last executing test programs:

1.859856727s ago: executing program 2 (id=217):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7461608b"], 0x17)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x16, 0x24, 0x64, 0x0, 0x7f, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}, {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}}}}}}}}, 0x32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

1.850461217s ago: executing program 2 (id=218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x18, r1, 0x1229, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000084}, 0x810)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mprotect(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x2000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r4, r5, 0x0, 0x7ffff004)
mmap$IORING_OFF_SQ_RING(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r5, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR<nB\r2v\x1f\xa2u\xc0I\xd6\xb4\xa3\xac\x90\x9d)\\\x94o\x8d\xed\'\xa2Js\xd7t{\xa3pvn^&\x0e%\xda-,sI\xc4\x95h\xa6\xe5Z\x7f#\xc0\x94\xcd\xf2) p\xf3\x94\xda*\xdb\x82O\xc1G\xf18\x16dl\xde\xf8\x8b\xf0\x8c\xa8\x89\xf9~$\x1c\x04\x14AN\x84\x9f\x83Q\xadB\xbb+w\xc1\xebEF\xb0J\t\xa5\xfa8\xb60)\xbc\x11\xbd9\xad\xc6\x17[\xb5\x9fD\x82 \xf9\xf9\xfdfnh@\xa7\xa4\xab\xe4\xe5\xc7\xaa\r\x1e\\\xa4\xd1\xfcHT\x8a\xb1R[\xf9\xe2+\xc2\x8f\xa9\xceS\xbao\x0e\x98W\xf6dMK\xd4\xbdSe\xd4\x9a\xdb\xd4o&\xc9Akd\xfc\x01\xa6$\xd6-\xe6I\xea\xc1 c!,\xf3l\x98\'\xb1\'\xe7F\xfa\x058\xcdD\x1e4#L\x14\xd9{L\x94\xe6^\x1c4ir4`@\xf9\x11:\'6P_~\xca\xe8Fr\x0eZ\xcd\xe6u\xd3K\xbc<\x94R\x80\x7f\x86\x95+\x87J\xebB\xcb\xb5\x97\xf1tg|dOp\xc0vvV\"\xc6B\xd2\xca\xf2\xa6|\a\\^[\'\xb0 \x88ij\x01gB\t\xd2\xf9\xd7\x16\x9b\xc2jTa}\xba\xdf\xb2\xd8\xd0`\x0fl\xcfv@[\f\x05+\xb6\x9f9\xa5\x10\xb1{\xc4\x89.H\xe5\x17\xe9\xe2\xab\x1f\x1a~\xe5\xc8\xf4\xc9\xdb\xae.`x%\x8e\xb1`\x90\x88H\'\xdes\rW\x9c\xb9\xf3\xcb\xd2P+z\xac\xfa\x8d\x8a\xaeY+\x01]\xe7\x1c\x01\xfcU\x1b_3\xad\"\nr`\x85\xe9\xeaC}\x9d\x8c\xf7\xd6`\x8a\'\x1d\xd4kT\xb8rS2z\xfc\x00\x00\x00\x00\xb56\x99\x94\x82&m\x17\b\xe5\x19\x10\x86\xb9\xc5\x85\x98\xdb\x11\xc321\x1d\x83\x90\x92\xf1\x94\x8c\x13n\xb4\x16\x1d&\x04\x9cs`\x9e\xe5U\xa7\xd4\xa6\b\xdd0\xb0\xe4[AC\x9b\a\xeb\xb2E0n\xa0\xd0\xcfz\x9e6\xa7\xcf\xbf\x19\xacQT\x172wbh\x849O\xd1\x87\xe1V\x8ff\xc9\xbfA.X\xfa\xa0\x92?\xb4AIk\xb7\x8e\xe4\x0f\xd3Ac\xb8>4\xebh\xe2\xd4')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x85b83000)

1.551135399s ago: executing program 3 (id=221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0xffff, 0x0, 0x81, 0x1}, 0x14)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r4, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x91, 0x5)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5)

1.523701389s ago: executing program 3 (id=222):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x8004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af04, &(0x7f00000001c0)={0x3})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0)

1.180813072s ago: executing program 3 (id=227):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0x1, 0x3, 0x163f)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x9, 0x7ff, 0x100000000)
getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}], [], 0x6b}})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000180)=0xc)
r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/connector\x00')
r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r6, r5, 0x0, 0xffffffff)

1.180263662s ago: executing program 3 (id=228):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x384062)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008075}, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000700)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r8, &(0x7f0000000980)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000140)="0700a2", 0x3}, {&(0x7f0000000280)="552f1a54", 0x4}], 0x3)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r7, &(0x7f00000004c0)='./file0\x00', 0x2)
ioprio_set$uid(0x3, 0x0, 0xf6ff3fd78fa5d57f)
r9 = dup(r2)
getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, &(0x7f0000000140))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000740)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc050000009e234b303029e81da6262db42174ff7bfe3f800bfe7b6aa54cc50a1f831fa79a00", "2e5237601a87f08faccc1418fbc3da00", [0x3, 0x6]}})
io_setup(0x0, &(0x7f0000000040)=<r10=>0x0)
r11 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_RESIZE(r11, 0x50009403, 0x0)
io_submit(r10, 0x5, &(0x7f0000000680)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0xb8, r11, &(0x7f00000004c0)="2edf64837e01b443c6cfd115678acfae877715a15df143fca3e60b5c50a136b6f7b9e04a8982a453511af1e25ba76f420d3f8c75d0ada94b09d00b3a9c80966f1a1e7ebfc13be5759d4075fdd2a4ae0ed7e26f092ec1e48bd8b4ad8c604625232ba9eec250f570097a08f05e839d9429bfadefc20314fbb352320f677bba2a44afcd04751638e2ca22771d7173c2f5a7361dd25d0a1206263018a6e7272e2f02b5e3b48e1cb37e8dc82a3baed2454e014aa8feb05b24c7ebe67f6aaf71d42b06af", 0xc1, 0xffffffffffffffff, 0x0, 0x2, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x5, r11, &(0x7f00000002c0)="6f38d182960fe181d0ad193f0311eccdf38f96705ccb7a509e57e2cd368c0c8d34bdf935967576b317d0183d95062fe159fe4155fccc9cb73ca7335d6c61e459d6c41a6cad519b4fdcb68dfd09000000ce9ac4eccfdb58b6085c9865fe5ca040537f83a4e533613f5d461c857ef98b48bfe63a602591c7", 0x77, 0x9, 0x0, 0x1, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xc, 0x25d, r1, &(0x7f0000000380)="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", 0xfc, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="53fdc5c2341d894c2b029c91060f3585b45afe8d98ffe55f10cead89f4d163c4012742fd1d9346c56108e1e8082c69dcc5cbc677baeb1fddd0e23df0aefd3c43f5f58c719615bd767202eb8e45aef7fee6504dc956582d44713a520b3d15b11c14ef736682802ccd", 0x68, 0x0, 0x0, 0x2, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x8b11, r1, &(0x7f0000000600)="529b3773479f01ade30082d914cf51b8341ddc20bdc2b5ef33a9eecca9b66a8b", 0x20, 0x5, 0x0, 0x2, r1}])
write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000006c0)={0xa, {0x7, 0xfb, 0x6d}}, 0xa)

954.346693ms ago: executing program 1 (id=230):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async)
fchown(r3, 0xee01, 0x0) (async, rerun: 64)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0xb5, 0x14210000, 0x81, 0x1005, 0x0, 0x8}}, 0x50) (rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x302000, 0x1000, 0xe9, 0x7}, 0x20)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x339)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="200000005e00010000000000000000000c000000010000001600008004000180"], 0x20}], 0x1}, 0x0) (async)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0)

954.040733ms ago: executing program 1 (id=231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1)

952.416103ms ago: executing program 1 (id=232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {0x2, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) (async)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {0x2, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)

950.112983ms ago: executing program 1 (id=233):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
userfaultfd(0x801)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) (async)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080))
pipe(&(0x7f00000000c0))
timerfd_create(0x8, 0x80800) (async)
timerfd_create(0x8, 0x80800)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = getpid()
syz_pidfd_open(r2, 0x0) (async)
r3 = syz_pidfd_open(r2, 0x0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
setns(r3, 0x20000)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r5, @ANYRES16, @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32=r1, @ANYBLOB="080001"], 0x34}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000)

948.613743ms ago: executing program 1 (id=234):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c142, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0xffffffff, 0x4}})
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffcf1)

932.208623ms ago: executing program 1 (id=235):
socket(0xf, 0x1, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

930.919633ms ago: executing program 2 (id=236):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000400)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r2=>0x0}], 0xf, "9ca04c8cc124bb"}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={0x0, <r3=>0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002400)={r2, r3, "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", "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"})

930.382773ms ago: executing program 3 (id=237):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0xfffffffffffffdb5)
read$FUSE(r2, 0x0, 0x0)
r6 = getpgrp(0xffffffffffffffff) (async)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000001c0)={{0x5d, @dev={0xac, 0x14, 0x14, 0x7}, 0x4e20, 0x3, 'dh\x00', 0x10, 0x7f, 0x16}, {@private=0xa010100, 0x4e22, 0x0, 0x7f, 0x800, 0x4e1}}, 0x44)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x604, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x4)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)

930.048923ms ago: executing program 2 (id=238):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000) (async)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) (async)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00', 0x2e})
ioctl$UI_DEV_CREATE(r4, 0x5501) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020)
r6 = syz_pidfd_open(r3, 0x0)
setns(r6, 0x24020000) (async)
mount(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x2390026, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

876.709443ms ago: executing program 2 (id=239):
r0 = socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x2, 0xe7f, 0x1ff, 0x0, 0x6, 0x3, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg$unix(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/219, 0xdb)
writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) (async)
writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1)
close(0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4)
connect$netlink(r6, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc)
write$binfmt_script(r4, 0x0, 0x6f4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x5f7b1000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x5f7b1000)
open(&(0x7f0000000000)='./file0\x00', 0x4003, 0x18c) (async)
open(&(0x7f0000000000)='./file0\x00', 0x4003, 0x18c)

875.638953ms ago: executing program 3 (id=240):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
syz_usb_connect(0x1, 0xd29, &(0x7f0000000980)={{0x12, 0x1, 0x210, 0x17, 0xac, 0x5, 0x8, 0x2001, 0x1a02, 0x969b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd17, 0x4, 0x58, 0xfd, 0x0, 0x9, [{{0x9, 0x4, 0x72, 0x1, 0xc, 0xa8, 0x82, 0x16, 0x3, [@generic={0x42, 0x30, "b7be9d1a4c2ab1dfd2f0847a87a3f47d76f4c43f5eb2181558d1047f2d533486174d0b70f4df05cb5146346aff709c51d5d3771db4a735efc73ebfbb1a8a77ff"}], [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf7, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40a619d6fa8b2920, 0xc0, 0x3, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0x0, 0x0, [@generic={0x6d, 0x9, "febfdf185845bd3ee88c09c9083ed7814a50b4881f6f8bb21fcea3d592b17a712602cc5e7b07fce97d1bae01d28a574fadf71f0cb3e2092f4b97d194754e0a6491d64e5da2ee59d9c7113752ff4d8735d5cdb0a3780d305a0358d35e721f5958aafb51a287f724d0449ac6"}, @generic={0xf7, 0x2, "29941fe6a70b570092317f373e60f1d4c692f4777c0af69fea8b67ca09969cdbaf116024b40c45f1af3570d847ed340b6be663029ab2b43571859cb32dbdec9637866f9a5c883c3f17f35243f5bf3b073625b9c952e8cf74577f0390e0420e80711be59a2dbcbf19fa7cecead3e1b816edddb43c207ed90ed6be5abc40e6ccdfd63e610b62017191e9694efc3785cd2f65dda0af8a9e822af617a53286689b4623e2d5c8381ba039a7ea9a866f1567e56db2d4b3070773a38cbb8df0cccb12446392ad044194cf55ff3167b4262f800ab5515117db5ffa9862b43cacf705183138d3722b90cc368762c3fbe3464dac6b54736924e7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0xfd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xc}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xe, 0xff, 0xf}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x4, 0x8, 0x5, [@generic={0xdc, 0x23, "3438bedefff9a3ebab4ce2044294b8f6b30dd0847cf78daad4f88c0b833ecf3f96e8601ed6498b2442bb1149f57649dcbd1307105ac7e8c642dfbfee6d388010ab6f922c4ffe41a9756c9cb6d5a5aa6f3fd42c289f8310824fdc3f497d31ce9cc70f1302002b2d33477ab5b9bb9c97272da769aab6e4318a7e90b1131dd50090a19a7c2e9701348ac4fe1b44b69be00bb10ba17b99873c6c9708290c67450995f5deef3e4560a7fe63fc7a2a1b94ecf7ff7c680291074637b69ee3b04ef3bba805861a0f9d3967681d6683b188f95f9716d3e06208038f2c9fe1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa3, 0x800}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x3, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x63, 0xff45}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x81, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1c, 0x40, 0xfa, [@generic={0xf5, 0x6, "deebcf1a9c49bedcbd443bfcaa051ebe5015f9507bd7da24b3f6a134ac736d1ac34019aae12fafe7d5567fa3e8cd67bb088edad1424e7bbc01f9f1c76b6b9b40f9939a6d2f2c2284d6e9f9c510e76f090551f3570ca09bc56842555f9b4d23c1be940fb61484857f2942eba076d1214712bbf1b06f2fdb3e2babfd85a0183197b8b3214585279dfb15e3678b6dd92265e82065467cfee667716eafef0a12d524731550fee996f9fb49400558cdd3c356953b1305db9ecf5077ff6735bb75426d8850966a40b6cfaf48db2f769a80900a82292e477066c37e8a4eb1204ce21de25b54d2c7e440fac985c251c2d471889a2fc34a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xdc, 0xc9, 0x2, [@generic={0x2a, 0x21, "85e765f71a1f166469ef9353d9ed8704179d0daafd69e605227d662ba2973b94678d6bded8b44e2d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xd4, 0x6, 0x6, 0x37, 0x40, 0xdb, 0x5, [@hid_hid={0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x8be}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "5203d1"}, {0x5, 0x24, 0x0, 0x7312}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x4, 0x4}}], [{{0x9, 0x5, 0x0, 0x4, 0x400, 0x5, 0x4, 0x81, [@generic={0x8f, 0x7, "9e4451d56f48b5876e95b028f1a33997439c9c86ae86d44ee08bfe6c3cfc620c32dfd5de5965984fa29fb61f9063d2336f27009ce4bf383165bf9d3039bf7cf58396e117bec044cc936384d9bef64bec4495eb9aa0d50be245d092a97c36d9f75753785971780b6ca88577709d275a60ae067327a9a302d2901f24b1abe1d9d6f3cadf103e5e3f38a74bd5d774"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x3, 0x0, 0xa}}, {{0x9, 0x5, 0xc, 0x10, 0x3bf, 0x7f, 0x9, 0x0, [@generic={0xbb, 0x10, "73e82ae499435a4b5a23bbae4ebaa02c338e7da4f935ffd7551c4e7f3fc7d2a5f4da1398072902cd6c419757d02dd0fb888ce7fe4000f557246befd0852b1c12dc6ed38ddac49eddbf9b82ed20f4843dea9dd491af11b30b1c75cfd9a2a69da76f737975269fe6394bc5cfec5bbe9f662034df9ec20f1360c34cb1c7079b73432de414e4411f7934b5fbae192b24bc0392b3af8bd88bacbe3c947323f63a5c2e7df7000acceba453ce3cab2cdd0a2b2c4d747e438208bd2aef"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x6, 0xc, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xf, 0x3, 0x5, [@generic={0x4e, 0x24, "0e45607a496f47820259018ef96bf592efa1618bad1c252552f82825a60b3ec18e1dccb802c5f3ce1221fca980fa38ed8dc597cdd97680d0524bd31c8b53c1a724a699c068e786439cf8f564"}, @generic={0x47, 0x3, "bc2c71d4ae58b198bcf97c8e0a09f356d5b81ed86315d03ba935ed7a044802feefaceee5be8b931bedd8bb46ddfce49c8763dd005acb546a206a650f70eac97dae3dbf778b"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x0, 0x58, 0x4, [@generic={0x99, 0x8, "d6d22e85f3d112a2e297e2649f314023cacdd1669ee6f945f2866507ff08434ae10906b46ec361cb8724330e03bb5140d51607dbe56d1d88cf92df3ff32811c8ee4f12b342ebb72a881014cd90ac8bbac6979575853f8483bbc159d0cf1effb06cb239841d1cdd63cfc8e4e777d4281caab811a5c20205f79c9b094d196d44b858ceb5d819c1541472d2ac80a8a768219bcb1a944d1980"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0xf}]}}]}}, {{0x9, 0x4, 0x40, 0x5, 0xa, 0xfe, 0x3a, 0x54, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x4, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x3000}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x2, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x47}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x3}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xb, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x2, 0x8, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xd48}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x2, 0x0, 0xa1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x4, 0x1}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x7, 0x9, 0xd, [@generic={0x1f, 0x1, "09b549ed1a773ef6ba7a41f1eeb88923abf1a897f159ec54b78ed73eb4"}, @generic={0x9d, 0x3, "643f1a8c8e2e611713be95f0a072dab098825ac04442435f79af75f4cc9f7754a3b37d9be77473ddb643bb9f4c939ea268037f981a64020094add0722d2ba9feed73b56cbf9f003919d1d1ec52d9bad487ef7ecc61695e31508b7670c132e1c304e63135eb8c0f918a14039399548771a222be4dc5b6bc643b16962497fc226a25ff0339d1788c643092f99019b655e59257d14a85bd8034664956"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x3, 0x60}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x5, 0x5, 0x9, [@generic={0xcc, 0xd, "2e0b7db92cd80604857a021cc56a17fbc57991d2a1d8a7cb4fc05535ca30337fe4323ce6e73888eb2ee1c33d6983e3fbdc314ca63ffff673c4c3421ca70ee0c500405a5752309dbbe8ee3e9826bca2757826e52af8c34c217150ac37a62bfca32801c53f87790703a45d41f2cf7cb915ebf40d12ba34d028eca6d21287dfa76f5de295db167bef87413c590ea4cbf38b3aeb5fe246fdbc2e191b5edbdffbe774e85f57b5323d7bd7566e5098bbcdfb460ede7cb683df0a4e214f5425bf3278adcde933fb2433524a5106"}]}}]}}, {{0x9, 0x4, 0xbe, 0x4, 0x6, 0xd, 0xd6, 0x61, 0xc4, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xf9}}, @uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x7ff, 0x2, "e004ed8845d13cb5"}, @as_header={0x7, 0x24, 0x1, 0xe0, 0x0, 0x1002}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4b, 0x1, 0x1, 0x95, '('}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6d60, 0x2, 0x3, "1bb6f8a23f"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0xfb, 0x74, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x6}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x6, 0x6, 0x2}}, {{0x9, 0x5, 0x4, 0x8, 0x70fb6ee8b06d5377, 0x8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x2, 0x9}, @generic={0x9f, 0x24, "47684758c1e3a28f1e890207c1dd84a73ed522b360908ec8b356857f09c8122ea765c16ebdab1a93d5f5c103d453189eea724c87548ebbdc0732cd387aa4138ef6b6bc7eb23be03ca151062b224e033b50d4917914cd82ab07b2679a51d9a43c5e466e26cf2a45629e5da552e3147a996f257b45b31e20744ea1c3275f78d6818bb9ab8a4d36b8694fb1cec31265e66ee626b11308283fe37d80b18fbd"}]}}, {{0x9, 0x5, 0x80, 0xe257d29bf1abae77, 0x20, 0xd4, 0x2, 0xc6, [@generic={0xf9, 0x23, "a2db4cc31f0c61d76b21c7513ea87feb2138e26ec519affa7d7bb7ddc7d6067025ac04caf205c287a6e864e23127cb10530aa6de2ed61cc98f6f153171c6f1efb015f2607694bc91bc4f22c8d34c7aa6c2301751f227da57fd4dcfbb015ec1b42d0182dfe3ee7289fd2cd7b14529cb9813b80eb256fdd70c032e88c91e06c2b9078b08d7b65d5afa9591539eb51f9212640aab36d34286a8bdb0c65307e677d0f276e4efc07a31d69d55ae3684404bceb3f80be0367ba97634328a59d3e641e36b288e31e07396f0159b11899d34f800c4f712d16685277e797a5bc60d5d23b96cc9f5f2910be82ce58b99cc94d8da99a87f79601b4a0b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xc}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x7, 0x0, [@generic={0xde, 0xb, "631822bc0a93866065892416e5da1c850a4526ebbc425c0f548438e926afcdb8b71dabca2387c71b21023a2f0cc78ac04565aee4d3b43e3270eb3f23e60692063db445cd5121761b8aedec90fdc82367da8d4dfdb68ed72a5499bbe748406d7410faa9924ca2c1b34b333433fe0deae61e66ebd448ac3a545d448d699a346e91dc092a318204ada31700b0e06667dcddea02b98c5f129eb52b3dad4b884a28444533c937fae46a381341cf6bb9aea07f54f176b200d74e72b78b52a1c77d9616e1ef9dce394ca1fa4472837ebf30d52ada460068d3c4dcfe78ef5ed5"}, @generic={0xba, 0xe, "c182fb43d392861a0d8202dd8da44f4f285258b65c8c6007bc05c2aeb76946a50dbf3b9f06a5542ed6ea71681eff50b2ccb1bc239ee7ee4ba666262b7a14003cae13b8ac6636d4c981e3d4af39c1bf8617e7a6d47df86e5cf65d05323f3087e7c6417a58e16a68bbdbc3cd690caddaf1d21b137bde1193d4f5e0fa4b33ebe158a495bcad461e292bfd79b1336500abbe85ad18556fdcef8356c7e13660c4291beb9a9e622fb442db385635cc5290362cb461e79b16a1fddd"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0x7, 0x9, 0x40, 0x5}, 0x133, &(0x7f0000000380)={0x5, 0xf, 0x133, 0x3, [@generic={0xf0, 0x10, 0x1, "37d58e684662f9b8dddddb05da62831320d270d60f9a00514688338bdfc8a27e4943b8a7cf2b2ccc072f904fc28eecde147a1eb663c3a346870c20cb804ad3b8cc753bb359767e92637171508db0beeebd65dc15063fe9c76e1d53e4038b982131812f6ae484587c7905022879af1165059059d69e9a01a411317e0850daca32695010cacf454dc93a58aa0cfc4be087269c0fa9fccf29cc0f4e6fd829e2cb5d7280975e874d2a7d72890231fba6dc7f8793f680cc00723cbe35481f881c41c57929b09187f60184e6fac741d56ea93f8325fd3a9f2d988b08d586c9e437d6ac6086b9e464185fcd241bdcfc76"}, @generic={0x1e, 0x10, 0x3, "0b13692695553babdc881a67f5c0b9cfa0502b76afa93061d1cc16"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8, 0xf, 0x400, [0xc000, 0x1fe3f0f, 0xf, 0x30, 0x180]}]}, 0x1, [{0xc1, &(0x7f0000000040)=@string={0xc1, 0x3, "27ab8123c67b88cd147282baeefc014030d1e13795417b1a61f34ecedfd53ddf19919585b153ad0a4706488934ae7a6b2b1097e2b6ec214632c606025a5013c75623f7703d4982ae79b62ab4edaf356a205a8930a261a55b841dd626dba027b272754e2561bd1f83dd5f741c01cd752a79d46e16350f56f4c3ea4b979c50e0a0484f182639ccfbbabd1862023b6ca3fef1bce598c6fffbe3c519b9b48eed0f7c222ea2d16b75aff65ed5310ffd45b721653014faa03b18be84860aefba358b"}}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xa}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0xcc000)
socket(0x2c, 0x1, 0x7)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

679.554245ms ago: executing program 0 (id=245):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
unshare(0x6020400)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async)
unshare(0x6020400) (async)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

624.783465ms ago: executing program 0 (id=246):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) (async, rerun: 32)
syz_clone3(&(0x7f0000000440)={0x110000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x2c}, &(0x7f00000000c0)=""/178, 0xb2, &(0x7f00000002c0)=""/175, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
setpriority(0x2, r1, 0x400000000000009) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="200c02000000022446c3379a173da31145822a0090620e6a4a93cd23aead03a2d40297e25ac394bf6c6d2224d8acaf58000661b4876ad766c53d504f1dea4450db900264b963dc28a114bf9c3b7347553893efd222d23afa14459fe3079d3e42318225275faa7559"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x9, "9bc81b90"}, @local=@item_4={0x3, 0x2, 0x0, "c0442189"}, @main=@item_012={0x2, 0x0, 0x0, "56e0"}, @global=@item_4={0x3, 0x1, 0x2, "38cda71f"}]}}, 0x0}, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400), 0x0}) (async)
r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000600)={0x9, "3aff9e1654601adf50a5951a7b6b88f178355cc6ee6d6c4dfa10d60cc21f0fca2568cafb861063be47da730bd28c0e87ce4b5bd40348324bce271027b7bc4f07"}) (async)
bind$can_raw(r3, &(0x7f0000000000), 0x10) (async)
read(r3, &(0x7f00000017c0)=""/4090, 0xffa) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4)
sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}}, 0x10}}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)

624.352005ms ago: executing program 0 (id=247):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc2, 0xc}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000001c0)="660f29927e1d0f20d86635080000000f22d80c00b843000f00d02e0f23110f009c002066b9980a00000f32660fc6203683570002260fc75d79", 0x39}], 0x1, 0x3b, 0x0, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x8, 0x80000000002, 0x180, 0x400000004, 0x0, 0xee, 0x6, 0x100000000, 0x1000045, 0x1, 0xd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x5], 0x8000000, 0x3c4210}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, 0x0)

208.140658ms ago: executing program 0 (id=248):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
brk(0x689d80000000) (async, rerun: 32)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async, rerun: 32)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0\x00') (async)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@out_dx={0xaa, 0x28, {0xc4f, 0x2, 0xffffffffffff0000}}, @uexit={0x0, 0x18, 0x8}, @wrmsr={0x1e, 0x20, {0x181, 0xa6}}, @code={0xa, 0x66, {"66ba4200b89e050000ef66ba430066ed2e650f01c966baf80cb8e06b388fef66bafc0cb81e000000ef0fc733420f323e64653626650f01c966ba4200ec400f01c366baf80cb87222a487ef66bafc0c66b847d366ef"}}, @wrmsr={0x1e, 0x20, {0xbc2, 0xe}}, @in_dx={0x82, 0x20, {0xda2e, 0x3}}], 0x106})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = creat(&(0x7f00000022c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64)
clock_nanosleep(0x9, 0x0, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000080)=0x4)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000007240), 0x2, 0x2)
ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000007280)=0x8) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x103, 0x2}, 0x20)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1, 0x0, 0x0, 0x4000844}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async, rerun: 32)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32)
write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {0xffff, 0x100, 0x9, 0x81}, 0x2b, [0x1, 0xd, 0x5, 0xc60, 0x3, 0x8, 0x9, 0x6, 0x871, 0x6, 0xff5, 0xe, 0xb, 0x0, 0x5, 0x8, 0x5, 0x9, 0x0, 0x1000, 0x6, 0xb, 0x10000, 0x6, 0x280, 0x5, 0x0, 0x4, 0x3, 0x9, 0x7, 0x7f, 0x68458b50, 0xcd, 0x2, 0x9, 0x0, 0x7, 0x8, 0xffff, 0x8, 0x4, 0xff, 0xfe000000, 0x3, 0x4, 0x0, 0x9, 0x3, 0x3, 0x5, 0x8, 0x6, 0xd3, 0xa6d, 0x5, 0xff, 0x0, 0x7, 0x2, 0x7, 0x2, 0xe, 0x3], [0xa, 0x1ff, 0x3, 0x9, 0x47, 0x5, 0x5, 0x3, 0x10000, 0x4, 0x7, 0x0, 0x5, 0xe, 0x9, 0x25, 0xfdf, 0x4, 0x5, 0x6, 0x7, 0x6, 0x35a, 0x3a, 0x3, 0x2, 0x7, 0x7, 0x7, 0x1, 0x0, 0x48, 0x6f, 0x7, 0x64, 0xd5, 0x98, 0x128, 0x5f572f99, 0x401, 0x7, 0x6, 0xf, 0x98d, 0xa, 0x2, 0x4, 0x6, 0xaf, 0x0, 0xd0b, 0xffff, 0xd, 0x101, 0x6, 0x0, 0x2, 0x1, 0x37, 0x7fffffff, 0x2, 0x9, 0x200000, 0x2b], [0x2d59, 0x0, 0x8, 0x81, 0x4, 0x7, 0x7, 0xff, 0x2, 0x3334, 0x0, 0xc, 0x5, 0x8, 0x9, 0x3, 0x7, 0x481e, 0x9, 0xa, 0x1, 0x8, 0x1, 0x1, 0x7, 0x3, 0xffffffff, 0x1, 0x0, 0x401, 0x6, 0x81, 0xb, 0x8, 0x7fff, 0x320b, 0xfffffff7, 0x4, 0x0, 0x4, 0x42, 0x10001, 0xffff, 0x1c, 0x9, 0x3, 0x1, 0x9, 0xd90a, 0x7, 0x5, 0x10, 0xe6, 0x10, 0x4, 0x8, 0x4, 0x6, 0x5, 0x1, 0x490, 0x2, 0x1, 0xfff], [0x6, 0x0, 0x4, 0x1000000, 0xe, 0x80000001, 0xfffffffb, 0x3, 0x724502f6, 0x9, 0x9, 0x15ea, 0x7, 0x8, 0x7, 0x100, 0x9, 0x1, 0x6, 0x8, 0x2e21, 0x4, 0x2, 0xf, 0x8, 0x9, 0x0, 0x101, 0x3, 0xfffffff7, 0x80000000, 0x9, 0x8, 0x3, 0xffffffff, 0x7, 0x8, 0xfffffc3c, 0x3, 0x200, 0xd, 0x8, 0x1, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0x400, 0x8a6, 0x359, 0x101, 0x0, 0x0, 0x9, 0xfffffffc, 0x4, 0xffffffff, 0x0, 0x9, 0x6, 0xfffff000, 0x8, 0x9]}, 0x45c) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

68.571879ms ago: executing program 0 (id=249):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x149a00, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
lsm_set_self_attr(0x66, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x656683, 0x26)
sched_setattr(0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020)
ioprio_set$pid(0x2, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x1000007fd)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76)
r3 = socket$inet6(0xa, 0xa, 0xfffffffe)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r6 = openat$incfs(r5, &(0x7f0000002440)='.pending_reads\x00', 0x4a080, 0xc2)
read$rfkill(r6, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000002400)=ANY=[@ANYRES32=r3, @ANYRES16=r5, @ANYRES32, @ANYRES64=r5], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r7 = socket$inet6(0xa, 0x3, 0x3a)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='c\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000440006803e00040067636d286165732900000000000000000000000000000000000000000000000016000000ffcaf35c8375f28ac9d75e9f065f37bca072000a45ae0000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x2400d010)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x432, @loopback, 0xb}, 0x1c)

67.992639ms ago: executing program 2 (id=250):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32)
r3 = gettid() (rerun: 32)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
creat(0x0, 0x22) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79})

0s ago: executing program 0 (id=251):
getitimer(0x2, &(0x7f0000000000))
setitimer(0x2, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080))
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400000, 0x0, 0x14}, 0x18)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+60000}, {0x0, 0xea60}}, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0xea60}, 0x3, 0x2, 0x800}, {{}, 0x12, 0xe, 0x8}, {{}, 0x0, 0x5, 0x1800}], 0x48)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='nr0\x00', 0x10)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
getitimer(0x2, &(0x7f0000000340))
clock_getres(0x4, &(0x7f0000000380))
io_setup(0x6, &(0x7f00000003c0)=<r3=>0x0)
io_getevents(r3, 0xe, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000480))
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000500)=0x1c, 0x80800)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000540)={0x0, 'macvtap0\x00', {0x1}, 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x800)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
statx(r0, &(0x7f0000002740)='./file0\x00', 0x6000, 0x1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002880)={0x0, 0x0, <r10=>0x0}, &(0x7f00000028c0)=0xc)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0, <r11=>0x0}, &(0x7f0000002940)=0xc)
lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000002980)={{}, {0x1, 0x1}, [{0x2, 0x4, r7}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x5, r8}, {0x8, 0x1, r9}, {0x8, 0x0, r10}, {0x8, 0x2, r11}, {0x8, 0x2}], {0x10, 0x3}, {0x20, 0x5}}, 0x5c, 0x2)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002a80)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xddf, 0x3d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x801)
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), r12)
sendmsg$BATADV_CMD_GET_GATEWAYS(r12, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x24, r15, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40011)
r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), r5)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r12, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, r16, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x20004000)
io_submit(r3, 0x2, &(0x7f0000002f80)=[&(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x3, 0xf, r5, &(0x7f0000002e00)="8017ddc84574789ca5d278183bfe6933e04c244f2cf3f29c8c01af91b23564bfdae47d009f07121380979043f1ca43b1b0d1d61a6a9883bd461eb9d26d888a219b2fb05c9a3f8c7290b07b14e7187611287477bd2872e1214776aa4ae34d47629d08fb69ba237baff480ab82bdae5c519fe7e2122c04ad27551f520067ea28e1d1c7f4b2ae6c2810ac0a171e2e28ca2bfc7e7814906ecb02e4b1f50f4710cbf1d2c6fb5ff6a11d8847ea", 0xaa, 0x600000000000, 0x0, 0x7}, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x5, 0x5, r12, &(0x7f0000002f00)="81638118a6d78c72655ec2d842409b83c31aea", 0x13, 0x4, 0x0, 0x2}])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts.
[   20.980000][   T36] audit: type=1400 audit(1762722140.970:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.981077][  T282] cgroup: Unknown subsys name 'net'
[   21.002882][   T36] audit: type=1400 audit(1762722140.970:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.031029][   T36] audit: type=1400 audit(1762722141.000:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.031214][  T282] cgroup: Unknown subsys name 'devices'
[   21.195392][  T282] cgroup: Unknown subsys name 'hugetlb'
[   21.201090][  T282] cgroup: Unknown subsys name 'rlimit'
[   21.314576][   T36] audit: type=1400 audit(1762722141.310:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.337882][   T36] audit: type=1400 audit(1762722141.310:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.362737][   T36] audit: type=1400 audit(1762722141.310:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.371708][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.394804][   T36] audit: type=1400 audit(1762722141.390:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.420600][   T36] audit: type=1400 audit(1762722141.390:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.450062][   T36] audit: type=1400 audit(1762722141.440:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.475678][   T36] audit: type=1400 audit(1762722141.440:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.475919][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.775805][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.782874][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.790409][  T290] bridge_slave_0: entered allmulticast mode
[   22.796852][  T290] bridge_slave_0: entered promiscuous mode
[   22.815712][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.822976][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.830326][  T290] bridge_slave_1: entered allmulticast mode
[   22.836758][  T290] bridge_slave_1: entered promiscuous mode
[   22.848253][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.855365][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.862885][  T292] bridge_slave_0: entered allmulticast mode
[   22.869255][  T292] bridge_slave_0: entered promiscuous mode
[   22.875698][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.882859][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.889974][  T289] bridge_slave_0: entered allmulticast mode
[   22.896337][  T289] bridge_slave_0: entered promiscuous mode
[   22.909039][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.916159][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.923247][  T292] bridge_slave_1: entered allmulticast mode
[   22.929679][  T292] bridge_slave_1: entered promiscuous mode
[   22.935832][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.942888][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.950044][  T289] bridge_slave_1: entered allmulticast mode
[   22.956276][  T289] bridge_slave_1: entered promiscuous mode
[   23.037442][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.044563][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.051644][  T291] bridge_slave_0: entered allmulticast mode
[   23.057986][  T291] bridge_slave_0: entered promiscuous mode
[   23.074713][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.081774][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.088946][  T291] bridge_slave_1: entered allmulticast mode
[   23.095167][  T291] bridge_slave_1: entered promiscuous mode
[   23.205242][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.212400][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.219837][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.226954][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.246673][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.253758][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.261010][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.268054][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.280763][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.287851][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.295164][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.302724][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.321438][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.328547][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.335853][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.342898][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.387198][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.394645][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.401814][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.409355][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.416634][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.424083][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.431364][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.438820][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.466978][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.474082][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.481702][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.488760][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.496462][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.503539][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.510981][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.518029][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.525745][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.532769][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.555463][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.562535][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.570310][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.577373][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.585062][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.592140][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.650047][  T292] veth0_vlan: entered promiscuous mode
[   23.664336][  T289] veth0_vlan: entered promiscuous mode
[   23.673093][  T291] veth0_vlan: entered promiscuous mode
[   23.687146][  T290] veth0_vlan: entered promiscuous mode
[   23.701848][  T292] veth1_macvtap: entered promiscuous mode
[   23.710055][  T291] veth1_macvtap: entered promiscuous mode
[   23.719667][  T289] veth1_macvtap: entered promiscuous mode
[   23.748366][  T290] veth1_macvtap: entered promiscuous mode
[   23.793798][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.833482][  T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.864598][  T339] =======================================================
[   23.864598][  T339] WARNING: The mand mount option has been deprecated and
[   23.864598][  T339]          and is ignored by this kernel. Remove the mand
[   23.864598][  T339]          option from the mount to silence this warning.
[   23.864598][  T339] =======================================================
[   23.872087][  T341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   23.992334][  T355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.061573][  T358] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9'.
[   24.135571][  T365] process 'syz.3.11' launched '/dev/fd/6' with NULL argv: empty string added
[   24.144992][   T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.160619][  T365] rust_binder: Error in use_page_slow: ESRCH
[   24.160638][  T365] rust_binder: use_range failure ESRCH
[   24.167376][  T365] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   24.173137][  T365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   24.181606][  T365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:11
[   24.210303][  T369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=369 comm=syz.3.13
[   24.232459][  T369] SELinux: security_context_str_to_sid () failed with errno=-22
[   24.264894][  T374] rust_binder: Write failure EFAULT in pid:17
[   24.293386][   T63] usb 2-1: Using ep0 maxpacket: 16
[   24.303479][   T45] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   24.306157][   T63] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   24.323084][   T63] usb 2-1: config 0 has no interfaces?
[   24.332705][   T63] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   24.342135][   T63] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   24.350962][   T63] usb 2-1: Manufacturer: syz
[   24.357216][   T63] usb 2-1: config 0 descriptor??
[   24.432157][  T381] rust_binder: Error in use_page_slow: ESRCH
[   24.432175][  T381] rust_binder: use_range failure ESRCH
[   24.438327][  T381] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   24.443880][  T381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   24.451849][  T381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:24
[   24.464562][   T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   24.485361][   T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8
[   24.496646][   T45] usb 1-1: config 0 interface 0 has no altsetting 0
[   24.500154][  T387] exFAT-fs (rnullb0): invalid boot record signature
[   24.503298][   T45] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   24.510436][  T387] exFAT-fs (rnullb0): failed to read boot sector
[   24.518992][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.526899][  T387] exFAT-fs (rnullb0): failed to recognize exfat type
[   24.535277][   T45] usb 1-1: config 0 descriptor??
[   24.545921][  T355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   24.627962][  T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   24.674754][    T9] usb 2-1: USB disconnect, device number 2
[   24.746992][  T400] 9pnet_fd: Insufficient options for proto=fd
[   24.756511][   T45] usb 1-1: string descriptor 0 read error: -71
[   24.773913][   T45] usbhid 1-1:0.0: can't add hid device: -71
[   24.779902][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   24.790058][   T45] usb 1-1: USB disconnect, device number 2
[   24.843788][  T383] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.004546][  T383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.015677][  T383] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   25.024781][  T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.035927][  T383] usb 4-1: config 0 descriptor??
[   25.093410][    T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   25.148046][  T408] rust_binder: Error while translating object.
[   25.148094][  T408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.154557][  T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[   25.183782][  T410] rust_binder: 22: no such ref 3
[   25.198142][  T410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   25.205668][  T410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   25.212737][  T410] rust_binder: Write failure EFAULT in pid:22
[   25.244630][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   25.259224][    T9] usb 2-1: config 179 has no interface number 0
[   25.265927][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[   25.277530][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   25.289543][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   25.300919][    T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[   25.312412][    T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   25.326072][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   25.335182][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.348955][  T402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   25.357043][    T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   25.368466][    T9] xpad 2-1:179.65: probe with driver xpad failed with error -5
[   25.444300][  T383] kye 0003:0458:5011.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   25.462406][  T383] kye 0003:0458:5011.0001: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[   25.477014][  T383] kye 0003:0458:5011.0001: tablet-enabling feature report not found
[   25.487378][  T383] kye 0003:0458:5011.0001: tablet enabling failed
[   25.524058][  T430] tmpfs: Unknown parameter '�'
[   25.570117][    T9] usb 2-1: USB disconnect, device number 3
[   26.108131][   T36] kauditd_printk_skb: 86 callbacks suppressed
[   26.108150][   T36] audit: type=1400 audit(1762722146.100:160): avc:  denied  { write } for  pid=435 comm="syz.1.33" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   26.139855][  T436] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   26.166805][   T36] audit: type=1400 audit(1762722146.130:161): avc:  denied  { map } for  pid=435 comm="syz.1.33" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   26.191924][  T438] netlink: 64 bytes leftover after parsing attributes in process `syz.1.34'.
[   26.201775][   T36] audit: type=1400 audit(1762722146.190:162): avc:  denied  { name_bind } for  pid=437 comm="syz.1.34" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   26.223137][   T36] audit: type=1400 audit(1762722146.190:163): avc:  denied  { node_bind } for  pid=437 comm="syz.1.34" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   26.253426][   T36] audit: type=1400 audit(1762722146.240:164): avc:  denied  { create } for  pid=442 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.283666][  T445] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   26.285055][   T36] audit: type=1400 audit(1762722146.240:165): avc:  denied  { ioctl } for  pid=442 comm="syz.1.36" path="socket:[4413]" dev="sockfs" ino=4413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.328128][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   26.331758][   T36] audit: type=1400 audit(1762722146.240:166): avc:  denied  { setopt } for  pid=442 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.354149][   T36] audit: type=1400 audit(1762722146.240:167): avc:  denied  { bind } for  pid=442 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.354498][  T447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.373507][   T36] audit: type=1400 audit(1762722146.310:168): avc:  denied  { create } for  pid=448 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.403923][   T36] audit: type=1400 audit(1762722146.380:169): avc:  denied  { getopt } for  pid=446 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.563422][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   26.693458][    T9] usb 2-1: device descriptor read/64, error -71
[   26.783415][  T383] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   26.933407][  T383] usb 1-1: Using ep0 maxpacket: 16
[   26.933421][    T9] usb 2-1: device descriptor read/64, error -71
[   26.946069][  T383] usb 1-1: config 4 has an invalid interface number: 215 but max is 0
[   26.954638][  T383] usb 1-1: config 4 has no interface number 0
[   26.962993][  T383] usb 1-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b
[   26.972432][  T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.980618][  T383] usb 1-1: Product: syz
[   26.984901][  T383] usb 1-1: Manufacturer: syz
[   26.989572][  T383] usb 1-1: SerialNumber: syz
[   27.105249][  T473] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.116470][  T473] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   27.125761][  T473] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.136275][  T473] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   27.173387][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   27.248392][  T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.258371][  T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.273495][  T383] hub 1-1:4.215: bad descriptor, ignoring hub
[   27.280169][  T383] hub 1-1:4.215: probe with driver hub failed with error -5
[   27.288104][  T383] usb 1-1: bad CDC descriptors
[   27.304476][    T9] usb 2-1: device descriptor read/64, error -71
[   27.313740][  T383] usb 1-1: USB disconnect, device number 3
[   27.369380][  T481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=481 comm=syz.2.48
[   27.563386][    T9] usb 2-1: device descriptor read/64, error -71
[   27.590819][  T330] usb 4-1: USB disconnect, device number 2
[   27.621687][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.621712][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.630407][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.636874][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.644988][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.651550][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.659649][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.666097][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.674389][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.674390][    T9] usb usb2-port1: attempt power cycle
[   27.694548][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.694591][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.701124][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.709175][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.715738][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.724075][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.730624][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.738909][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.745494][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.753575][  T383] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   27.754107][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.767882][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.776026][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.782493][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.790759][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.797471][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.806004][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.812457][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.820668][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.827283][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.835381][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.837039][  T498] rust_binder: Write failure EFAULT in pid:26
[   27.841809][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.841846][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.862902][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.871313][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.878087][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.886043][  T383] usb 3-1: device descriptor read/64, error -71
[   27.886428][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.899131][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.907304][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.913855][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.913942][  T505] rust_binder: Write failure EINVAL in pid:33
[   27.921880][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.921904][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.921928][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.921937][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.921953][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.921962][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.921979][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.921988][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922005][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.922014][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922031][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.922039][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922055][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.922064][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922081][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.922089][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922107][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.922116][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.922134][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.953207][  T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   27.957849][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   27.964375][  T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:35
[   27.972243][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.099145][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.107511][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.114050][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.122246][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.128883][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.133382][  T383] usb 3-1: device descriptor read/64, error -71
[   28.136949][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.149628][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.157749][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   28.157767][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.157780][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.179788][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.186266][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.194297][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.194423][    T9] usb 2-1: device descriptor read/8, error -71
[   28.200723][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.200761][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.200771][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.200789][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.235846][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.243887][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.250313][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.258440][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.264950][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.273080][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.279569][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.287675][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.294155][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.302271][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.308962][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.317041][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.323520][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.323543][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   28.331549][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.331574][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.331599][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.331609][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.339481][    T9] usb 2-1: device descriptor read/8, error -71
[   28.344704][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.379641][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.387705][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.394153][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.402143][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.409077][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.409147][  T383] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   28.417576][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.431240][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.439468][  T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.446135][  T494] rust_binder: Read failure Err(EFAULT) in pid:37
[   28.516837][  T516] rust_binder: Error while translating object.
[   28.523647][  T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.529934][  T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   28.553455][  T383] usb 3-1: device descriptor read/64, error -71
[   28.583471][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   28.604587][    T9] usb 2-1: device descriptor read/8, error -71
[   28.627396][  T521] 9pnet_fd: Insufficient options for proto=fd
[   28.701472][  T523] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.701596][  T523] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   28.734736][    T9] usb 2-1: device descriptor read/8, error -71
[   28.813429][  T383] usb 3-1: device descriptor read/64, error -71
[   28.853536][    T9] usb usb2-port1: unable to enumerate USB device
[   28.897318][  T534] Zero length message leads to an empty skb
[   28.923497][  T383] usb usb3-port1: attempt power cycle
[   28.983420][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.003788][  T541] rust_binder: 51: no such ref 0
[   29.008762][  T541] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   29.015962][  T541] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   29.023003][  T541] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   29.030066][  T541] rust_binder: 51: no such ref 0
[   29.048027][  T543] rust_binder: Error while translating object.
[   29.048083][  T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   29.054644][  T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:53
[   29.087198][  T545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'.
[   29.134777][   T10] usb 4-1: Using ep0 maxpacket: 16
[   29.144227][   T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.155274][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[   29.161904][   T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   29.171017][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.179945][   T10] usb 4-1: config 0 descriptor??
[   29.190788][  T551] rust_binder: 59: no such ref 2
[   29.273447][  T383] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   29.294744][  T383] usb 3-1: device descriptor read/8, error -71
[   29.405509][  T557] rust_binder: 556 RLIMIT_NICE not set
[   29.406312][  T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27
[   29.425769][  T383] usb 3-1: device descriptor read/8, error -71
[   29.428888][  T559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30
[   29.451926][  T559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   29.461477][  T559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30
[   29.538013][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   29.587794][   T10] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0
[   29.595426][   T10] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0
[   29.602856][   T10] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0
[   29.610442][   T10] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0
[   29.617995][   T10] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0
[   29.626273][   T10] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[   29.683614][  T383] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   29.704521][  T383] usb 3-1: device descriptor read/8, error -71
[   29.834461][  T383] usb 3-1: device descriptor read/8, error -71
[   29.943505][  T383] usb usb3-port1: unable to enumerate USB device
[   29.986618][  T568] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   29.993594][  T329] Bluetooth: hci1: Frame reassembly failed (-84)
[   30.121825][  T383] usb 4-1: USB disconnect, device number 3
[   30.853423][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   30.883461][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   31.004955][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[   31.013697][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   31.022446][   T10] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[   31.032832][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.041758][    T9] usb 4-1: Using ep0 maxpacket: 16
[   31.048505][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   31.057833][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.065943][    T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   31.075016][   T10] usb 3-1: Product: 㨷⃾偿毛镈췹霉Ṳ㙜ᶕ߄챣章䤬㋹都黖﻾庘愯䫗ୢ㲂໱⾌ﹴ踊利ꥉ짣▄椐宀䀖
[   31.089381][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20
[   31.097504][   T10] usb 3-1: Manufacturer: П
[   31.102018][   T10] usb 3-1: SerialNumber: Ї
[   31.106596][    T9] usb 4-1: SerialNumber: syz
[   31.111939][    T9] usb 4-1: config 0 descriptor??
[   31.119773][    T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   31.127905][    T9] usb 4-1: Detected FT232A
[   31.132895][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   31.321452][  T383] usb 4-1: USB disconnect, device number 4
[   31.328076][  T383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   31.337871][  T383] ftdi_sio 4-1:0.0: device disconnected
[   31.521762][   T10] usb 3-1: 0:2 : does not exist
[   31.528755][   T10] usb 3-1: USB disconnect, device number 6
[   31.539816][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.603441][  T569] Bluetooth: hci0: command 0x1003 tx timeout
[   31.603468][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   31.850664][   T36] kauditd_printk_skb: 25 callbacks suppressed
[   31.850683][   T36] audit: type=1400 audit(1762722151.840:195): avc:  denied  { ioctl } for  pid=582 comm="syz.3.85" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   31.858664][  T583] rust_binder: Error while translating object.
[   31.882422][  T583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   31.888701][  T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:63
[   31.904527][  T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63
[   31.948558][  T588] /dev/rnullb0: Can't open blockdev
[   32.003492][  T451] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   32.003505][   T54] Bluetooth: hci1: command 0x1003 tx timeout
[   32.028852][  T595] /dev/rnullb0: Can't open blockdev
[   32.047679][   T36] audit: type=1400 audit(1762722152.040:196): avc:  denied  { connect } for  pid=591 comm="syz.3.88" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.072971][   T36] audit: type=1400 audit(1762722152.060:197): avc:  denied  { ioctl } for  pid=602 comm="syz.1.91" path="socket:[5608]" dev="sockfs" ino=5608 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.097942][   T36] audit: type=1400 audit(1762722152.060:198): avc:  denied  { mounton } for  pid=591 comm="syz.3.88" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.119499][  T609] bpf: Bad value for 'uid'
[   32.175986][   T36] audit: type=1400 audit(1762722152.170:199): avc:  denied  { getopt } for  pid=616 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.197070][   T36] audit: type=1400 audit(1762722152.170:200): avc:  denied  { remount } for  pid=616 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.219871][   T36] audit: type=1400 audit(1762722152.210:201): avc:  denied  { ioctl } for  pid=616 comm="syz.3.96" path="/newroot/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   32.303483][  T383] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   32.453439][  T383] usb 3-1: Using ep0 maxpacket: 32
[   32.459797][  T383] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   32.468343][  T383] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   32.477001][  T383] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   32.486016][  T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   32.495782][  T383] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   32.505618][  T383] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   32.518604][  T383] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   32.527749][  T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.536375][  T383] usb 3-1: config 0 descriptor??
[   32.743895][  T383] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   32.759053][  T621] binder: Bad value for 'max'
[   32.764865][  T383] usb 3-1: USB disconnect, device number 7
[   32.768984][  T624] netlink: 80 bytes leftover after parsing attributes in process `syz.1.98'.
[   32.772626][  T383] usblp0: removed
[   32.812981][  T622] sit0: entered promiscuous mode
[   32.819796][  T622] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[   32.828185][  T622] netlink: 1 bytes leftover after parsing attributes in process `syz.0.97'.
[   32.911765][  T630] random: crng reseeded on system resumption
[   32.913398][   T36] audit: type=1400 audit(1762722152.900:202): avc:  denied  { write } for  pid=628 comm="syz.3.101" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.932914][  T630] Unrecognized hibernate image header format!
[   32.940880][   T36] audit: type=1400 audit(1762722152.900:203): avc:  denied  { open } for  pid=628 comm="syz.3.101" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.948674][  T630] PM: hibernation: Image mismatch: architecture specific data
[   32.977642][   T36] audit: type=1400 audit(1762722152.970:204): avc:  denied  { create } for  pid=606 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   33.015718][  T636] rust_binder: Write failure EFAULT in pid:53
[   33.047730][  T640] rust_binder: 55: no such ref 0
[   33.095593][  T648] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   33.213396][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   33.267143][  T658] kvm: pic: non byte write
[   33.329655][  T660] binder: Unknown parameter 'context����[7�'
[   33.353436][    T9] usb 3-1: device descriptor read/64, error -71
[   33.359958][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   33.514564][   T10] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.524687][   T10] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   33.537700][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   33.544464][   T10] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[   33.553657][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.562312][   T10] usb 2-1: config 0 descriptor??
[   33.603402][    T9] usb 3-1: device descriptor read/64, error -71
[   33.693481][  T455] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   33.843688][  T455] usb 4-1: Using ep0 maxpacket: 16
[   33.843778][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   33.857907][  T455] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   33.866984][  T455] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.877283][  T455] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   33.887947][  T455] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.897073][  T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.905103][  T455] usb 4-1: Product: syz
[   33.909293][  T455] usb 4-1: Manufacturer: syz
[   33.913919][  T455] usb 4-1: SerialNumber: syz
[   33.923521][  T383] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   33.971704][   T10] saitek 0003:06A3:0621.0003: hidraw0: USB HID v80.01 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0
[   34.003413][    T9] usb 3-1: device descriptor read/64, error -71
[   34.074784][  T383] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   34.084913][  T383] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   34.094878][  T383] usb 1-1: config 1 interface 0 has no altsetting 0
[   34.102996][  T383] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   34.112211][  T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.120252][  T383] usb 1-1: Product: syz
[   34.124562][  T383] usb 1-1: Manufacturer: syz
[   34.129173][  T383] usb 1-1: SerialNumber: syz
[   34.134809][  T666] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   34.142133][  T666] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   34.176137][  T330] usb 2-1: USB disconnect, device number 8
[   34.263403][    T9] usb 3-1: device descriptor read/64, error -71
[   34.322943][  T455] usb 4-1: 0:2 : does not exist
[   34.331064][  T455] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1)
[   34.350720][  T455] usb 4-1: USB disconnect, device number 5
[   34.358912][  T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77
[   34.370993][  T676] udevd[676]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.373491][    T9] usb usb3-port1: attempt power cycle
[   34.588267][  T692] rust_binder: 82: no such ref 3
[   34.593294][  T692] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   34.600737][  T692] rust_binder: Write failure EINVAL in pid:82
[   34.733409][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   34.764593][    T9] usb 3-1: device descriptor read/8, error -71
[   34.853398][  T677] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   34.895172][    T9] usb 3-1: device descriptor read/8, error -71
[   34.949308][  T701] rust_binder: 107: no such ref 1
[   34.954746][  T701] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   34.962173][  T701] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   34.969599][  T701] rust_binder: Write failure EINVAL in pid:107
[   35.023449][  T677] usb 2-1: Using ep0 maxpacket: 16
[   35.036992][  T677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.048066][  T677] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   35.058041][  T677] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[   35.069410][  T677] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   35.078642][  T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.086708][  T677] usb 2-1: Product: syz
[   35.090916][  T677] usb 2-1: Manufacturer: и
[   35.095695][  T677] usb 2-1: SerialNumber: syz
[   35.127611][  T708] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   35.133462][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   35.144351][  T708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85
[   35.146533][  T710] rust_binder: 706 RLIMIT_NICE not set
[   35.156463][  T710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.162525][  T706] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   35.165360][  T383] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:06:6c:f6:79:f1
[   35.169065][  T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   35.188205][  T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:110
[   35.198006][  T383] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[   35.231651][  T714] random: crng reseeded on system resumption
[   35.240572][  T383] usb 1-1: USB disconnect, device number 4
[   35.508548][  T695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.517153][  T695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.526190][  T695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.534760][  T695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.543467][  T695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.551976][  T695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.562702][  T677] cdc_ncm 2-1:1.0: bind() failure
[   35.568672][  T677] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   35.575636][  T677] cdc_ncm 2-1:1.1: bind() failure
[   35.582630][  T677] usb 2-1: USB disconnect, device number 9
[   35.583354][    T9] usb 3-1: device not accepting address 11, error -71
[   35.600753][    T9] usb usb3-port1: unable to enumerate USB device
[   35.652738][  T753] devtmpfs: Unknown parameter 'fuse'
[   35.667761][  T755] 9pnet_fd: Insufficient options for proto=fd
[   35.841475][  T797] netlink: 25 bytes leftover after parsing attributes in process `syz.3.146'.
[   35.890340][  T797] netlink: 25 bytes leftover after parsing attributes in process `syz.3.146'.
[   36.099944][  T825] rust_binder: Write failure EINVAL in pid:124
[   36.170020][  T830] netlink: 'syz.3.156': attribute type 64 has an invalid length.
[   36.189067][  T828] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   36.196419][  T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[   36.215270][  T832] rust_binder: Write failure EINVAL in pid:129
[   36.331061][  T866] /dev/rnullb0: Can't open blockdev
[   36.338842][  T868] netlink: 'syz.1.160': attribute type 46 has an invalid length.
[   36.427766][  T883] sock: sock_timestamping_bind_phc: sock not bind to device
[   36.548822][  T895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=895 comm=syz.1.169
[   36.613069][  T896] rust_binder: 895 RLIMIT_NICE not set
[   36.613114][  T896] rust_binder: 109: no such ref 0
[   36.707472][  T902] rust_binder: 114: no such ref 0
[   36.773418][   T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   36.923415][   T45] usb 4-1: Using ep0 maxpacket: 16
[   36.930900][   T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   36.941005][   T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   36.951233][   T45] usb 4-1: string descriptor 0 read error: -22
[   36.957622][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.963370][  T455] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   36.966704][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.984058][   T45] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[   36.990895][   T45] cdc_ncm 4-1:1.0: bind() failure
[   36.996866][   T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   37.003720][   T45] cdc_ncm 4-1:1.1: bind() failure
[   37.124561][  T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   37.135595][  T455] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   37.144753][  T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.153739][  T455] usb 2-1: config 0 descriptor??
[   37.158987][  T902] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   37.367890][   T36] kauditd_printk_skb: 67 callbacks suppressed
[   37.367910][   T36] audit: type=1400 audit(1762722157.360:272): avc:  denied  { ioctl } for  pid=901 comm="syz.1.172" path="socket:[7671]" dev="sockfs" ino=7671 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.370761][  T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.407927][  T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.427577][   T36] audit: type=1400 audit(1762722157.420:273): avc:  denied  { mount } for  pid=910 comm="syz.2.175" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   37.524436][  T923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'.
[   37.545345][  T927] rust_binder: Error while translating object.
[   37.545383][  T927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   37.551615][  T927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:146
[   37.621260][  T455] kone 0003:1E7D:2CED.0004: unknown main item tag 0x1
[   37.642776][  T455] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0
[   37.663224][  T942] fuse: Bad value for 'fd'
[   37.733147][   T36] audit: type=1400 audit(1762722157.720:274): avc:  denied  { accept } for  pid=962 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   37.754254][   T36] audit: type=1400 audit(1762722157.750:275): avc:  denied  { map } for  pid=943 comm="syz.0.186" path="socket:[7784]" dev="sockfs" ino=7784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   37.793833][   T36] audit: type=1400 audit(1762722157.780:276): avc:  denied  { read } for  pid=970 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.796241][  T973] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.813264][  T973] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false
[   37.838581][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   37.854292][  T971] 9pnet_fd: Insufficient options for proto=fd
[   37.896617][  T986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   37.907167][   T36] audit: type=1400 audit(1762722157.900:277): avc:  denied  { mount } for  pid=985 comm="syz.2.199" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   38.174701][ T1008] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   38.185985][ T1008] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.340714][ T1015] netlink: 'syz.2.208': attribute type 6 has an invalid length.
[   38.348466][ T1015] netlink: 'syz.2.208': attribute type 4 has an invalid length.
[   38.356323][ T1015] netlink: 'syz.2.208': attribute type 6 has an invalid length.
[   38.364035][ T1015] netlink: 5944 bytes leftover after parsing attributes in process `syz.2.208'.
[   39.188893][   T36] audit: type=1326 audit(1762722159.180:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.2.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f569cf8f6c9 code=0x0
[   39.291328][   T36] audit: type=1326 audit(1762722159.280:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.2.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f569cf8f6c9 code=0x0
[   39.470416][  T383] usb 4-1: USB disconnect, device number 6
[   39.490650][   T36] audit: type=1400 audit(1762722159.480:280): avc:  denied  { setopt } for  pid=1045 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.493108][ T1046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.219'.
[   39.520402][ T1046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.219'.
[   39.532721][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'.
[   39.542312][ T1046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.219'.
[   39.551250][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'.
[   39.561510][ T1046] capability: warning: `syz.3.219' uses deprecated v2 capabilities in a way that may be insecure
[   39.572969][ T1046] overlayfs: failed to resolve './file1': -2
[   39.685330][ T1051] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   39.693932][ T1051] rust_binder: Write failure EINVAL in pid:154
[   39.713063][ T1053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=1053 comm=syz.3.222
[   39.716328][  T383] usb 2-1: USB disconnect, device number 10
[   39.750449][ T1055] /dev/rnullb0: Can't open blockdev
[   39.843368][  T451] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   39.947005][   T36] audit: type=1400 audit(1762722159.940:281): avc:  denied  { ioctl } for  pid=1068 comm="syz.1.226" path="socket:[6969]" dev="sockfs" ino=6969 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   40.044911][ T1077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   40.044946][ T1077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:132
[   40.123281][ T1090] bond_slave_0: entered promiscuous mode
[   40.138257][ T1090] bond_slave_0: entered allmulticast mode
[   40.201129][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   40.277728][ T1104] syz.3.237 (1104): /proc/1102/oom_adj is deprecated, please use /proc/1102/oom_score_adj instead.
[   40.539718][ T1132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116
[   40.564275][  T455] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[   40.730961][  T455] usb 4-1: config 88 has an invalid interface number: 114 but max is 3
[   40.739568][  T455] usb 4-1: config 88 contains an unexpected descriptor of type 0x2, skipping
[   40.748510][  T455] usb 4-1: config 88 has an invalid interface number: 212 but max is 3
[   40.756976][  T455] usb 4-1: config 88 has an invalid interface number: 64 but max is 3
[   40.765261][  T455] usb 4-1: config 88 contains an unexpected descriptor of type 0x1, skipping
[   40.774246][  T455] usb 4-1: config 88 has an invalid interface number: 190 but max is 3
[   40.782642][  T455] usb 4-1: config 88 has no interface number 0
[   40.789062][  T455] usb 4-1: config 88 has no interface number 1
[   40.795354][  T455] usb 4-1: config 88 has no interface number 2
[   40.801809][  T455] usb 4-1: config 88 has no interface number 3
[   40.808092][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0x2 has invalid maxpacket 32, setting to 8
[   40.819164][  T455] usb 4-1: config 88 interface 114 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   40.830436][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 10
[   40.841757][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0xA has invalid maxpacket 32, setting to 8
[   40.852655][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 8
[   40.863730][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0x1 is Bulk; changing to Interrupt
[   40.874024][  T455] usb 4-1: config 88 interface 114 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   40.885093][  T455] usb 4-1: config 88 interface 114 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   40.896149][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[   40.906245][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0x3 has invalid maxpacket 16, setting to 8
[   40.917103][  T455] usb 4-1: config 88 interface 114 altsetting 1 endpoint 0x6 has invalid maxpacket 32, setting to 8
[   40.927944][  T455] usb 4-1: config 88 interface 114 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[   40.939254][  T455] usb 4-1: config 88 interface 212 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   40.950447][  T455] usb 4-1: config 88 interface 212 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 8
[   40.961518][  T455] usb 4-1: config 88 interface 212 altsetting 6 endpoint 0xC has invalid maxpacket 959, setting to 8
[   40.972693][  T455] usb 4-1: config 88 interface 212 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   40.983727][  T455] usb 4-1: config 88 interface 212 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[   40.994692][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[   41.005617][  T455] usb 4-1: config 88 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   41.016510][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[   41.027267][  T455] usb 4-1: config 88 interface 64 altsetting 5 endpoint 0x9 has invalid maxpacket 16, setting to 8
[   41.038005][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[   41.049133][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[   41.059879][  T455] usb 4-1: config 88 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   41.070807][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[   41.081704][  T455] usb 4-1: config 88 interface 64 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[   41.092451][  T455] usb 4-1: config 88 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   41.103355][  T455] usb 4-1: config 88 interface 190 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[   41.114481][  T455] usb 4-1: config 88 interface 190 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   41.125597][  T455] usb 4-1: config 88 interface 190 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[   41.136478][  T455] usb 4-1: config 88 interface 190 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[   41.147308][  T455] usb 4-1: config 88 interface 190 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   41.158335][  T455] usb 4-1: config 88 interface 190 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[   41.171347][  T455] usb 4-1: config 88 interface 114 has no altsetting 0
[   41.177600][ T1156] 9pnet_fd: Insufficient options for proto=fd
[   41.178579][  T455] usb 4-1: config 88 interface 212 has no altsetting 0
[   41.184910][ T1156] 9pnet_fd: Insufficient options for proto=fd
[   41.191565][  T455] usb 4-1: config 88 interface 64 has no altsetting 0
[   41.197662][  T290] ------------[ cut here ]------------
[   41.204310][  T455] usb 4-1: config 88 interface 190 has no altsetting 0
[   41.209689][  T290] WARNING: CPU: 1 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   41.217034][ T1156] 9pnet_fd: Insufficient options for proto=fd
[   41.226200][  T290] Modules linked in:
[   41.232744][ T1156] 9pnet_fd: Insufficient options for proto=fd
[   41.236270][  T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   41.254263][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   41.264407][  T290] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   41.270171][  T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   41.290349][  T290] RSP: 0018:ffffc9000b65fb68 EFLAGS: 00010293
[   41.296605][  T290] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812ab5b900
[   41.304640][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   41.312644][  T290] RBP: ffffc9000b65fb90 R08: ffff88812b0307ff R09: 1ffff110256060ff
[   41.320642][  T290] R10: dffffc0000000000 R11: ffffed1025606100 R12: 0000000000000000
[   41.328668][  T290] R13: dffffc0000000000 R14: ffff88812b030760 R15: ffff88813803c000
[   41.336882][  T290] FS:  0000555562ae2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   41.346309][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.352922][  T290] CR2: 00007f569de54d58 CR3: 000000012ab54000 CR4: 00000000003526b0
[   41.360998][  T290] Call Trace:
[   41.364323][  T290]  <TASK>
[   41.367267][  T290]  ovl_do_remove+0x7b8/0xcf0
[   41.371897][  T290]  ? ovl_set_redirect+0x780/0x780
[   41.376952][  T290]  ? down_write+0xe9/0x2a0
[   41.381503][  T290]  ? __cfi_down_write+0x10/0x10
[   41.386443][  T290]  ovl_rmdir+0x1e/0x30
[   41.390548][  T290]  vfs_rmdir+0x3dd/0x560
[   41.394873][  T290]  incfs_kill_sb+0x109/0x230
[   41.399616][  T290]  deactivate_locked_super+0xd5/0x2a0
[   41.405062][  T290]  deactivate_super+0xb8/0xe0
[   41.409776][  T290]  cleanup_mnt+0x3f1/0x480
[   41.414247][  T290]  __cleanup_mnt+0x1d/0x40
[   41.418682][  T290]  task_work_run+0x1e0/0x250
[   41.423368][  T290]  ? __cfi_task_work_run+0x10/0x10
[   41.428526][  T290]  ? __x64_sys_umount+0x126/0x170
[   41.434059][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   41.439459][  T290]  ? __kasan_check_read+0x15/0x20
[   41.444550][  T290]  resume_user_mode_work+0x36/0x50
[   41.449867][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   41.455397][  T290]  do_syscall_64+0x64/0xf0
[   41.459843][  T290]  ? clear_bhb_loop+0x50/0xa0
[   41.464584][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.470510][  T290] RIP: 0033:0x7f52f9d909f7
[   41.474998][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   41.495021][  T290] RSP: 002b:00007fff934174e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   41.503782][  T290] RAX: 0000000000000000 RBX: 00007f52f9e11d7d RCX: 00007f52f9d909f7
[   41.511799][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff934175a0
[   41.519844][  T290] RBP: 00007fff934175a0 R08: 0000000000000000 R09: 0000000000000000
[   41.528003][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff93418690
[   41.536034][  T290] R13: 00007f52f9e11d7d R14: 000000000000a0bf R15: 00007fff93419760
[   41.544066][  T290]  </TASK>
[   41.547126][  T290] ---[ end trace 0000000000000000 ]---
[   41.552861][  T290] ------------[ cut here ]------------
[   41.558445][  T290] WARNING: CPU: 0 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   41.567834][  T290] Modules linked in:
[   41.571754][  T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   41.584931][  T290] Tainted: [W]=WARN
[   41.588759][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   41.598864][  T290] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   41.604628][  T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   41.624321][  T290] RSP: 0018:ffffc9000b65fb68 EFLAGS: 00010293
[   41.630426][  T290] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812ab5b900
[   41.638446][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   41.646472][  T290] RBP: ffffc9000b65fb90 R08: ffff88812b0307ff R09: 1ffff110256060ff
[   41.654509][  T290] R10: dffffc0000000000 R11: ffffed1025606100 R12: 0000000000000000
[   41.662544][  T290] R13: dffffc0000000000 R14: ffff88812b030760 R15: ffff88813803c000
[   41.670624][  T290] FS:  0000555562ae2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   41.679799][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.686465][  T290] CR2: 00005555652544a8 CR3: 000000012ab54000 CR4: 00000000003526b0
[   41.694519][  T290] Call Trace:
[   41.697819][  T290]  <TASK>
[   41.700853][  T290]  ovl_do_remove+0x7b8/0xcf0
[   41.705513][  T290]  ? ovl_set_redirect+0x780/0x780
[   41.710588][  T290]  ? down_write+0xe9/0x2a0
[   41.715055][  T290]  ? __cfi_down_write+0x10/0x10
[   41.719954][  T290]  ovl_rmdir+0x1e/0x30
[   41.724088][  T290]  vfs_rmdir+0x3dd/0x560
[   41.728368][  T290]  incfs_kill_sb+0x1a0/0x230
[   41.732976][  T290]  deactivate_locked_super+0xd5/0x2a0
[   41.738525][  T290]  deactivate_super+0xb8/0xe0
[   41.743260][  T290]  cleanup_mnt+0x3f1/0x480
[   41.747821][  T290]  __cleanup_mnt+0x1d/0x40
[   41.752343][  T290]  task_work_run+0x1e0/0x250
[   41.757085][  T290]  ? __cfi_task_work_run+0x10/0x10
[   41.762257][  T290]  ? __x64_sys_umount+0x126/0x170
[   41.767345][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   41.772756][  T290]  ? __kasan_check_read+0x15/0x20
[   41.777851][  T290]  resume_user_mode_work+0x36/0x50
[   41.783008][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   41.788733][  T290]  do_syscall_64+0x64/0xf0
[   41.793203][  T290]  ? clear_bhb_loop+0x50/0xa0
[   41.797952][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.803940][  T290] RIP: 0033:0x7f52f9d909f7
[   41.808392][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   41.828099][  T290] RSP: 002b:00007fff934174e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   41.836587][  T290] RAX: 0000000000000000 RBX: 00007f52f9e11d7d RCX: 00007f52f9d909f7
[   41.844642][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff934175a0
[   41.852644][  T290] RBP: 00007fff934175a0 R08: 0000000000000000 R09: 0000000000000000
[   41.860656][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff93418690
[   41.868876][  T290] R13: 00007f52f9e11d7d R14: 000000000000a0bf R15: 00007fff93419760
[   41.876916][  T290]  </TASK>
[   41.879966][  T290] ---[ end trace 0000000000000000 ]---
[   42.243383][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   42.243381][  T451] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   43.324935][  T455] usb 4-1: Dual-Role OTG device on HNP port
[   43.333273][  T455] usb 4-1: can't set HNP mode: -71