4-1: SerialNumber: syz
[  452.036218][  T379] usb 4-1: config 0 descriptor??
[  452.114718][   T45] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  452.136919][   T45] usb 7-1: device descriptor read/8, error -71
[  452.276022][   T45] usb 7-1: device descriptor read/8, error -71
[  452.531449][   T45] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  452.553871][   T45] usb 7-1: device descriptor read/8, error -71
[  452.692879][   T45] usb 7-1: device descriptor read/8, error -71
[  452.809478][   T45] usb usb7-port1: unable to enumerate USB device
[  453.825014][  T319] usb 8-1: device descriptor read/64, error -71
[  453.953284][  T379] usb 7-1: new low-speed USB device number 36 using dummy_hcd
[  454.102960][  T319] usb 8-1: Using ep0 maxpacket: 8
[  454.109943][  T319] usb 8-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  454.121919][  T319] usb 8-1: config 1 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  454.136411][  T319] usb 8-1: config 1 interface 0 has no altsetting 0
[  454.144263][  T379] usb 7-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  454.155242][  T379] usb 7-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt
[  454.165590][  T319] usb 8-1: New USB device found, idVendor=0766, idProduct=0204, bcdDevice= 0.40
[  454.174803][  T379] usb 7-1: config 1 interface 0 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  454.187905][  T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.196013][  T379] usb 7-1: config 1 interface 0 has no altsetting 0
[  454.202674][  T319] usb 8-1: Product: 㮪헛趨易䱕꼴끥䋠ⲉᇒⱓⱴ輠휏떢⽁널Ꝺ饂Ⅾ忽㍶踭㪃﷈蟏↝냦䟒ϟ㽫׷턶镔䇤ൽ荤쌖໖낿ມ奶㳓胘灴ﳒ眔滙귝쾁뱖ﹶ箪⩗ᙘꆮ⡸㦐栞ࣷ챹ⱄ儝驕릵腚ᘉ雾䘩켛鿛硅놨Ꮡ흸睩
[  454.228887][  T319] usb 8-1: Manufacturer: Љ
[  454.233443][  T319] usb 8-1: SerialNumber: ⤏軬㕂ㄠ
[  454.673747][  T319] usbhid 8-1:1.0: can't add hid device: -71
[  454.679726][  T319] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  454.689159][  T319] usb 8-1: USB disconnect, device number 39
[  454.697780][   T45] usb 4-1: USB disconnect, device number 81
[  454.732379][T19099] rust_binder: Write failure EINVAL in pid:492
[  454.759578][T19103] bpf: Bad value for 'mode'
[  454.831280][T19105] syzkaller0: entered promiscuous mode
[  454.836935][T19105] syzkaller0: entered allmulticast mode
[  455.182841][   T45] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  455.308271][T19118] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  455.344229][   T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  455.360831][   T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  455.370757][   T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  455.371680][T19119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1113
[  455.386320][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  455.405094][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  455.413410][   T45] usb 4-1: Product: syz
[  455.417636][   T45] usb 4-1: Manufacturer: syz
[  455.422289][   T45] usb 4-1: SerialNumber: syz
[  455.643833][   T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  455.860068][  T319] usb 4-1: USB disconnect, device number 82
[  455.862085][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'.
[  455.867205][  T319] usblp0: removed
[  456.550610][T19165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504
[  456.745725][  T379] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.764291][  T379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.772336][  T379] usb 7-1: Product:  
[  456.776546][  T379] usb 7-1: Manufacturer: ю
[  456.783024][  T379] usb 7-1: can't set config #1, error -71
[  456.789883][  T379] usb 7-1: USB disconnect, device number 36
[  456.813563][T13587] Bluetooth: hci0: Frame reassembly failed (-84)
[  456.820182][T13587] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[  457.474220][T19180] kvm: Disabled LAPIC found during irq injection
[  457.856194][T19200] input: syz0 as /devices/virtual/input/input47
[  458.141039][T19220] overlayfs: failed to clone upperpath
[  458.174677][T19226] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6537'.
[  458.185256][T19226] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6537'.
[  458.283663][T19255] overlayfs: failed to clone upperpath
[  458.289665][T19255] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  458.303234][T19255] overlayfs: missing 'lowerdir'
[  458.355747][T19274] tmpfs: Unknown parameter 'grpquota_blockFharm�)�7�'
[  458.945792][  T319] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  459.031326][ T1484] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  459.031326][T17600] Bluetooth: hci0: command 0x1003 tx timeout
[  459.618571][T19302] fuse: Bad value for 'user_id'
[  459.623489][T19302] fuse: Bad value for 'user_id'
[  459.651366][T19307] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  459.674787][T19314] netlink: 'syz.6.6567': attribute type 4 has an invalid length.
[  459.682692][T19314] netlink: 'syz.6.6567': attribute type 6 has an invalid length.
[  459.690744][T19314] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6567'.
[  460.036228][  T306] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  460.199602][  T306] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  460.208749][  T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.216751][  T306] usb 7-1: Product: syz
[  460.221067][  T306] usb 7-1: Manufacturer: syz
[  460.225669][  T306] usb 7-1: SerialNumber: syz
[  460.232809][  T306] r8152-cfgselector 7-1: Unknown version 0x0000
[  460.239087][  T306] r8152-cfgselector 7-1: config 0 descriptor??
[  460.466257][T19321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.475324][T19321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.532446][  T306] r8152-cfgselector 7-1: USB disconnect, device number 37
[  460.848731][  T319] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  461.010168][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.021392][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.031199][  T319] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  461.040253][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.048854][  T319] usb 4-1: config 0 descriptor??
[  461.179553][T19331] rust_binder: Failed to allocate buffer. len:104, is_oneway:false
[  461.483969][  T319] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0
[  461.499551][  T319] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0
[  461.507061][  T319] kone 0003:1E7D:2CED.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  461.632542][T19344] netlink: 188 bytes leftover after parsing attributes in process `syz.7.6578'.
[  461.700087][  T319] usb 4-1: USB disconnect, device number 84
[  461.781917][T19364] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  461.781961][T19364] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  461.790021][T19364] rust_binder: Read failure Err(EFAULT) in pid:450
[  461.845724][T19382] netlink: 124 bytes leftover after parsing attributes in process `syz.7.6591'.
[  461.870486][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6592'.
[  461.917901][T19389] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  462.031025][T19393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96
[  462.318446][T19408] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  462.351995][T19422] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  462.360928][T19424] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  462.386925][T19427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  462.393441][T19427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:552
[  462.422561][T19436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  462.431760][T19436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123
[  462.666161][  T379] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  462.859580][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.879908][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.889875][  T379] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  462.900645][  T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.912718][  T379] usb 4-1: config 0 descriptor??
[  463.168581][   T45] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  463.231074][T19476] /dev/rnullb0: Can't lookup blockdev
[  463.307604][   T45] usb 7-1: device descriptor read/64, error -71
[  463.352459][  T379] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0
[  463.359369][  T379] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0
[  463.369757][  T379] kone 0003:1E7D:2CED.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  463.564161][   T45] usb 7-1: device descriptor read/64, error -71
[  463.573299][  T379] usb 4-1: USB disconnect, device number 85
[  463.820756][   T45] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  463.959708][   T45] usb 7-1: device descriptor read/64, error -71
[  463.961027][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  463.975149][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  463.984346][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  463.993393][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  464.002904][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  464.011902][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  464.020954][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6638'.
[  464.123716][T19508] rust_binder: Write failure EINVAL in pid:557
[  464.148864][T19512] input: syz0 as /devices/virtual/input/input48
[  464.216268][   T45] usb 7-1: device descriptor read/64, error -71
[  464.236558][T19514] rust_binder: Write failure EINVAL in pid:563
[  464.244397][T19516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  464.250677][T19516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565
[  464.268118][T19520] rust_binder: Write failure EFAULT in pid:569
[  464.333931][   T45] usb usb7-port1: attempt power cycle
[  464.611859][  T379] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  464.708061][   T45] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  464.730505][   T45] usb 7-1: device descriptor read/8, error -71
[  464.773210][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.784163][  T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.794085][  T379] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  464.803177][  T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.811855][  T379] usb 4-1: config 0 descriptor??
[  464.869464][   T45] usb 7-1: device descriptor read/8, error -71
[  464.946150][T19553] overlayfs: failed to clone upperpath
[  465.128866][   T45] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  465.158196][   T45] usb 7-1: device descriptor read/8, error -71
[  465.246345][  T379] kone 0003:1E7D:2CED.0032: unknown main item tag 0x0
[  465.253981][  T379] kone 0003:1E7D:2CED.0032: unknown main item tag 0x0
[  465.261396][  T379] kone 0003:1E7D:2CED.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  465.297276][   T45] usb 7-1: device descriptor read/8, error -71
[  465.413700][   T45] usb usb7-port1: unable to enumerate USB device
[  465.462401][  T307] usb 4-1: USB disconnect, device number 86
[  465.747727][T19565] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  466.070246][T19599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584
[  466.077473][T19599] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  466.113628][T19609] binder: Unknown parameter 'defcontext01777777777777777777777'
[  466.140371][T19611] rust_binder: Write failure EINVAL in pid:596
[  466.234293][T13587] Bluetooth: hci0: Frame reassembly failed (-84)
[  466.413397][T19627] netlink: 'syz.7.6681': attribute type 4 has an invalid length.
[  466.450635][  T379] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  466.471818][T19629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:481
[  466.482846][T19631] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  466.493362][T19631] rust_binder: Got transaction with invalid offset.
[  466.499965][T19631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  466.506663][T19631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483
[  466.528774][T19633] netlink: 'syz.0.6684': attribute type 4 has an invalid length.
[  466.612531][  T379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.623646][  T379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.634419][  T379] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  466.643568][  T379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.652615][  T379] usb 7-1: config 0 descriptor??
[  466.709314][T19640] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  466.709545][T19640] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  466.723272][T19640] rust_binder: Write failure EINVAL in pid:491
[  467.088011][  T379] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[  467.101931][  T379] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[  467.109566][  T379] kone 0003:1E7D:2CED.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0
[  467.303454][  T307] usb 7-1: USB disconnect, device number 42
[  468.161092][  T319] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  468.321443][  T319] usb 7-1: Using ep0 maxpacket: 32
[  468.327788][  T319] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  468.336203][  T319] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  468.344838][  T319] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  468.353844][  T319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  468.363477][  T319] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  468.373156][  T319] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  468.386149][  T319] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  468.395171][  T319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.403876][  T319] usb 7-1: config 0 descriptor??
[  468.439074][T17600] Bluetooth: hci0: command 0x1003 tx timeout
[  468.439068][ T1484] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  468.625271][  T319] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  468.656221][T19670] tipc: Enabling of bearer <ib:pimreg> rejected, media not registered
[  468.665014][T19670] vcan0: entered allmulticast mode
[  468.670370][T19670] vcan0: left allmulticast mode
[  468.675574][T19670] rust_binder: Write failure EFAULT in pid:506
[  468.839562][  T307] usb 7-1: USB disconnect, device number 43
[  468.852400][  T307] usblp0: removed
[  468.996019][T19677] 9pnet_fd: Insufficient options for proto=fd
[  469.237949][T19687] rust_binder: Write failure EINVAL in pid:616
[  469.255103][T19691] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  469.309007][T19695] syzkaller0: left promiscuous mode
[  469.314290][T19695] syzkaller0: left allmulticast mode
[  469.320863][T19695] tipc: Started in network mode
[  469.325734][T19695] tipc: Node identity , cluster identity 4711
[  469.331866][T19695] tipc: Failed to obtain node identity
[  469.337384][T19695] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  469.355056][T19697] veth1_to_bond: entered allmulticast mode
[  469.361150][T19697] veth1_to_bond: entered promiscuous mode
[  469.367840][T19697] veth1_to_bond: left promiscuous mode
[  469.373528][T19697] veth1_to_bond: left allmulticast mode
[  469.380404][T19697] rust_binder: BC_FREEZE_NOTIFICATION_DONE 7570632e70756f72 not found
[  469.388645][T19697] rust_binder: Write failure EINVAL in pid:628
[  469.403182][T19703] FAULT_INJECTION: forcing a failure.
[  469.403182][T19703] name failslab, interval 1, probability 0, space 0, times 0
[  469.422126][T19703] CPU: 1 UID: 0 PID: 19703 Comm: syz.6.6711 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  469.422159][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  469.422171][T19703] Call Trace:
[  469.422178][T19703]  <TASK>
[  469.422185][T19703]  __dump_stack+0x21/0x30
[  469.422204][T19703]  dump_stack_lvl+0x10c/0x190
[  469.422215][T19703]  ? __cfi_dump_stack_lvl+0x10/0x10
[  469.422235][T19703]  dump_stack+0x19/0x20
[  469.422250][T19703]  should_fail_ex+0x3d9/0x530
[  469.422263][T19703]  should_failslab+0xac/0x100
[  469.422277][T19703]  __kmalloc_noprof+0x69/0x450
[  469.422290][T19703]  ? usb_alloc_urb+0x5f/0x200
[  469.422302][T19703]  usb_alloc_urb+0x5f/0x200
[  469.422312][T19703]  ? do_proc_control+0x1e9/0xfd0
[  469.422323][T19703]  do_proc_control+0x1fe/0xfd0
[  469.422334][T19703]  proc_control+0xc9/0x120
[  469.422343][T19703]  ? destroy_async+0x210/0x210
[  469.422352][T19703]  ? mutex_lock+0x92/0x1c0
[  469.422363][T19703]  ? __cfi_vfs_write+0x10/0x10
[  469.422376][T19703]  usbdev_ioctl+0xc5b/0x20a0
[  469.422386][T19703]  ? __cfi_usbdev_ioctl+0x10/0x10
[  469.422395][T19703]  ? __fget_files+0x2c5/0x340
[  469.422409][T19703]  ? bpf_lsm_file_ioctl+0xd/0x20
[  469.422421][T19703]  ? security_file_ioctl+0x34/0xd0
[  469.422435][T19703]  ? __cfi_usbdev_ioctl+0x10/0x10
[  469.422444][T19703]  __se_sys_ioctl+0x135/0x1b0
[  469.422458][T19703]  __x64_sys_ioctl+0x7f/0xa0
[  469.422471][T19703]  x64_sys_call+0x1878/0x2ee0
[  469.422487][T19703]  do_syscall_64+0x58/0xf0
[  469.422505][T19703]  ? clear_bhb_loop+0x50/0xa0
[  469.422523][T19703]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  469.422540][T19703] RIP: 0033:0x7f1b62f8e929
[  469.422555][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.422568][T19703] RSP: 002b:00007f1b63d8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.422586][T19703] RAX: ffffffffffffffda RBX: 00007f1b631b5fa0 RCX: 00007f1b62f8e929
[  469.422600][T19703] RDX: 0000200000000500 RSI: 00000000c0185500 RDI: 0000000000000003
[  469.422610][T19703] RBP: 00007f1b63d8e090 R08: 0000000000000000 R09: 0000000000000000
[  469.422617][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.422624][T19703] R13: 0000000000000000 R14: 00007f1b631b5fa0 R15: 00007ffc6dc619a8
[  469.422633][T19703]  </TASK>
[  469.786119][  T307] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  469.946429][  T307] usb 4-1: Using ep0 maxpacket: 32
[  469.953040][  T307] usb 4-1: unable to read config index 0 descriptor/start: -61
[  469.960682][  T307] usb 4-1: can't read configurations, error -61
[  470.096171][  T307] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  470.256835][  T307] usb 4-1: Using ep0 maxpacket: 32
[  470.263470][  T307] usb 4-1: unable to read config index 0 descriptor/start: -61
[  470.271167][  T307] usb 4-1: can't read configurations, error -61
[  470.277534][  T307] usb usb4-port1: attempt power cycle
[  470.464196][T19736] futex_wake_op: syz.7.6725 tries to shift op by -1; fix this program
[  470.641335][  T307] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  470.663065][  T307] usb 4-1: Using ep0 maxpacket: 32
[  470.669812][  T307] usb 4-1: unable to read config index 0 descriptor/start: -61
[  470.677664][  T307] usb 4-1: can't read configurations, error -61
[  470.810800][T19752] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  470.823082][  T307] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  470.855544][  T307] usb 4-1: Using ep0 maxpacket: 32
[  470.862101][  T307] usb 4-1: unable to read config index 0 descriptor/start: -61
[  470.869854][  T307] usb 4-1: can't read configurations, error -61
[  470.876469][  T307] usb usb4-port1: unable to enumerate USB device
[  472.632225][T19774] usb usb6: usbfs: process 19774 (syz.3.6739) did not claim interface 5 before use
[  472.642480][   T36] audit: type=1400 audit(1750753857.797:29283): avc:  denied  { rename } for  pid=19773 comm="syz.3.6739" name="file0" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  472.644207][T19774] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63267 sclass=netlink_xfrm_socket pid=19774 comm=syz.3.6739
[  472.682730][T19776] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  472.682894][T19776] rust_binder: Write failure EINVAL in pid:533
[  472.690055][T19777] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  472.694083][T19776] rust_binder: Write failure EINVAL in pid:533
[  472.894001][T19788] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  473.207080][  T307] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  473.378106][  T307] usb 7-1: Using ep0 maxpacket: 32
[  473.385320][  T307] usb 7-1: config 8 has an invalid interface number: 193 but max is 3
[  473.394132][  T307] usb 7-1: config 8 has an invalid interface number: 37 but max is 3
[  473.402684][  T307] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  473.411493][  T307] usb 7-1: config 8 has an invalid interface number: 224 but max is 3
[  473.419714][  T307] usb 7-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config
[  473.430099][  T307] usb 7-1: config 8 has 3 interfaces, different from the descriptor's value: 4
[  473.439129][  T307] usb 7-1: config 8 has no interface number 0
[  473.445439][  T307] usb 7-1: config 8 has no interface number 1
[  473.451791][  T307] usb 7-1: config 8 has no interface number 2
[  473.458208][  T307] usb 7-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  473.469180][  T307] usb 7-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  473.480144][  T307] usb 7-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  473.490473][  T307] usb 7-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  473.501412][  T307] usb 7-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  473.512486][  T307] usb 7-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  473.524994][  T307] usb 7-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  473.538532][  T307] usb 7-1: config 8 interface 37 has no altsetting 0
[  473.545250][  T307] usb 7-1: config 8 interface 224 has no altsetting 0
[  473.553702][  T307] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04
[  473.562825][  T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.570899][  T307] usb 7-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ
[  473.595116][  T307] usb 7-1: Manufacturer: Є
[  473.599659][  T307] usb 7-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ
[  473.618414][T19791] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  473.843292][  T307] snd-usb-audio 7-1:8.193: probe with driver snd-usb-audio failed with error -71
[  473.853935][  T307] usbhid 7-1:8.37: couldn't find an input interrupt endpoint
[  473.861741][  T307] snd-usb-audio 7-1:8.37: probe with driver snd-usb-audio failed with error -71
[  473.872100][  T307] snd-usb-audio 7-1:8.224: probe with driver snd-usb-audio failed with error -71
[  473.882877][  T307] usb 7-1: USB disconnect, device number 44
[  474.275395][T19846] tipc: Started in network mode
[  474.280475][T19846] tipc: Node identity , cluster identity 4711
[  474.286574][T19846] tipc: Failed to obtain node identity
[  474.292402][T19846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.315774][T19848] fuse: Bad value for 'user_id'
[  474.320972][T19848] fuse: Bad value for 'user_id'
[  474.327585][T19848] can: request_module (can-proto-0) failed.
[  474.864109][   T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  475.024841][   T10] usb 7-1: Using ep0 maxpacket: 16
[  475.031764][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.043030][   T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  475.052953][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.067493][   T10] usb 7-1: config 0 descriptor??
[  475.344317][T19857] rust_kernel: panicked at drivers/staging/android/ashmem_rust.rs:418:13:
[  475.344317][T19857] attempt to subtract with overflow
[  475.358315][T19857] ------------[ cut here ]------------
[  475.364191][T19857] kernel BUG at rust/helpers/bug.c:7!
[  475.369889][T19857] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  475.370891][   T36] audit: type=1400 audit(1750753860.341:29284): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  475.376836][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.3.6770 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf
[  475.376866][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  475.376880][T19857] RIP: 0010:rust_helper_BUG+0x8/0x10
[  475.399571][   T36] audit: type=1400 audit(1750753860.341:29285): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.412258][T19857] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 36 08 e1 f0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7c cc a8 7c 90 90 90 90 90 90 90 90 90
[  475.412278][T19857] RSP: 0018:ffffc90001a87670 EFLAGS: 00010246
[  475.412297][T19857] RAX: 0000000000000069 RBX: 1ffff92000350ed0 RCX: aa33a224590c3c00
[  475.412311][T19857] RDX: ffffc90007521000 RSI: 0000000000004e59 RDI: 0000000000004e5a
[  475.412322][T19857] RBP: ffffc90001a87670 R08: ffffc90001a87367 R09: 1ffff92000350e6c
[  475.412334][T19857] R10: dffffc0000000000 R11: fffff52000350e6d R12: 0000000000000000
[  475.412346][T19857] R13: dffffc0000000000 R14: ffffc90001a876a0 R15: ffffc90001a876d0
[  475.412359][T19857] FS:  00007fa219a7e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  475.412375][T19857] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  475.423190][   T36] audit: type=1400 audit(1750753860.341:29286): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.427762][T19857] CR2: 0000200000002620 CR3: 000000010da9e000 CR4: 00000000003526b0
[  475.427783][T19857] Call Trace:
[  475.449772][   T36] audit: type=1400 audit(1750753860.341:29287): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.468903][T19857]  <TASK>
[  475.468915][T19857]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  475.468949][T19857]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  475.468973][T19857]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  475.475465][   T36] audit: type=1400 audit(1750753860.341:29288): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  475.482979][T19857]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  475.491304][   T36] audit: type=1400 audit(1750753860.341:29289): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  475.498900][T19857]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  475.498934][T19857]  ? rust_helper_krealloc+0x33/0xd0
[  475.507453][   T36] audit: type=1400 audit(1750753860.341:29290): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  475.514933][T19857]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[  475.527196][   T10] kye 0003:0458:5016.0034: control desc unexpectedly large
[  475.530538][T19857]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[  475.553974][   T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0034/input/input49
[  475.559842][T19857]  ? rust_helper_krealloc+0x33/0xd0
[  475.559882][T19857]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100
[  475.565028][   T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0034/input/input50
[  475.583807][T19857]  ? _RNvNtCs43vyB533jt3_6kernel4page10page_align+0x20/0x50
[  475.583852][T19857]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice5ioctl+0x2c01/0x2ed0
[  475.583887][T19857]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice5ioctl+0x10/0x10
[  475.589368][   T10] kye 0003:0458:5016.0034: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0
[  475.594303][T19857]  ? do_vfs_ioctl+0xeda/0x1e30
[  475.594343][T19857]  ? __futex_queue+0x19a/0x340
[  475.594366][T19857]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  475.754716][   T10] usb 7-1: USB disconnect, device number 45
[  475.757197][T19857]  ? __cfi___futex_queue+0x10/0x10
[  475.757231][T19857]  ? futex_wait_setup+0x1bc/0x260
[  475.845148][T19857]  ? __futex_wait+0x218/0x2a0
[  475.849819][T19857]  ? ioctl_has_perm+0x384/0x4d0
[  475.854677][T19857]  ? has_cap_mac_admin+0xd0/0xd0
[  475.859688][T19857]  ? futex_wake+0x63a/0x900
[  475.864210][T19857]  ? futex_setup_timer+0xb4/0xd0
[  475.869146][T19857]  ? futex_wait+0x288/0x540
[  475.873650][T19857]  ? __cfi_futex_wait+0x10/0x10
[  475.878518][T19857]  ? selinux_file_ioctl+0x6e0/0x1360
[  475.883895][T19857]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  475.889440][T19857]  ? __hrtimer_run_queues+0x97e/0x9e0
[  475.894820][T19857]  ? do_futex+0x309/0x500
[  475.899505][T19857]  ? __cfi_do_futex+0x10/0x10
[  475.904271][T19857]  ? tick_program_event+0x9b/0x120
[  475.909376][T19857]  ? __fget_files+0x2c5/0x340
[  475.914146][T19857]  _RINvNtCs43vyB533jt3_6kernel10miscdevice10fops_ioctlNtCscPPBqWtAqum_11ashmem_rust6AshmemEBP_+0x99/0x110
[  475.925593][T19857]  ? security_file_ioctl+0x34/0xd0
[  475.930709][T19857]  ? __cfi__RINvNtCs43vyB533jt3_6kernel10miscdevice10fops_ioctlNtCscPPBqWtAqum_11ashmem_rust6AshmemEBP_+0x10/0x10
[  475.942689][T19857]  __se_sys_ioctl+0x135/0x1b0
[  475.947373][T19857]  __x64_sys_ioctl+0x7f/0xa0
[  475.952066][T19857]  x64_sys_call+0x1878/0x2ee0
[  475.956826][T19857]  do_syscall_64+0x58/0xf0
[  475.961257][T19857]  ? clear_bhb_loop+0x50/0xa0
[  475.966100][T19857]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  475.971979][T19857] RIP: 0033:0x7fa218b8e929
[  475.976488][T19857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.996340][T19857] RSP: 002b:00007fa219a7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  476.004835][T19857] RAX: ffffffffffffffda RBX: 00007fa218db5fa0 RCX: 00007fa218b8e929
[  476.012964][T19857] RDX: 0000200000002600 RSI: 0000000040087708 RDI: 0000000000000003
[  476.020936][T19857] RBP: 00007fa218c10b39 R08: 0000000000000000 R09: 0000000000000000
[  476.029075][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.037131][T19857] R13: 0000000000000000 R14: 00007fa218db5fa0 R15: 00007fff1be75958
[  476.045124][T19857]  </TASK>
[  476.048165][T19857] Modules linked in:
[  476.052477][T19857] ---[ end trace 0000000000000000 ]---
[  476.059835][T19857] RIP: 0010:rust_helper_BUG+0x8/0x10
[  476.065421][T19857] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 36 08 e1 f0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7c cc a8 7c 90 90 90 90 90 90 90 90 90
[  476.085192][T19857] RSP: 0018:ffffc90001a87670 EFLAGS: 00010246
[  476.091464][T19857] RAX: 0000000000000069 RBX: 1ffff92000350ed0 RCX: aa33a224590c3c00
[  476.099512][T19857] RDX: ffffc90007521000 RSI: 0000000000004e59 RDI: 0000000000004e5a
[  476.107549][T19857] RBP: ffffc90001a87670 R08: ffffc90001a87367 R09: 1ffff92000350e6c
[  476.115638][T19857] R10: dffffc0000000000 R11: fffff52000350e6d R12: 0000000000000000
[  476.123640][T19857] R13: dffffc0000000000 R14: ffffc90001a876a0 R15: ffffc90001a876d0
[  476.131651][T19857] FS:  00007fa219a7e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  476.140606][T19857] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  476.147218][T19857] CR2: 0000200000002620 CR3: 000000010da9e000 CR4: 00000000003526b0
[  476.155216][T19857] Kernel panic - not syncing: Fatal exception
[  476.161690][T19857] Kernel Offset: disabled
[  476.165998][T19857] Rebooting in 86400 seconds..