last executing test programs:

1m24.205439496s ago: executing program 3 (id=205):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r2, &(0x7f0000007640)=[{{&(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x41, 0x5}}], 0x18}}], 0x1, 0x814)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0)
fcntl$getflags(r3, 0x403)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

1m23.990321539s ago: executing program 3 (id=212):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) (async)
lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1)

1m23.988925019s ago: executing program 3 (id=214):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000000)={0x38, 0x3, 0x1, 0x0, 0x6, 0x7ff, 0x9, 0x6, 0x5dfc, 0xa5f}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000d0000000000000008000f0001000000", 0x24)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x400c620e, 0xfffffffffffffffe)

1m23.751004513s ago: executing program 3 (id=220):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x2})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
socket$inet6(0x10, 0x3, 0x0) (async)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40)
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setopts(0x4200, r6, 0x7ff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m23.690198774s ago: executing program 3 (id=221):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0x8004b709, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async)
ioctl$NS_GET_USERNS(r1, 0x8004b709, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) (async)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) (async)

1m23.586349576s ago: executing program 3 (id=224):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = inotify_init1(0x80000)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r3, &(0x7f0000000000)=""/149, 0x95, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
r4 = socket$xdp(0x2c, 0x3, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='/dev/rtc0\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c)
recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40010100)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close(r2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
r6 = epoll_create(0x4)
epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x8, &(0x7f0000000380)={[0x4]}, 0x8)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000000)={0x2, 0x7ff})
pipe2(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

1m23.536917647s ago: executing program 32 (id=224):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = inotify_init1(0x80000)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r3, &(0x7f0000000000)=""/149, 0x95, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
r4 = socket$xdp(0x2c, 0x3, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='/dev/rtc0\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c)
recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40010100)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close(r2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
r6 = epoll_create(0x4)
epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x8, &(0x7f0000000380)={[0x4]}, 0x8)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000000)={0x2, 0x7ff})
pipe2(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

1m20.118098369s ago: executing program 4 (id=274):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0)
recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0)
mmap(&(0x7f00007b0000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x147a5000)
pselect6(0x40, &(0x7f00000000c0)={0xb6d1, 0x0, 0x5, 0xd6, 0xf, 0x8, 0xb, 0xca}, 0x0, 0x0, &(0x7f00000001c0), 0x0)

1m20.117782479s ago: executing program 4 (id=275):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe})
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00')
getdents64(r1, &(0x7f0000000040)=""/27, 0x1b)
getdents(r1, &(0x7f0000001f80)=""/4096, 0x1000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x7, 0x0, 0x30}, @fda={0x66646185, 0x9, 0x0, 0x1e}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})

1m20.114907849s ago: executing program 4 (id=276):
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010087, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010087, 0x0) (async)

1m20.110379099s ago: executing program 4 (id=277):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "74b658a7aa0b2d59", "a4918a29c9ea8feb40a19d514e52f36f", "c7e0a3c2", "ff9019438d66c38c"}, 0x28)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x4, 0x0)
recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
fcntl$dupfd(r3, 0x406, r3)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

1m19.958562131s ago: executing program 4 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000001c0)={0x0})
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000200)=ANY=[@ANYBLOB="6673636f6e6d746578743d756e636f6e66696e65ffffff7f00000000c723a95adf83323f3c0af303887b587cbd5532a8304cddb2939c05c8fa70e02c1eddad9691781c4123d58d0a29e85b2db2fc522aeb38d049ad31d30857cff138816d91ef0a210d08e890738613003f61d3096216547b6d0c5514a3a8ea587fe379a7802445462592acc150f2208bf963c83a4f59657eaaf65fe087bc420415f0e40cb7c1fea1b4114d89c96772064c5152ac92d323970c88dec4cdac001f3fa18315eb57d91dcfbeda3ba6628b27906520cdafc3586344d9c25389bba6fa"])

1m19.934318472s ago: executing program 4 (id=279):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext'])
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0xb, 0x4)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
setresgid(0xee00, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "acb0127dc0757bd70fd7a5fa1cd76c95f8"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0xa, 0x0, &(0x7f0000000140))
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f69643de1dbd2b71e45fe44fd2d0d990d6a0406e79c8df6cdb6a2f93d9758e7b10d57b453a74e018683df5f851cbf5ef052adc81d3c2b2e8954ca9a04419018e229aa2d119492211876c30057504d291d81e33d74eb340ece872dd9175f6d40d45df70ae89f016c76b39a4593f9dcdb52d59eb47727b16eefed9cce1805c6841eb639efa3ef6087e649c56dd8f9158f226c568362d0291e2aaa0c78bb7f740aa6c508b37fd24984f8db99fc105c4af02533325c20d5", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xb, 0xff, 0x1, {0x22, 0xe68}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0xf, 0xd, 0x34, 0x10, 0x40}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="200398b32f5053fc73ad0963e49eee0ffc98f5"]}]})
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x4b)
r8 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f78617474722c6e6f657874656e642c6e6f6465766d61702c6e6f657874656e642c63616368653d6d6d61702c6163636573733d636c69656e742c646f6e745f686173682c736d61636b6673726f6f743d4b2127292d5b272c00b84d2cbc8c0e8d34d567cd428ca539cf"])
clock_gettime(0x6, &(0x7f0000000300))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r12=>0x0, <r13=>0x0})
recvmmsg$unix(r0, &(0x7f0000000280)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240), 0xffffe31}}], 0x1, 0x22000, &(0x7f00000002c0)={r12, r13+60000000})

1m4.919863092s ago: executing program 33 (id=279):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext'])
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0xb, 0x4)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
setresgid(0xee00, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "acb0127dc0757bd70fd7a5fa1cd76c95f8"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0xa, 0x0, &(0x7f0000000140))
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f69643de1dbd2b71e45fe44fd2d0d990d6a0406e79c8df6cdb6a2f93d9758e7b10d57b453a74e018683df5f851cbf5ef052adc81d3c2b2e8954ca9a04419018e229aa2d119492211876c30057504d291d81e33d74eb340ece872dd9175f6d40d45df70ae89f016c76b39a4593f9dcdb52d59eb47727b16eefed9cce1805c6841eb639efa3ef6087e649c56dd8f9158f226c568362d0291e2aaa0c78bb7f740aa6c508b37fd24984f8db99fc105c4af02533325c20d5", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xb, 0xff, 0x1, {0x22, 0xe68}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0xf, 0xd, 0x34, 0x10, 0x40}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="200398b32f5053fc73ad0963e49eee0ffc98f5"]}]})
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x4b)
r8 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f78617474722c6e6f657874656e642c6e6f6465766d61702c6e6f657874656e642c63616368653d6d6d61702c6163636573733d636c69656e742c646f6e745f686173682c736d61636b6673726f6f743d4b2127292d5b272c00b84d2cbc8c0e8d34d567cd428ca539cf"])
clock_gettime(0x6, &(0x7f0000000300))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r12=>0x0, <r13=>0x0})
recvmmsg$unix(r0, &(0x7f0000000280)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240), 0xffffe31}}], 0x1, 0x22000, &(0x7f00000002c0)={r12, r13+60000000})

3.040808603s ago: executing program 1 (id=1438):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f000000b700)=@buf={0x28, &(0x7f000000b680)="5559187a24b49ee6d5ec2b2df3b4fb5fbc9a8e900d3e819d0674c797023059c8e0003a8a857566ef"})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}})
setuid(0xee00)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@private2, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}}, 0x40}}, 0x90)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000400}, 0x20004090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

2.943957565s ago: executing program 1 (id=1439):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x6e6bbd}}, 0x50}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
ioctl$BLKSECDISCARD(r1, 0x127d, 0x0)

2.838188366s ago: executing program 1 (id=1440):
syz_clone3(&(0x7f0000000740)={0x4100000, &(0x7f00000003c0), &(0x7f0000000540)=<r0=>0x0, &(0x7f0000000580), {0x1a}, &(0x7f00000005c0)=""/176, 0xb0, &(0x7f0000000680)=""/67, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x480b5b90d835e45c})
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
close_range(r1, 0xffffffffffffffff, 0x0)
io_setup(0xe4, &(0x7f0000000000)=<r4=>0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000027c0)=ANY=[@ANYBLOB="38010000fe00002b094b5626245e5f82390ebe6263639c49f0a5c6a850a4"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r8)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}}, 0x108)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
io_submit(r4, 0x1, &(0x7f00000047c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfc, r11, 0x0, 0x0, 0xc00000}])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=<r13=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"ff6df5ecbd33118b12c28519af4d3d9a", r12, r13, {0x8, 0x3}, {0x2}, 0x7fffffff, [0x9, 0x9, 0xffffffff, 0x3, 0x40, 0x7fff, 0x33, 0x401, 0x2, 0x2, 0x7, 0xfbd0, 0x92a8, 0xe, 0x80000000, 0x1]})

2.777177948s ago: executing program 1 (id=1443):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x81, 0x2, 0x6}}]}}}]}}]}}, 0x0)
clock_gettime(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000087}, 0x4048000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
ioctl$BINDER_CTL_ADD(r4, 0xc1086201, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a04430002fb18000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x5, 0x231, 0x7, {}, {}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)

2.204209917s ago: executing program 0 (id=1450):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002300), 0x808000, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4f27f69b0618d8ae}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4)
r6 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffeffff, 0x6040)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x99b33000)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62)
ioctl$EVIOCGREP(r6, 0x80084503, 0x0)

1.98522734s ago: executing program 5 (id=1457):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x2ff, 0x0, 0x3}]})
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)

1.96380018s ago: executing program 5 (id=1458):
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xf423f, 0x5, 0xb, 0x0, 0x7, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x1, 0x81, 0x9f, 0x40000000002, 0x0, 0x6, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x41, 0xe})

1.917327301s ago: executing program 5 (id=1461):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="dd4bc01f846d46f57820571923ad836eada375f8663b3b26d09f8dcbcb33ca4f9cfcefca27c353a3f3ff723b834b12a6578adf519d2311ed127ec9b5")

1.898092571s ago: executing program 5 (id=1462):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x0, 0x26}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x27, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r3, 0x4, 0x4)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000215000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="ba4000edb8c4008ec00f23140f211cba2000b000eebaf80c66b83a303c8166efbafc0cb84b00ef670f01c4660f3a423904660f1bc2260f2261", 0x39}], 0x1, 0x26, &(0x7f00000002c0)=[@cr4={0x1, 0x1}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000)

1.738215883s ago: executing program 5 (id=1464):
setregid(0x0, 0xee01) (async)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
fchdir(r0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async)
epoll_wait(r4, &(0x7f0000004140)=[{}], 0x1, 0x4000005) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) (async)
r8 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00')
readlinkat(r8, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)
prctl$PR_MCE_KILL_GET(0x22) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.734965453s ago: executing program 5 (id=1465):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0b02000000f440"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x58, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
syz_usb_control_io$hid(r3, 0x0, 0x0)
pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84840)
write$P9_RUNLINKAT(r4, &(0x7f0000000900)={0x7, 0x4d, 0x2}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e40)={'vcan0\x00'})
r5 = syz_usb_connect$cdc_ecm(0x5, 0x82, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0xe8, 0xa0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "a2da0cbf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xec, 0x6, 0x5}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0x1a}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x4, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x2, [0x8, 0x6]}, @acm={0x4, 0x24, 0x2, 0x35540494c61f6caa}, @country_functional={0xa, 0x24, 0x7, 0x1, 0x1, [0x800, 0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x2, 0x3, 0xda, 0x40, 0x3}, 0x10, &(0x7f0000000a40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x2, 0xa1, 0x0, 0x4}]}, 0x5, [{0xbb, &(0x7f0000000a80)=@string={0xbb, 0x3, "78c5bb62c5efe6aa8f8f86568098ccb30104936346b27b8834d60c595eb409b3617045d7971d328eda58b457629e5fe0c1004c52a49f64c0cf254e0b2d743edf8da631a7ac6639e7d2efc5da10333b34621ca86f0d92075aef88b14cf0c6268d32281af2d809a4539707968cd551e04843feaaee79b06118c378181d8022dace3e5eee6bc1b1a4d353f6566701b25702d201a04672ce70ba4550d3f6aa526a3020f7487519f0e18998f927840621f459dee2545b5a6ba5012e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41d}}, {0x65, &(0x7f0000000b80)=@string={0x65, 0x3, "bde3a166ef68251f3bf24a102bc748e80267d73e829c177a4853cc4a3052e1db0f15d10ac82f1da1decf1cd3223afe7c25b6eea1259d1a7972d0b0f0130b381fa7f5417b928107945f870f7069256144ca3ed25afa3c98ae00d2256ae6c6f3c4b37d41"}}, {0x90, &(0x7f0000000c00)=@string={0x90, 0x3, "d68e39111fdfe5a3902c52c148fd1f4ce59edad42bbdb1c430f63924d33b8a9e5a8ff1e639342d7434ab1f8fde48d93d8c35cebe3979155bf82d180021518eafb7054e76940adc33ca27527db87dd49d35a53d40bcebb9b6593e578fc420b862070ed65d5797ceb5f54bb030e93c636530b13adf149fb2a7e6a8ceb7c6751144187aed5d01b31303498cff8ee6e5"}}, {0x9d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="9d0358d98abf202d9440df9308a9e7fb5d22c3d4565776d2002c80fac10ace46949be0fcf175f5542b94274d743938d893178d942c4ae6045148dadc8aa6ff88fd464a6685b258fd8b2b1ed48c9e42dd30a9c9f1df979562cec40dbd7bf8ae4c750ef92b9f0b3f3a6d611153f7dbc90714975d1c2478133a8e6df5294915c5ff235fdbeaf5f7eacc3792bd2f279fa4ff4c323e5ae916d81f72a1a84fb2"]}]})
syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f0000000e00)={0x0, 0x2f, 0x5, {0x5, 0x30, "95353a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x14)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x1, 0xac, {0xac, 0xd, "c680f1c19c22a4c3fccd8e7a8a784eaa6f6ed76830492cdfbe5f9f50bb48514df006ca239e9a32dc2ea36b7e8de00e49a76f190d8efd176b898f823ebfb996863d386d131fcf1bae56b561af23e7cfe4b6b2f86a01ccbb97fdc666af46ee994a39c55bca23a4b7afc5793586d5ef44543598378be20347c336682c80ff46b5ab9bbe2f4c90d21a3092518b1fd558c46c673dbafbb1ebd506515dc352cb57ee6049a12c8069b29fd6d3a6"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000001980)=ANY=[@ANYBLOB="000f0c000000050f0c000107f2021018c2037fa21c94ca4e9b0ff5371ab2360e32d6d9c4fe0b316c04f500112d824b139a385f236f37bcf11ac3fae05cbdc01cd58d677fae709bdf2896b72d492ae33c0927e330"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x2, 0x6, 0x2, "28bb3d24", "6cae16ec"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x8, 0x81, 0x6, 0x0, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f0000000140)={0x20, 0x7, 0x30, "acf82726de3c63f2c3755fce04c797b7fe0918b24bf0bea473bf473034fd554fc42174c1035a6664960548e72878c6ac"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xf}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '!C'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "fcc2"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x9}})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0)

1.582314836s ago: executing program 1 (id=1466):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0)
read(r0, &(0x7f0000021000)=""/4096, 0x1000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000000)=0x4, 0x4)
r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x5, 0xefa, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x17, 0x84, 0x15, 0x8, 0xa168, 0x613, 0x46a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee8, 0x3, 0x2, 0x7, 0xc0, 0x5, [{{0x9, 0x4, 0xa8, 0xe, 0x6, 0x30, 0xd, 0x28, 0xf9, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1a, 0x4, 0xfa, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x101, 0x8, "82"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x0, 0x8, [@generic={0xc9, 0x22, "afc7a77dd326fcc6df942d1cef71db3723a40c19650e3515f45f21ad581105be48d1e5dfd32d90c1c877c881c276f949dadd557696b684b0a63cfc8ca365840cf75b03b2ef56c6788fe0ee2428ecc5c8edc2808bc712bec03fe4a4e7b2ddc7d8c548d1720bd00dc1b2073b05cecb87462e8fe0c287daabe72219924ee22347140085c108cb6b1c1f866bb0ce2adf656f0655fd58c376b857867c315d4da1ffd5157773790ad8e1c42ad47cbf35b9b72c03e6091529c52b83c67674ac878807877797e4351bf2cc"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x197, 0x40, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xc1, 0x8, 0xb, [@generic={0x6c, 0x33, "48f740307af2bde38e3dca078e47a6a8b253f75b77eb739a006ce5b43d0d0c4eb2b54f915b49e9abadca0958ff572312e557c11c73a793188ecc27b7b30e4eae9b6120b9000cb22ad542a99e272a67507cbf7aef7cf86cbf3ce8eddd84af2ae6f63b841290783cce7a91"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x6, 0x74, 0x6, [@generic={0xed, 0x22, "0a3885a3d8058acd26a0ec23b14907bdc0e515fcff0da6b7d89f8d0934257674de613ac54692d7a3ecd0e4b349b8277a53fb62f2003fe0cdffcb1a6b86f01268b02ae965a6a987e3f2dc3b3923b61be98db1489ed9d52cb427e1d02b9d8a1d503ec40b36c12ad4b888ea700329629b19be0a83e59f1a56855e42bdc187771e06ebd9d8204a74d450102b4b6045191b7b38ce469ebbb20129b89b3b427e400cb004eda07ccfa4c16c936c8db8c72f188e154b833393afd32231f064fd6ea0544775d6c5761c2497b34ae7907f4bd96022d8d0a44d0863df7488f0c8c3efd744a4fc3e0bd41a6371d75965fe"}, @generic={0x3d, 0x1, "cbd59f563bd7baf83813646562d7baab30bca239355556f258cf47a196922c5217f1bb28d2e22626ae2b7db523dd4751c6cb29ec0c27def58b61f8"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0x1, 0x5, [@generic={0xb1, 0x31, "3eeb77a05e122e328f6b69741f6f3fa9e78c618f580002ea3c0c6bc61029cd0cab0e332cd3e3f0734e6f57d0d037c1d269e4ec5002bd56c3bd9dba06d1a961d8a1f4ef4b6655cd86337130cc49676fd4a1a609ab029260b3ed41a62a0bfb118419b8a5cf711a14da258bc8accd7dbab2df905768216482465dc69cc28603e0fa2439411fbcb64d9f8a702d75cd4a5367a8c98083f74563dbcae823f034a8a31551b04bf1c024acbfbac00513c8585e"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x3, 0x7, [@generic={0xa5, 0x23, "cbfee3a81191e137203ea2630e9c0901644ec33e8d4addba6549f55987cce519b956f252cae597932986e0a3a1ed826899ad3435a44d604521fb711072ea6c5ac076701a79639cfc5830588c256976fd69cda25e8e65a7b9c2dc9a74fb36a042ea0c49f87366ba94601e530b19895e3b266447df50419e24c388b8268dc1bcc989cbde55f210ddb17910ad6af0ff82586152efa884d8be14dacf11d1c7961961c2ddc4"}]}}]}}, {{0x9, 0x4, 0xe5, 0x7, 0xd, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ba08a49f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@country_functional={0xa, 0x24, 0x7, 0x3, 0x788, [0x7f, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2d}, @mdlm_detail={0x9c, 0x24, 0x13, 0x2, "2aed2d78fe770d6290479ca231b1747055c011066552e5e0adfea3599858f1bcb514ca48435ee02028fc1661bd276a3cd36be37f18b70553e53f545965f24786969a77edc9dfba8c02ededc9880c348b6edf7f5606b8a31f9adab11e6829b852b3e1a1d126d6f3d1cf0e4feab51c079a910d6266ab386c1b677ba4342691863a371ec63adca73c78fab4006c3c6721426c1ce284ccd92fa8"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7fff, 0x4, 0x10, 0xa4, 0x8}, @mdlm_detail={0xb7, 0x24, 0x13, 0x1, "aad6c3dad54978b637b7bf0fe08205f42aba0774aa2211b09f5d33ce39902f617ff9ce0dbe0ec1e3d53f0aa51bd31b3b95ab4f7cc55e0a8c5958bcdae2b1b9f19860d84ccf6a32b2c0d1729b1ba34648ca750a59c7209a76154f3b3ee4013b0ef6fa325d4a941abc05b0777519de119cbc38ca8ef15ac44a197d3aa15b2d4478821ec896c5aa66b769eacd7e1aa322cb4d295800d096da1aed6cacad81e264a3c1a583e89eefabb30673b7fdd6fa58f2bc0c8a"}]}, @generic={0x8d, 0x6, "18ed060799bad5b514afdad873f2cc5b3390d7acc613973871251ae69f041d9b9c746faa36502d1237882171ac504184d7bbba90579bd78dd1b9ef7dfd7915705c90c5f95660d328e6ff3d8a579883c3ff5e853317c4735f8fb82a3b8893e830cfbc4a720476831c5a6352a7ea6eb33802df0b58c67be1bcacd19a9f5dd2a2a21aa1e6a94a54691c399002"}], [{{0x9, 0x5, 0xc, 0x2, 0x40, 0x5, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x18, 0x401}, @generic={0x57, 0x4, "039ec4d7b90a0ca9a6c0771930d7aa2dc229d44ae4a92d95ac130cc01d98a093d8faf7181a302edd70f4a302474f8b432dbdb3e7354a836fa4264136489c6fbc8882451a583913e409a188bfca1ed78705a69706bd"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x5, 0x5, 0x2, [@generic={0x7f, 0x2, "07c455f04a2afe032225a9e19183296be6ddbb6f0b84980b23d3c23cfd6571c84ecd1b25cf1191d0a28a3a3a2c708fbf285ffbf5915ccb000513538923a2ade068df3daafb2eac69d57e980106ee693f51b3b66959216d10df5dfb6ee9404dd7217a73a5fcc546be085c02b449a58dd7591b1fd6e70b1afd6c61aa5c9d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x5, 0x40, 0x0, [@generic={0x43, 0xe, "266c1f81a68a2f6707a4da8e3c7c0a05e17b7e3f73dd6a132ef39e3d61e5a5383638153d785c9fc68211bfeef52c45b5cdefbb5cf24d4de632a26056b61571de73"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7f, 0xf7, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x96, 0xc957}, @generic={0xb6, 0x21, "392859a2c5f7100ba23367d336de6c6f23f4c44a1375be21b7fdfd954909bd66e136cc0e19ec6712465b5e7bf44bcc29ab1d60140d031071124a6504b2daf350288c5826d2673f2b6d1fcdc9cd61c765061b2a67b8d296b66e86c8ecec2cc467e5d54550fb50dc3fac52a2b13beb3b859cfd6a107ebab9a01e748235ff8269e45c2f9fb97859267c0210db946c5185f6791960c3bf189fea132c24b4105e3bfdabb985acd5d8c9429bd06d6dc9e3c2fe9a917353"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x9, 0x10, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @generic={0xf5, 0xc, "304a137413934944c0248c184e53558bee6bfca2fcbf0976808ef5aa4b155ed7846de14bd9554f9157e971cbac820dabd5cc7aadb8ffdf5ab12eac215a36126142d946860f8e66eb93f8a00da65bcd414c6207d8b72a7bf95e20b2cfbf0ef575e34d1c0e79116d87598c522f7ac166231af594c7403bd9acbfc2d4ef5c773fda4c095c6b4c0eaaf489c71b2f7ad228546cfc15945ebdaea84ce6e13a8751c68c7a5d1bb4722426709f9c760820494cd12ca6ecf93b9a403070f7d58d68161fe585be6bb9b6541b1803158be8368fb2b65447810eaed781f8d6603cfb76188c1839b4f7d060041adac653c25a5fe7572787bb70"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xe383}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x8, 0x6, 0x3, [@generic={0xbd, 0x22, "5feacddf48ed7b691df5dfa14dad23fe8fc7449b6e31901874e11e71438fce0d66e4fc7359e842ad1792b4abd140b9772ebc28fc9a7619461ce2b7993a70edfdfb040759019518685b6afde73d93bf8f66b257741052087bd1f703424f9455d6fd8ca780b825fe1ac1c828ce2ef2b08bfc9ac5b9c309fc0896771300f521e8b59cf34433a6a381df80e9ebd03831e08ef6019923c0e9c2bc7e735da60cf4d346b857297a065f8683bf22826214d7407ea38acc4c63b63d803642b2"}]}}, {{0x9, 0x5, 0xf, 0x73f35c901a3d5497, 0x30, 0xd, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9fd}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x1, 0x0, [@generic={0xe3, 0x4, "11a7698b6987a167537a4730d6c9a97a9997895d612edfec8e44a969e0fc79d0ca75c80412d04dd230d6418a16e86780ac61fc78a4430ad50cf26d8a0f9e8c4c669b83c6c35044093824199b219126ac57a613f7a2909515ca80916105f49db5bcca6a67707834fb35bff95f904251980aa69b1866a360854c8b0b95f8e06f910ea35fade4f8d2804da3d30b9b9e2cd0261f352aa3ab61a86d258f8308e6a4e7ae770ccf1b13ac334b23fb6134de80588d45f81ac5acf463308951d46263d06cd87e8b5c3ef3931519531e080ee932eafe7dc0b4106f0e145ea9b5297ef994ec66"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x6119}, @generic={0x1f, 0x24, "fa051183cf779e657d7fe3802fd6b8577d3b566e4bdea82d3d321ba321"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0xff, 0x3, 0x4, [@generic={0x34, 0x24, "4486a98dfc7c0ee3d19f8204a1e06531f639c65260265bb9f374a48356f962f0ecfee380a64be8ea6306a6a2fc794ea97eda"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x80, 0x1, [@generic={0xbe, 0xd, "8dea4bdc326833c6d9cd707c980e6e70b5aa200022c9e8af8db8e875018c35361422a98d31f3cd9a5882125ba84e0d808d8fb5c3735aa8b10090d626e5a47d01ed32583bd06326eb9335536ad16831fc1c9ef74115340d7f63173fc0f66679ec1791a201a9fec374f135b8834c9889b4b53cbe7a3f91108fbc77a67985956436a05e48ae6e93698b7974f03e776570ea404b2ad3237daaba73ccb74df6579e846d6b4d48bceda8ced851eef08a8a764dd8599aa395d4efb3960837c3"}]}}]}}, {{0x9, 0x4, 0x64, 0xff, 0x4, 0x73, 0x1f, 0xfd, 0x8, [@hid_hid={0x9, 0x21, 0x6, 0xf9, 0x1, {0x22, 0xbb9}}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x0, 0x7, 0x80, [@generic={0xc8, 0x24, "6cb37cd90e65c81b5504dd35304af8c12b3bb4147ca07c18363b3e97d4e04aa3ce2b911cb2476b7de8311de58c2e78a844a001e57c7e749087ce650dd387cf89204e0ce289e1ab894875ead96bbeb479c4f63b04e7535b78ba9a1bfb995eab52844322dd0dcc683ff0fb6653f3c509817df1b5dfcf53a25242f5ac37e992d675144fd0a02dd0fb838464472f1353a5d77a8778a6365f405f3c571087d0d8a8f3ccf27d9fffb6851b442b99897fee1dbf5b52264dbbd21ec642e1f3892fc7e5813e022ce6b1ac"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1a4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x9, 0xf6, [@generic={0xc0, 0x37, "6ae62b4fc61b9a81753a33d0dac583cdf574260f88fc80f6fd4f174a37f22afcf05fc2823bedad06311ec550607754b5a00186517a874e2408fd661baef9a030a8903973af7e11eedd004c5694debfadeb9530432a2c80981b82cf445b063f1eb650f6972f47a9077692cdbea48c2b31effb1840f78c57c9211c26a9de248190caf11e8f22836964598177855fabf1e47c09fa272b7f260650589bb74dde9da14edaba242132e28fc11e8f8032652dc657c6c5d42e54ccf4bf475f3e86c4"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x8000}, @generic={0xa6, 0x23, "149bbdd6fd86e0cbdcc7ab44b2a3331f1d081c58619f4ca9f27c22a525c224a6663e4fa0cc5082223101b627910c9bb775293b9e50fdc6b566ba83bfc5d055c2bd3626802aa7d94222ddfe16eb60bd393cc8e8fe386b02015519eb43ac340d0e2a6472202329646047fe9de7fb8336f03502160d38af13afa89160abfc2e80c21e1f1bc6626dec7488aeb6534348534b312e44a895cddf3e65e0cc2102a55ffb2b5c304c"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0x8f, 0x9, 0x20, 0x50}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0xaaaf}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}, {0x71, &(0x7f0000001380)=ANY=[@ANYBLOB="7103db0eb6c1fcede93e30e2a9fb2c8c7b665ed1b14a2ee933f3df0b0c6f43963c938e149c3456f528f448408a0a7779b8037420b2e49081052c17b2f2b20e7ca12121ab63e3236bee02545913dfb6d35190bc859863b26c19c085052a597574ce41e066edbf0016927250a78f9f9ea6f000ae7f7ce6ed5ab1afc4b1e92aedc6bce38883b9fcbc25b469f5d0b6b35a315b984d43a765104de0a30e47b1d6131aead3e30f6525d9b718b6e6df406bf6732121e8e46404d0933bf5e022d1a12b1f2508f93059b6f383fad864eecf6789f005081d283f9b9d63f70b6b58386515c6451d9959511d3aa1c04ed55b2981a607f3"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x60, &(0x7f0000001200)=@string={0x60, 0x3, "2e586fa23eac99f1232e371b2dc84f3de116c3e5402a28af3ca5becfa26f3a2caac443c7806e0e710694b22471e9085d7ca292f644c21ca259ecccb027b3b96831e7daefb23db3b4dbc7fd8bfdf08ff69b81ef015d10aebfc1375696d553"}}, {0x4c, &(0x7f0000001280)=@string={0x4c, 0x3, "90b70330f2d437e29ad98d195e607577285b97846cd7a4b918f9cbc227746d10dcb39b4080ccb53d81218ddf33e57c2a93ae09d40e88c1c21793fcd668428ccb012bbfb5b6eb2c76a81b"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0)

1.358947859s ago: executing program 0 (id=1467):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x14b)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x218, 0xe8, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000100), {[{{@arp={@rand_addr=0x64010102, @multicast1, 0xffffffff, 0x0, 0x3, 0x8, {@mac=@link_local, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0xd1d, 0x2796, 0x5, 0x6, 0xffff, 0xfff, 'hsr0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x101, 0x9, 0x2}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x101, 0x5, 0x1, 0x0, 0x0, "733179aae4846207e9a17f6d58c64781111d247ca821c70d44bbd142eb8053dd0bf6f3bf449ed6cf8817a774b7025bbbc0f843dbb06e2257663ffdaf9b3ee268"}}}, {{@arp={@broadcast, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 0x8, 0x0, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x8001, 0x1, 0x100, 0xfff5, 0x6c, 'vcan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x81}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @multicast1, @multicast2, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0xaece, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0)
ftruncate(r5, 0x51a9497)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000002500))
openat$cgroup_freezer_state(r5, &(0x7f0000000000), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.266436351s ago: executing program 0 (id=1468):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xd6, "5a1e07379fd59ec2b370a7e87fb6f64a47321ef55b4be0b25e14a350a7582a12e60ce7c0339c43c1b4b49e9e51ce08c63b66c89ece7584cdaf7e1671bfaf4878fe120b499937614d7b5684471eb6333702d8da552229fb5b2c59e00a3e96fcb9c2284c39097e73ec95f895f4fded5170b5cfc60a75635dd663cd7a9809c466f4a5a26d5a1a405d97e194e5afc09925a08db43c8889a5c0e9f4a5a0a7b38df291882fe7aa16e4363a54bb9de5f066bf087a79e1d9488033fd1707ab5c94a1661e6e01f730225e630b899db5fe014c27d2fb9401b6e934"}, &(0x7f0000000140)=0xfa)

1.26620784s ago: executing program 0 (id=1469):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="0f08f30f090f01c965d038670f01c9b8010000000f01d9b9cc0900000f32c4c2699aba2c33000066baa10066edb9870100000f32", 0x34}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)

926.206146ms ago: executing program 2 (id=1472):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x108}, 0x1c) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000086b1d0101400001020301090281000301082b040904000000010100000a24010100090201020c2402040804060426d4a0090904010000010200000904010101010200000724010502050009050109ff030704ff072501020b0200090402000001020000090402010101020000072401fb1e07000824020102020c03090582060004"], 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x6) (async)
madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async)
sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x108c000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async)
ioctl$TCFLSH(r3, 0x400455c8, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)

926.022276ms ago: executing program 2 (id=1473):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
clock_settime(0xfffffffb, &(0x7f0000000140))
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) (async)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/warn_count', 0x1062, 0x19d)
read$FUSE(r4, &(0x7f00000036c0)={0x2020}, 0x2053) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udp\x00') (async)
r6 = socket$inet6(0xa, 0x2, 0x3a)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000100)=0x9, 0x4) (async)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x80}, r8}, 0x14)
recvfrom(r6, 0x0, 0x0, 0x100, 0x0, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="800034ca269bb73c", 0xffffffffffffffb2, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async)
setsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000001680)={0x2020}, 0x2020)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)

360.421904ms ago: executing program 0 (id=1474):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x129cc0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6f3736d6", @ANYRES16=r3, @ANYBLOB="010024bd700000000000170000001c00068015000300acb0127dc0757bd70fd7a5fa1cd76c95f8000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
accept4(r2, &(0x7f0000000a00)=@nl, &(0x7f0000000a80)=0x80, 0x800)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x10, r0, 0x60047000)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r5, 0x0, 0x0)
msync(&(0x7f000084f000/0x1000)=nil, 0x1000, 0x3)
recvmmsg(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f00000004c0)=""/34, 0x22}], 0x8, &(0x7f0000000580)=""/103, 0x67}, 0x1}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000880)=""/48, 0x30}], 0x3, &(0x7f0000000900)=""/28, 0x1c}, 0xfff}], 0x2, 0x40000000, &(0x7f00000009c0)={0x77359400})

328.646925ms ago: executing program 0 (id=1475):
r0 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0xc01)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000500)='-', 0x1}], 0x1)
write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2308217f014f", @ANYRES16=0x0, @ANYRES16], 0xffdd)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x40, 0x12, 0x2, "af7e"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "d036"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b80)={0x40, 0x511b5d18a985089e, 0x5, "95d45474c6"}, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x2, '\nI'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000f40)={0x60, 0x14, 0x5, "fb7583c2ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGREP(r0, 0x80084503, 0x0)

122.225578ms ago: executing program 1 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xfff, 0x4)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r2 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1)
r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
syz_usb_disconnect(r3)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000280)={0x14, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0}, &(0x7f0000000740)={0x34, &(0x7f0000000500)={0x60, 0xa, 0x5, "97d105a316"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x6, 0x26, {0x26, 0x35, "3ead685ee213182c61ea54a012ec8212f7b635a594e7bdb67ab3fcddb798a5e47731f70f"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x0, 0x6, 0x6a, "0463fa1a1642df53c2352cfc1a0b6a0fbc951f7a0841641788a9a7dccad57c647c5cb63b268c7c57c921f63777c23bd2e2b82a7dd93ef7c5d16785341f4dfb788ff772177433f10342dbd8326adfafc53914687c29e085857c5a5cbec2a2a724ba5924f745e67e690d3e"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x45}})
ioctl$BLKFRASET(r1, 0x1264, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
ioctl$BLKSECDISCARD(r5, 0x127d, 0x0)

98.427329ms ago: executing program 2 (id=1477):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x4000, 0xeeef0000, 0xb, 0x40, 0x4, 0xf3, 0x0, 0xf, 0x6, 0x0, 0xf7, 0xd}, {0xf000, 0x5000, 0xf, 0xfa, 0x65, 0xa5, 0xf4, 0x5a, 0x0, 0x6e, 0x4, 0x7}, {0x0, 0x8080000, 0x0, 0x6, 0x3, 0xc, 0x6, 0xe, 0x9, 0x1, 0x80, 0xc}, {0xeeef0000, 0xeeee7000, 0x10, 0x2, 0x4, 0x13, 0x2, 0x3, 0x4, 0x7, 0x3, 0x2f}, {0xeeee8000, 0x8080000, 0xd, 0x7, 0x81, 0x6, 0xfd, 0x6, 0x0, 0xd, 0xf8, 0x1d}, {0x10000, 0xffff1000, 0x10, 0x0, 0x1, 0x10, 0x3, 0x1, 0xf9, 0x8, 0x8, 0x5}, {0x4000, 0x5000, 0x10, 0x4, 0x5, 0x7, 0x2, 0x3, 0x6, 0x5, 0xb, 0xdb}, {0x8000000, 0x10000, 0xe, 0xfb, 0x7, 0xf, 0x3, 0xc, 0x3, 0x80, 0xb6, 0x3b}, {0xdddd0000, 0x2}, {0x0, 0x9}, 0x60000012, 0x0, 0x2, 0xc0, 0xb, 0x400, 0x4000, [0x3c86, 0x6, 0x1ff, 0x9]})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x4283cafe)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(&(0x7f0000000240)='./file1\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
socket$packet(0x11, 0x3, 0x300)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
fstat(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setreuid(0x0, r9)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noxattr}, {@access_uid={'access', 0x3d, r9}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r9}}]}})
ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000140))
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

63.765199ms ago: executing program 2 (id=1478):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@private0, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r2=>0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.295371ms ago: executing program 2 (id=1479):
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)="dd4bc01f846d46f57820571923ad836eada375f8663b3b26d09f8dcbcb33ca4f9cfcefca27c353a3f3ff723b834b12a6578adf519d2311ed127ec9b5")

0s ago: executing program 2 (id=1480):
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xf423f, 0x5, 0xb, 0x0, 0x7, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x1, 0x81, 0x9f, 0x40000000002, 0x0, 0x6, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0xa00, 0xe})

kernel console output (not intermixed with test programs):

e found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   59.875752][  T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.884738][  T304] usb 2-1: config 0 descriptor??
[   59.890361][ T1530] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[   60.100182][  T304] logitech 0003:046D:C286.000B: unknown main item tag 0x6
[   60.108180][  T304] logitech 0003:046D:C286.000B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0
[   60.119784][  T304] logitech 0003:046D:C286.000B: no inputs found
[   60.300177][ T1530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.308797][ T1530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.317900][  T304] usb 2-1: USB disconnect, device number 9
[   60.398110][   T36] audit: type=1400 audit(2000000010.664:27137): avc:  denied  { getopt } for  pid=1553 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.480392][ T1558] netlink: 124 bytes leftover after parsing attributes in process `syz.2.397'.
[   60.585784][ T1563] SELinux: failed to load policy
[   60.652459][ T1563] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1318 sclass=netlink_xfrm_socket pid=1563 comm=syz.0.399
[   60.683323][ T1563] kvm: pic: non byte write
[   61.316853][  T304] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[   61.531054][  T304] usb 1-1: unable to get BOS descriptor or descriptor too short
[   61.539353][  T304] usb 1-1: unable to read config index 0 descriptor/start: -71
[   61.547023][  T304] usb 1-1: can't read configurations, error -71
[   62.098960][ T1624] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   62.106419][ T1624] rust_binder: Write failure EINVAL in pid:280
[   62.432302][ T1637] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[   62.949773][ T1653] overlayfs: failed to clone upperpath
[   63.512241][ T1667] fuse: Bad value for 'fd'
[   63.812051][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   63.812071][   T36] audit: type=1400 audit(2000000003.280:27148): avc:  denied  { bind } for  pid=1708 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.854169][   T36] audit: type=1400 audit(2000000003.320:27149): avc:  denied  { create } for  pid=1710 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   63.945512][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.952746][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.959907][ T1717] bridge_slave_0: entered allmulticast mode
[   63.966193][ T1717] bridge_slave_0: entered promiscuous mode
[   63.972724][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.979926][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.987095][ T1717] bridge_slave_1: entered allmulticast mode
[   63.993930][ T1717] bridge_slave_1: entered promiscuous mode
[   64.045916][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.053055][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.060387][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.067470][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.089175][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.096699][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.106744][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.113867][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.123968][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.131065][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.136828][  T304] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   64.161712][ T1717] veth0_vlan: entered promiscuous mode
[   64.173189][ T1717] veth1_macvtap: entered promiscuous mode
[   64.288009][  T304] usb 2-1: config 0 has an invalid interface number: 37 but max is 0
[   64.296223][  T304] usb 2-1: config 0 has no interface number 0
[   64.302370][  T304] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.313621][  T304] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.323529][  T304] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   64.332710][  T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.341583][  T304] usb 2-1: config 0 descriptor??
[   64.368998][   T36] audit: type=1400 audit(2000000003.840:27150): avc:  denied  { create } for  pid=1726 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   64.390980][   T36] audit: type=1400 audit(2000000003.850:27151): avc:  denied  { bind } for  pid=1726 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.751857][  T304] uclogic 0003:256C:006D.000C: interface is invalid, ignoring
[   64.764789][   T36] audit: type=1400 audit(2000000004.230:27152): avc:  denied  { execute } for  pid=1728 comm="syz.5.456" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.801279][ T1731] binder: Unknown parameter 'fsc�ntext'
[   64.989497][   T31] usb 2-1: USB disconnect, device number 10
[   65.528096][ T1773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.536538][ T1772] tipc: Disabling bearer <eth:syzkaller0>
[   65.550106][ T1774] kvm: pic: non byte write
[   65.647544][   T36] audit: type=1400 audit(2000000005.120:27153): avc:  denied  { bind } for  pid=1785 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.657423][ T1788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299
[   65.735820][ T1801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.478'.
[   65.755236][ T1801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[   65.781124][ T1799] rust_binder: Write failure EINVAL in pid:299
[   65.812847][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'.
[   65.828542][ T1810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   65.828578][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29
[   65.838215][ T1810] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   65.848762][ T1810] rust_binder: Read failure Err(EFAULT) in pid:29
[   65.925055][ T1814] input: syz0 as /devices/virtual/input/input7
[   65.938841][   T36] audit: type=1400 audit(2000000005.410:27154): avc:  denied  { read } for  pid=93 comm="acpid" name="event3" dev="devtmpfs" ino=520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   65.961425][   T36] audit: type=1400 audit(2000000005.410:27155): avc:  denied  { open } for  pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   65.984906][   T36] audit: type=1400 audit(2000000005.410:27156): avc:  denied  { ioctl } for  pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=520 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.020105][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.026522][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.336975][ T1839] tmpfs: Unknown parameter 'fowner'
[   66.353835][ T1843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'.
[   66.376803][ T1845] fuse: Bad value for 'fd'
[   66.382284][   T36] audit: type=1400 audit(2000000005.850:27157): avc:  denied  { watch } for  pid=1844 comm="syz.2.495" path="/187/file0" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.423123][ T1847] netlink: 'syz.2.496': attribute type 11 has an invalid length.
[   66.480902][ T1856] 
: renamed from bond_slave_0
[   66.542161][ T1860] binder: Bad value for 'stats'
[   66.602694][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.612375][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.620692][ T1866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'.
[   66.633214][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.644855][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.657270][ T1864] binder: Unknown parameter 'func'
[   66.763027][ T1874] overlayfs: conflicting options: nfs_export=on,index=off
[   66.846845][  T304] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   66.905916][ T1885] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   67.018048][  T304] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   67.026100][  T304] usb 2-1: config 0 has no interface number 0
[   67.032278][  T304] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   67.041985][  T304] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   67.051728][  T304] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[   67.060834][  T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.069641][  T304] usb 2-1: config 0 descriptor??
[   67.094467][ T1891] rust_binder: validate_parent_fixup: new_min_offset=81, sg_entry.length=0
[   67.094489][ T1891] rust_binder: Error while translating object.
[   67.103548][ T1891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   67.111533][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313
[   67.124002][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.275796][  T331] usb 2-1: USB disconnect, device number 11
[   67.386713][ T1897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'.
[   68.046833][  T304] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   68.087766][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   68.093987][  T587] Bluetooth: hci0: command 0x1003 tx timeout
[   68.100381][ T1816] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   68.125715][ T1931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'.
[   68.254924][ T1950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[   68.279288][ T1952] SELinux:  Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped).
[   68.715020][ T1957] 9pnet_fd: Insufficient options for proto=fd
[   68.837984][ T1962] cgroup: fork rejected by pids controller in /syz0
[   68.948360][ T2002] overlayfs: missing 'lowerdir'
[   69.111269][ T2007] overlayfs: unescaped trailing colons in lowerdir mount option.
[   69.119488][ T2007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.541'.
[   69.150507][ T2009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'.
[   69.306070][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   69.306089][   T36] audit: type=1400 audit(2000000008.770:27166): avc:  denied  { nlmsg_read } for  pid=2018 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   69.333035][   T36] audit: type=1400 audit(2000000008.770:27167): avc:  denied  { read } for  pid=2018 comm="syz.0.545" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   69.355782][   T36] audit: type=1400 audit(2000000008.770:27168): avc:  denied  { open } for  pid=2018 comm="syz.0.545" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   69.379392][   T36] audit: type=1400 audit(2000000008.790:27169): avc:  denied  { relabelfrom } for  pid=2018 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   69.399762][   T36] audit: type=1400 audit(2000000008.790:27170): avc:  denied  { relabelto } for  pid=2018 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   69.435202][ T2023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'.
[   69.492010][   T36] audit: type=1400 audit(2000000008.960:27171): avc:  denied  { create } for  pid=2024 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   69.532922][ T2028] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.308803][ T2042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.315437][ T2042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390
[   70.576924][   T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   70.654863][ T2048] tipc: Started in network mode
[   70.659888][ T2048] tipc: Node identity 9eb95c7f6a73, cluster identity 4711
[   70.667785][ T2048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.678808][ T2048] tipc: Disabling bearer <eth:syzkaller0>
[   70.700154][ T2055] fuse: Unknown parameter 'gro
'
[   70.748401][   T31] usb 1-1: Using ep0 maxpacket: 32
[   70.751425][ T2062] netlink: 'syz.5.563': attribute type 4 has an invalid length.
[   70.757822][   T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   70.761403][ T2062] __nla_validate_parse: 2 callbacks suppressed
[   70.761421][ T2062] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.563'.
[   70.763033][ T2062] tipc: Cannot configure node identity twice
[   70.770882][   T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   70.819407][   T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   70.837665][ T2067] syz.5.564 (2067): attempted to duplicate a private mapping with mremap.  This is not supported.
[   70.856874][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   70.866579][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   70.880388][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   70.893567][   T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   70.910015][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.938725][   T31] usb 1-1: config 0 descriptor??
[   71.077205][ T2091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.572'.
[   71.086404][ T2091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.572'.
[   71.201091][   T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   71.316895][  T304] usb 2-1: device descriptor read/64, error -71
[   71.336857][   T49] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   71.402891][   T36] audit: type=1400 audit(2000000010.870:27172): avc:  denied  { read write } for  pid=2043 comm="syz.0.555" name="lp0" dev="devtmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   71.404420][   T31] usb 1-1: USB disconnect, device number 22
[   71.426667][   T36] audit: type=1400 audit(2000000010.870:27173): avc:  denied  { open } for  pid=2043 comm="syz.0.555" path="/dev/usb/lp0" dev="devtmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   71.440872][   T31] usblp0: removed
[   71.508109][   T49] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[   71.518515][   T49] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   71.527669][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.543990][   T49] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1
[   71.597736][   T36] audit: type=1326 audit(2000000011.070:27174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2100 comm="syz.2.576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x0
[   71.622311][  T304] usb 2-1: unable to get BOS descriptor or descriptor too short
[   71.630390][  T304] usb 2-1: not running at top speed; connect to a high speed hub
[   71.639052][  T304] usb 2-1: config 1 has an invalid interface number: 138 but max is 0
[   71.647334][  T304] usb 2-1: config 1 has no interface number 0
[   71.653553][  T304] usb 2-1: config 1 interface 138 has no altsetting 0
[   71.661890][  T304] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[   71.671043][  T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.679107][  T304] usb 2-1: Product: syz
[   71.683292][  T304] usb 2-1: Manufacturer: syz
[   71.687939][  T304] usb 2-1: SerialNumber: syz
[   71.739065][ T2091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.572'.
[   71.755359][   T31] usb 6-1: USB disconnect, device number 2
[   71.852018][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.852051][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.858720][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.865281][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.871915][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.878457][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.885039][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.891854][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.898546][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.905436][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.912216][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.919473][ T2110] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.926948][  T304] usb 2-1: USB disconnect, device number 12
[   71.994000][  T494] udevd[494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.240600][   T36] audit: type=1400 audit(2000000011.710:27175): avc:  denied  { getopt } for  pid=2144 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   72.253061][ T2147] loop8: detected capacity change from 0 to 79
[   72.321016][ T2159] binder: Binderfs stats mode cannot be changed during a remount
[   72.329919][ T2161] binder: Binderfs stats mode cannot be changed during a remount
[   72.337855][  T304] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   72.363369][ T2163] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   72.489725][  T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   72.499600][  T304] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   72.509549][  T304] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.516507][ T2179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'.
[   72.524396][  T304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   72.540701][  T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.548970][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[   72.556684][  T304] usb 2-1: Product: syz
[   72.561224][  T304] usb 2-1: Manufacturer: syz
[   72.567005][  T304] usb 2-1: SerialNumber: syz
[   72.573566][  T304] hub 2-1:1.0: bad descriptor, ignoring hub
[   72.587853][  T304] hub 2-1:1.0: probe with driver hub failed with error -5
[   72.617141][ T2189] 8021q: VLANs not supported on vcan0
[   72.663443][ T2198] fuseblk: Bad value for 'fd'
[   72.696902][   T10] usb 1-1: device descriptor read/64, error -71
[   72.774562][  T304] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   72.831778][ T2204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'.
[   72.906885][   T49] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   72.936852][   T10] usb 1-1: device descriptor read/64, error -71
[   73.057985][   T49] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[   73.066099][   T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[   73.075053][   T49] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   73.086071][   T49] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   73.096832][   T49] usb 6-1: config 0 interface 0 has no altsetting 0
[   73.103500][   T49] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   73.112612][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.121409][   T49] usb 6-1: config 0 descriptor??
[   73.126663][ T2200] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[   73.137480][    T9] usb 2-1: USB disconnect, device number 13
[   73.144266][    T9] usblp0: removed
[   73.196878][   T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[   73.326924][   T10] usb 1-1: device descriptor read/64, error -71
[   73.536353][   T49] logitech 0003:046D:C286.000D: unknown main item tag 0x6
[   73.544353][   T49] logitech 0003:046D:C286.000D: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0
[   73.555964][   T49] logitech 0003:046D:C286.000D: no inputs found
[   73.576869][   T10] usb 1-1: device descriptor read/64, error -71
[   73.686981][   T10] usb usb1-port1: attempt power cycle
[   73.737807][  T304] usb 6-1: USB disconnect, device number 3
[   74.006578][ T2225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'.
[   74.026841][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[   74.057896][   T10] usb 1-1: device descriptor read/8, error -71
[   74.179768][ T2229] kvm: pic: non byte write
[   74.188051][   T10] usb 1-1: device descriptor read/8, error -71
[   74.339031][ T2240] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns
[   74.358793][ T2246] netlink: 'syz.1.623': attribute type 21 has an invalid length.
[   74.367797][ T2246] netlink: 388 bytes leftover after parsing attributes in process `syz.1.623'.
[   74.426915][   T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[   74.448560][   T10] usb 1-1: device descriptor read/8, error -71
[   74.504794][ T2263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.626'.
[   74.577832][   T10] usb 1-1: device descriptor read/8, error -71
[   74.586411][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   74.586431][   T36] audit: type=1400 audit(2000000014.050:27182): avc:  denied  { write } for  pid=2265 comm="syz.5.628" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.636255][   T36] audit: type=1400 audit(2000000014.050:27183): avc:  denied  { add_name } for  pid=2265 comm="syz.5.628" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.666822][   T36] audit: type=1400 audit(2000000014.050:27184): avc:  denied  { create } for  pid=2265 comm="syz.5.628" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   74.692686][ T2273] netlink: 37 bytes leftover after parsing attributes in process `syz.2.631'.
[   74.698439][   T36] audit: type=1400 audit(2000000014.050:27185): avc:  denied  { associate } for  pid=2265 comm="syz.5.628" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   74.707049][   T10] usb usb1-port1: unable to enumerate USB device
[   74.853648][ T2293] kvm: pic: non byte write
[   75.032527][ T2318] FAT-fs (rnullb0): bogus number of reserved sectors
[   75.039421][ T2318] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   75.188186][   T36] audit: type=1400 audit(2000008720.494:27186): avc:  denied  { read } for  pid=2329 comm="syz.5.653" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   75.212394][   T36] audit: type=1400 audit(2000008720.494:27187): avc:  denied  { open } for  pid=2329 comm="syz.5.653" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   75.476292][ T2342] fuse: Unknown parameter '/dev/net/tun'
[   75.544140][ T2346] cgroup: Unknown subsys name '#'
[   75.936811][    T9] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[   76.088015][    T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   76.099240][    T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   76.110382][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   76.117280][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   76.126571][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.136371][    T9] usb 1-1: config 0 descriptor??
[   76.141995][ T2362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   76.169289][ T2372] FAT-fs (rnullb0): bogus number of reserved sectors
[   76.176536][ T2372] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   76.230730][   T36] audit: type=1400 audit(2000008977.539:27188): avc:  denied  { mount } for  pid=2373 comm="syz.2.666" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   76.254235][ T2374] futex_wake_op: syz.2.666 tries to shift op by 144; fix this program
[   76.303951][   T36] audit: type=1400 audit(2000008977.609:27189): avc:  denied  { write } for  pid=2375 comm="syz.5.667" path="socket:[18694]" dev="sockfs" ino=18694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.351006][ T2362] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   76.359598][ T2362] overlayfs: missing 'lowerdir'
[   76.568812][    T9] logitech 0003:046D:C286.000E: unknown main item tag 0x6
[   76.577037][    T9] logitech 0003:046D:C286.000E: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0
[   76.588564][    T9] logitech 0003:046D:C286.000E: no inputs found
[   76.769221][    T9] usb 1-1: USB disconnect, device number 27
[   77.217676][   T36] audit: type=1400 audit(2000009490.531:27190): avc:  denied  { getopt } for  pid=2412 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   77.237595][ T2413] x_tables: duplicate underflow at hook 1
[   77.265450][   T36] audit: type=1326 audit(2000009490.571:27191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   77.301945][ T2419] overlay: Unknown parameter '/'
[   77.309636][ T2423] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.496660][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   77.658068][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   77.666155][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[   77.674708][    T9] usb 6-1: config 1 has an invalid interface number: 121 but max is 0
[   77.682940][    T9] usb 6-1: config 1 has no interface number 0
[   77.689071][    T9] usb 6-1: config 1 interface 121 has no altsetting 0
[   77.697356][    T9] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51
[   77.706452][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.714535][    T9] usb 6-1: Product: syz
[   77.718775][    T9] usb 6-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏
[   77.736634][    T9] usb 6-1: SerialNumber: syz
[   77.880957][ T2433] overlay: Unknown parameter 'volatile:/'
[   77.913840][ T2436] __nla_validate_parse: 3 callbacks suppressed
[   77.913856][ T2436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'.
[   77.950927][    T9] usb_ehset_test 6-1:1.121: probe with driver usb_ehset_test failed with error -32
[   77.961218][    T9] usb 6-1: USB disconnect, device number 4
[   78.040881][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[   78.047521][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[   78.276665][   T49] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[   78.357503][ T2467] rust_binder: Error while translating object.
[   78.357532][ T2467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   78.363814][ T2467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461
[   78.432652][   T49] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.453195][   T49] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   78.476890][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[   78.484592][   T49] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[   78.494572][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.504120][   T49] usb 2-1: config 0 descriptor??
[   78.514553][ T2443] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   78.603340][ T2486] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   78.603386][ T2486] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   78.611652][ T2486] rust_binder: Read failure Err(EFAULT) in pid:171
[   78.923544][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.942047][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.946626][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   78.949515][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.965240][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.975603][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.983047][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.990545][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   78.997900][   T49] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[   79.005861][   T49] logitech 0003:046D:CA04.000F: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0
[   79.017561][   T49] logitech 0003:046D:CA04.000F: no inputs found
[   79.041214][ T2508] tmpfs: Bad value for 'uid'
[   79.045900][ T2508] tmpfs: Bad value for 'uid'
[   79.096675][    T9] usb 6-1: device descriptor read/64, error -71
[   79.336684][    T9] usb 6-1: device descriptor read/64, error -71
[   79.336684][   T49] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   79.466635][   T49] usb 1-1: device descriptor read/64, error -71
[   79.586637][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   79.706627][   T49] usb 1-1: device descriptor read/64, error -71
[   79.716767][    T9] usb 6-1: device descriptor read/64, error -71
[   79.743908][ T2523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=2523 comm=syz.2.718
[   79.808084][ T2525] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[   79.860016][   T36] kauditd_printk_skb: 67 callbacks suppressed
[   79.860036][   T36] audit: type=1400 audit(2000010517.172:27259): avc:  denied  { create } for  pid=2535 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[   79.946600][   T49] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   79.956626][    T9] usb 6-1: device descriptor read/64, error -71
[   80.066707][    T9] usb usb6-port1: attempt power cycle
[   80.086628][   T49] usb 1-1: device descriptor read/64, error -71
[   80.086646][  T567] Bluetooth: hci0: command 0x1003 tx timeout
[   80.086686][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.326653][   T49] usb 1-1: device descriptor read/64, error -71
[   80.406646][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   80.427748][    T9] usb 6-1: device descriptor read/8, error -71
[   80.436782][   T49] usb usb1-port1: attempt power cycle
[   80.534061][ T2558] 9pnet_fd: Insufficient options for proto=fd
[   80.557965][    T9] usb 6-1: device descriptor read/8, error -71
[   80.659283][ T2571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'.
[   80.776588][   T49] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   80.796611][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   80.817657][   T49] usb 1-1: device descriptor read/8, error -71
[   80.827632][    T9] usb 6-1: device descriptor read/8, error -71
[   80.947817][   T49] usb 1-1: device descriptor read/8, error -71
[   80.957844][    T9] usb 6-1: device descriptor read/8, error -71
[   81.043840][   T31] usb 2-1: USB disconnect, device number 14
[   81.066794][    T9] usb usb6-port1: unable to enumerate USB device
[   81.186609][   T49] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   81.212613][   T49] usb 1-1: device descriptor read/8, error -71
[   81.347808][   T49] usb 1-1: device descriptor read/8, error -71
[   81.456654][   T49] usb usb1-port1: unable to enumerate USB device
[   81.466664][   T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   81.596632][   T31] usb 2-1: device descriptor read/64, error -71
[   81.749847][ T2587] binder: Binderfs stats mode cannot be changed during a remount
[   81.836571][   T31] usb 2-1: device descriptor read/64, error -71
[   81.937987][   T36] audit: type=1400 audit(2000011287.249:27260): avc:  denied  { accept } for  pid=2602 comm="syz.2.747" path="socket:[19543]" dev="sockfs" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.997694][ T2611] tipc: Can't bind to reserved service type 2
[   82.086516][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   82.106854][ T2617] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.228192][   T31] usb 2-1: device descriptor read/64, error -71
[   82.246558][   T36] audit: type=1326 audit(2000011287.549:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2626 comm="syz.5.755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2df9d8e929 code=0x0
[   82.343627][   T36] audit: type=1326 audit(2000011543.646:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2626 comm="syz.5.755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2df9d8e929 code=0x0
[   82.365032][ T2631] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   82.375313][ T2631] rust_binder: Write failure EINVAL in pid:492
[   82.445967][   T36] audit: type=1400 audit(2000011543.746:27263): avc:  denied  { connect } for  pid=2626 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   82.506534][   T31] usb 2-1: device descriptor read/64, error -71
[   82.616628][   T31] usb usb2-port1: attempt power cycle
[   82.874916][ T2644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'.
[   82.956541][   T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   82.977802][   T31] usb 2-1: device descriptor read/8, error -71
[   83.107531][   T31] usb 2-1: device descriptor read/8, error -71
[   83.233030][ T2655] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   83.240956][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.248288][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.255666][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.262986][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.271418][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.278960][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.286221][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.293593][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.300964][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.308457][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.315725][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.323036][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.330294][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.337716][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.345052][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.346531][   T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   83.359775][  T539] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   83.360092][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.374586][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.381908][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.387711][   T31] usb 2-1: device descriptor read/8, error -71
[   83.395382][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.402686][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.410249][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.418044][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.425367][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.433027][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.441016][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.448698][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.456101][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.463984][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.472126][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.479953][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.487828][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.495273][ T2655] overlay: filesystem on ./bus not supported as upperdir
[   83.516480][  T539] usb 6-1: Using ep0 maxpacket: 16
[   83.526028][   T31] usb 2-1: device descriptor read/8, error -71
[   83.533664][  T539] usb 6-1: config 0 has no interfaces?
[   83.547423][ T2668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'.
[   83.547767][  T539] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.567923][  T539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.576409][  T539] usb 6-1: Product: syz
[   83.580603][  T539] usb 6-1: Manufacturer: syz
[   83.585206][  T539] usb 6-1: SerialNumber: syz
[   83.596099][  T539] usb 6-1: config 0 descriptor??
[   83.646579][   T31] usb usb2-port1: unable to enumerate USB device
[   83.803040][    T9] usb 6-1: USB disconnect, device number 9
[   83.809023][  T304] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[   83.967482][  T304] usb 1-1: config 1 interface 0 has no altsetting 0
[   83.975557][  T304] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40
[   83.984761][  T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.992974][  T304] usb 1-1: Product: Р
[   83.997174][  T304] usb 1-1: Manufacturer: 澐쀕洩ꢰ摺⤒쮉⪀悾冭냗ݥ씱ಊ掯雼덈ᄋ鏊㟭዇奭ʞ
[   84.007905][  T304] usb 1-1: SerialNumber:  
[   84.216207][ T2698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'.
[   84.238507][  T304] usbhid 1-1:1.0: can't add hid device: -71
[   84.244601][  T304] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   84.259629][  T304] usb 1-1: USB disconnect, device number 32
[   84.343144][ T2715] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   84.576426][   T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   84.596299][  T539] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[   84.726340][   T31] usb 2-1: Using ep0 maxpacket: 32
[   84.732921][   T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   84.741522][   T31] usb 2-1: config 0 has no interface number 0
[   84.747739][   T31] usb 2-1: config 0 interface 184 has no altsetting 0
[   84.755430][  T539] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   84.766495][  T539] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   84.779441][  T539] usb 6-1: config 0 interface 0 has no altsetting 0
[   84.786109][  T539] usb 6-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00
[   84.788890][ T2720] rust_binder: Error while translating object.
[   84.795322][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   84.795556][ T2720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   84.801583][  T539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.811260][ T2720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:505
[   84.820187][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.846871][  T539] usb 6-1: config 0 descriptor??
[   84.852167][   T31] usb 2-1: Product: syz
[   84.856442][   T31] usb 2-1: Manufacturer: syz
[   84.856732][ T2723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'.
[   84.861059][   T31] usb 2-1: SerialNumber: syz
[   84.862526][  T539] usbhid 6-1:0.0: can't add hid device: -22
[   84.880853][   T31] usb 2-1: config 0 descriptor??
[   84.886647][  T539] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[   84.895146][   T31] smsc75xx v1.0.0
[   85.496047][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   85.507118][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   85.563849][  T539] usb 6-1: USB disconnect, device number 10
[   85.618936][   T36] audit: type=1326 audit(2000011546.927:27264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2df9d8e929 code=0x0
[   85.915459][ T2780] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 192, size: 184)
[   85.915490][ T2780] rust_binder: Error while translating object.
[   85.926306][ T2780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   85.932562][ T2780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524
[   85.954712][ T2783] binder: Unknown parameter '�'
[   86.056293][ T2806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'.
[   86.100879][   T36] audit: type=1400 audit(2000012059.408:27265): avc:  denied  { mount } for  pid=2816 comm="syz.0.819" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   86.176732][ T2827] sit0: entered promiscuous mode
[   86.183076][ T2827] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[   86.190974][ T2827] netlink: 1 bytes leftover after parsing attributes in process `syz.2.824'.
[   86.205436][   T36] audit: type=1400 audit(2000012315.507:27266): avc:  denied  { create } for  pid=2826 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   86.241773][ T2830] fuse: Unknown parameter 'rkotm��.�(�ode'
[   86.263703][ T2833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.826'.
[   86.336142][  T539] usb 1-1: new low-speed USB device number 33 using dummy_hcd
[   86.406856][ T2849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.834'.
[   86.451029][ T2852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.835'.
[   86.490531][   T36] audit: type=1326 audit(2000012571.799:27267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.497400][  T539] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.520735][   T36] audit: type=1326 audit(2000012571.829:27268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.536155][  T539] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   86.550028][   T36] audit: type=1326 audit(2000012571.829:27269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.583322][   T36] audit: type=1326 audit(2000012571.829:27270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.606807][  T539] usb 1-1: config 0 interface 0 has no altsetting 0
[   86.606853][  T539] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   86.606900][  T539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.633951][   T36] audit: type=1326 audit(2000012571.829:27271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.659731][   T36] audit: type=1326 audit(2000012571.829:27272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.683946][  T539] usb 1-1: config 0 descriptor??
[   86.689590][ T2818] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   86.696896][   T36] audit: type=1326 audit(2000012571.829:27273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x7ffc0000
[   86.932102][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[   86.943193][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[   86.953439][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[   86.960085][ T2879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'.
[   86.966015][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   86.986480][   T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[   87.000201][   T31] usb 2-1: USB disconnect, device number 19
[   87.008923][ T2881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2881 comm=syz.2.845
[   87.081431][ T2888] 9pnet: p9_errstr2errno: server reported unknown error 18446744073
[   87.123066][  T539] logitech 0003:046D:C286.0010: unknown main item tag 0x6
[   87.131054][  T539] logitech 0003:046D:C286.0010: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0
[   87.155480][  T539] logitech 0003:046D:C286.0010: no inputs found
[   87.338764][   T31] usb 1-1: USB disconnect, device number 33
[   87.356807][ T2896] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   87.379715][ T2901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.463233][ T2905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'.
[   87.558771][ T2914] tipc: Started in network mode
[   87.563742][ T2914] tipc: Node identity 76af27a01b48, cluster identity 4711
[   87.570990][ T2914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.586944][ T2913] tipc: Disabling bearer <eth:syzkaller0>
[   88.146139][   T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   88.296062][   T31] usb 2-1: Using ep0 maxpacket: 32
[   88.302500][   T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   88.312789][   T31] usb 2-1: config 0 has no interface number 0
[   88.319395][   T31] usb 2-1: config 0 interface 184 has no altsetting 0
[   88.328576][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   88.338502][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.346822][   T31] usb 2-1: Product: syz
[   88.351205][   T31] usb 2-1: Manufacturer: syz
[   88.361543][   T31] usb 2-1: SerialNumber: syz
[   88.411304][   T31] usb 2-1: config 0 descriptor??
[   88.422438][   T31] smsc75xx v1.0.0
[   88.742801][ T2955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.766414][ T2955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.023237][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   89.034184][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   89.378822][ T2970] __nla_validate_parse: 1 callbacks suppressed
[   89.378849][ T2970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.875'.
[   89.517577][ T2987] 9pnet_fd: Insufficient options for proto=fd
[   89.542724][ T2991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245
[   89.615925][ T2997] rust_binder: Write failure EFAULT in pid:248
[   89.915860][  T331] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   90.076917][  T331] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   90.088102][  T331] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC
[   90.099847][  T331] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 108
[   90.110115][  T331] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   90.119224][  T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.128483][ T3003] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   90.344122][ T3003] FAT-fs (rnullb0): bogus number of reserved sectors
[   90.350989][ T3003] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   90.361496][    T9] usb 1-1: USB disconnect, device number 34
[   90.446433][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[   90.459735][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[   90.470409][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[   90.480012][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   90.489683][   T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[   90.504778][   T31] usb 2-1: USB disconnect, device number 20
[   90.682896][ T3050] overlayfs: failed to clone upperpath
[   91.011086][ T3072] binder: Bad value for 'max'
[   91.101289][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   91.101309][   T36] audit: type=1400 audit(2000013600.411:27296): avc:  denied  { mounton } for  pid=3079 comm="syz.1.916" path="/150/file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   91.130270][ T3081] fuse: Bad value for 'group_id'
[   91.135250][ T3081] fuse: Bad value for 'group_id'
[   91.495320][ T3101] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.496224][ T3101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.925'.
[   91.593398][   T36] audit: type=1400 audit(2000013856.898:27297): avc:  denied  { create } for  pid=3115 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   92.187701][ T3136] tipc: Cannot configure node identity twice
[   92.224084][   T36] audit: type=1400 audit(2000014113.526:27298): avc:  denied  { accept } for  pid=3142 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   92.505732][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   92.658314][   T10] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[   92.667482][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.675495][   T10] usb 2-1: Product: syz
[   92.679716][   T10] usb 2-1: Manufacturer: syz
[   92.684360][   T10] usb 2-1: SerialNumber: syz
[   92.891127][ T3147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.899777][ T3147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.938582][   T10] usb 2-1: Found UVC 0.00 device syz (093a:2476)
[   92.945075][   T10] usb 2-1: No valid video chain found.
[   92.951433][   T10] usb 2-1: USB disconnect, device number 21
[   93.024498][   T36] audit: type=1400 audit(2000014114.326:27299): avc:  denied  { write } for  pid=3161 comm="syz.0.946" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   93.067766][ T3165] binder: Unknown parameter 'fscontext?}'
[   93.074436][ T3165] @: renamed from vlan0 (while UP)
[   93.345681][  T306] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   93.387236][ T3188] tipc: Started in network mode
[   93.396727][ T3188] tipc: Node identity 4, cluster identity 4711
[   93.410486][ T3188] tipc: Node number set to 4
[   93.495696][  T306] usb 6-1: Using ep0 maxpacket: 8
[   93.503983][    T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   93.516006][    T9] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   93.522738][  T306] usb 6-1: unable to get BOS descriptor or descriptor too short
[   93.546951][  T306] usb 6-1: config 4 has an invalid interface number: 232 but max is 0
[   93.555184][  T306] usb 6-1: config 4 has no interface number 0
[   93.572609][  T306] usb 6-1: config 4 interface 232 has no altsetting 0
[   93.581259][  T306] usb 6-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8a.91
[   93.590598][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.610520][  T306] usb 6-1: Product: syz
[   93.614772][  T306] usb 6-1: Manufacturer: syz
[   93.619617][  T306] usb 6-1: SerialNumber: syz
[   93.685694][   T10] usb 1-1: new low-speed USB device number 35 using dummy_hcd
[   93.836064][   T10] usb 1-1: too many configurations: 13, using maximum allowed: 8
[   93.844800][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.856577][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   93.867747][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   93.878793][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.893759][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   93.905041][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   93.910683][  T306] ums-freecom 6-1:4.232: USB Mass Storage device detected
[   93.912890][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.930167][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   93.941422][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   93.949128][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.960492][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   93.971778][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   93.979447][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.991287][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   93.995752][  T306] usb 6-1: USB disconnect, device number 12
[   94.002454][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.015700][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.026898][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   94.037902][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.045339][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.056717][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   94.067771][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.075209][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.086368][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   94.097128][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.128176][   T36] audit: type=1400 audit(2000014627.436:27300): avc:  denied  { block_suspend } for  pid=3219 comm="syz.1.966" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   94.236342][ T3229] syz.1.968 uses obsolete (PF_INET,SOCK_PACKET)
[   94.444261][ T3243] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.444857][ T3243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281
[   94.660777][   T12] tipc: Subscription rejected, illegal request
[   94.761688][   T36] audit: type=1400 audit(2000000256.385:27301): avc:  denied  { getopt } for  pid=3268 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   94.996445][ T3275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.996950][ T3275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304
[   95.132420][   T36] audit: type=1400 audit(2000000256.755:27302): avc:  denied  { shutdown } for  pid=3276 comm="syz.5.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   96.030128][ T3300] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.030741][ T3300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315
[   96.092820][ T3302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[   96.102030][ T3302] rust_binder: Error while translating object.
[   96.114340][ T3302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   96.120583][ T3302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317
[   96.227791][ T3312] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.290275][ T3314] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.395806][ T3323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.449114][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice=2a.00
[   96.464362][   T10] usb 1-1: New USB device strings: Mfr=160, Product=0, SerialNumber=0
[   96.474780][   T10] usb 1-1: config 0 descriptor??
[   96.480749][   T10] usb 1-1: can't set config #0, error -71
[   96.491083][   T10] usb 1-1: USB disconnect, device number 35
[   96.525235][ T3323] tipc: Disabling bearer <eth:syzkaller0>
[   96.612352][ T3330] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.618320][ T3330] netlink: 'syz.5.1005': attribute type 4 has an invalid length.
[   96.955600][   T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   97.106671][   T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   97.115449][   T10] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[   97.125837][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   97.134839][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12147, setting to 1024
[   97.146150][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[   97.157360][   T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   97.166767][   T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   97.175293][   T10] usb 1-1: Product: syz
[   97.179783][   T10] usb 1-1: Manufacturer: syz
[   97.185637][ T3334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   97.193560][   T10] cdc_wdm 1-1:1.0: skipping garbage
[   97.198964][   T10] cdc_wdm 1-1:1.0: skipping garbage
[   97.204264][   T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[   97.395983][   T10] usb 1-1: USB disconnect, device number 36
[   98.005582][  T306] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   98.038404][ T3357] 9pnet: Could not find request transport: f0�Td
[   98.045633][   T36] audit: type=1400 audit(2000001027.683:27303): avc:  denied  { setattr } for  pid=3356 comm="syz.0.1015" name="" dev="pipefs" ino=23248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   98.079897][ T3360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   98.079929][ T3360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:638
[   98.089552][ T3360] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   98.098735][ T3360] rust_binder: Read failure Err(EFAULT) in pid:638
[   98.131140][ T3365] tmpfs: Unknown parameter '�����'
[   98.160176][  T306] usb 6-1: Using ep0 maxpacket: 16
[   98.166819][  T306] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   98.175691][  T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.191031][  T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.202276][  T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.211742][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.220053][  T306] usb 6-1: Product: syz
[   98.224497][  T306] usb 6-1: Manufacturer: syz
[   98.229531][  T306] usb 6-1: SerialNumber: syz
[   98.360336][ T3383] tipc: Invalid UDP bearer configuration
[   98.360363][ T3383] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   98.399046][   T36] audit: type=1400 audit(2000001284.033:27304): avc:  denied  { map } for  pid=3388 comm="syz.1.1027" path="socket:[23963]" dev="sockfs" ino=23963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.422461][   T36] audit: type=1400 audit(2000001284.033:27305): avc:  denied  { read } for  pid=3388 comm="syz.1.1027" path="socket:[23963]" dev="sockfs" ino=23963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.491343][   T36] audit: type=1400 audit(2000001284.123:27306): avc:  denied  { setopt } for  pid=3390 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   98.615517][  T539] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   98.647596][  T306] usb 6-1: 0:2 : does not exist
[   98.775503][  T539] usb 1-1: Using ep0 maxpacket: 32
[   98.785195][   T36] audit: type=1400 audit(2000001540.409:27307): avc:  denied  { execute } for  pid=3403 comm="syz.1.1034" path="/182/cpu.stat" dev="tmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   98.809661][  T539] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.820977][  T539] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.835951][  T539] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   98.845115][  T539] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   98.853832][  T539] usb 1-1: Product: syz
[   98.858077][  T539] usb 1-1: Manufacturer: syz
[   98.865726][  T539] hub 1-1:4.0: USB hub found
[   98.944820][ T3415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1039'.
[   99.062011][  T306] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[   99.071945][  T539] hub 1-1:4.0: 1 port detected
[   99.088418][  T306] usb 6-1: USB disconnect, device number 13
[   99.101130][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   99.479317][  T539] hub 1-1:4.0: set hub depth failed
[   99.492434][  T539] usb 1-1: USB disconnect, device number 37
[   99.531890][ T3429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.585879][ T3436] futex_wake_op: syz.0.1048 tries to shift op by -1; fix this program
[   99.703373][ T3430] tipc: Disabling bearer <eth:syzkaller0>
[   99.729377][ T3455] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.736425][ T3455] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 95)
[   99.737949][   T36] audit: type=1326 audit(2000002053.364:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.2.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x0
[   99.742978][ T3455] rust_binder: Error while translating object.
[   99.790344][ T3455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.796648][ T3455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[   99.912641][ T3471] fuse: Unknown parameter '�00000000000000000004'
[   99.997418][ T3474] binder: Unknown parameter '�'
[  100.033116][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.045137][ T3483] /dev/rnullb0: Can't open blockdev
[  100.047925][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.050508][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.057480][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.072424][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.072451][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.075566][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.082544][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.085807][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.100264][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.108720][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.115265][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.121920][ T3487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:693
[  100.123705][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.128917][ T3487] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  100.138886][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.144924][ T3487] rust_binder: Read failure Err(EFAULT) in pid:693
[  100.152481][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.160857][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.166959][  T496] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  100.175081][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.182145][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.189501][ T3489] binder: Unknown parameter 'fscontext?}'
[  100.198212][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.204365][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.211780][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.224695][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.232170][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.236813][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.240873][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.245314][ T3479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  100.257701][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  100.263821][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.275567][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.282179][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.289053][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.295811][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.302429][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.309841][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.325754][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.333600][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.340446][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.347134][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.353610][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.355466][  T496] usb 6-1: Using ep0 maxpacket: 16
[  100.360425][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.368044][  T496] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  100.371905][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.378618][  T496] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.387179][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.399698][  T496] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.403802][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.419138][  T496] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.434856][  T496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.442954][  T496] usb 6-1: Product: syz
[  100.447415][  T496] usb 6-1: Manufacturer: syz
[  100.452060][  T496] usb 6-1: SerialNumber: syz
[  100.463804][   T36] audit: type=1400 audit(2000002566.091:27309): avc:  denied  { remount } for  pid=3495 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  100.594855][ T3512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1073'.
[  100.604696][ T3512] overlayfs: failed to clone upperpath
[  100.664590][   T36] audit: type=1400 audit(2000002566.291:27310): avc:  denied  { name_bind } for  pid=3518 comm="syz.2.1076" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  100.862851][  T496] usb 6-1: 0:2 : does not exist
[  101.270609][  T496] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  101.282564][  T496] usb 6-1: USB disconnect, device number 14
[  101.304212][   T36] audit: type=1400 audit(2000002822.930:27311): avc:  denied  { map } for  pid=3524 comm="syz.0.1079" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.344794][   T36] audit: type=1400 audit(2000002822.970:27312): avc:  denied  { execute_no_trans } for  pid=3527 comm="syz.0.1080" path="/235/file1" dev="tmpfs" ino=1327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.416724][ T3534] input: syz1 as /devices/virtual/input/input11
[  101.493525][ T3536] kvm: kvm [3535]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000e)
[  101.805557][ T3551] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.806552][ T3551] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21)
[  101.813265][ T3551] rust_binder: Error while translating object.
[  101.826508][ T3551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  101.832984][ T3551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369
[  101.902180][ T3564] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.912342][ T3564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374
[  102.245507][  T496] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  102.262412][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  102.325555][  T567] Bluetooth: hci0: command 0x1003 tx timeout
[  102.325995][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  102.425487][  T496] usb 6-1: Using ep0 maxpacket: 16
[  102.430726][    T9] usb 1-1: Using ep0 maxpacket: 16
[  102.436997][  T496] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  102.445820][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.456762][  T496] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.466910][  T496] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.475821][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  102.488882][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  102.498097][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.507696][  T496] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  102.516942][    T9] usb 1-1: config 0 descriptor??
[  102.521964][  T496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.530054][  T496] usb 6-1: Product: syz
[  102.535058][  T496] usb 6-1: Manufacturer: syz
[  102.539752][  T496] usb 6-1: SerialNumber: syz
[  102.951011][  T496] usb 6-1: 0:2 : does not exist
[  102.952590][ T3594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3594 comm=syz.2.1106
[  103.257745][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  103.302958][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  103.310582][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  103.320875][    T9] usb 1-1: USB disconnect, device number 38
[  103.357557][  T496] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  103.370675][  T496] usb 6-1: USB disconnect, device number 15
[  103.378138][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.876185][ T3618] binder: Bad value for 'max'
[  103.923084][ T3626] fuse: Bad value for 'user_id'
[  103.928284][ T3626] fuse: Bad value for 'user_id'
[  103.934543][ T3626] overlayfs: failed to resolve './file0': -2
[  103.958763][ T3622] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  104.019545][ T3614] 9pnet_fd: Insufficient options for proto=fd
[  104.057753][ T3640] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.445341][  T539] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  104.486058][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  104.486078][   T36] audit: type=1400 audit(2000003594.115:27316): avc:  denied  { audit_write } for  pid=3643 comm="syz.2.1125" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  104.605268][  T539] usb 6-1: Using ep0 maxpacket: 16
[  104.615893][  T539] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  104.624633][  T539] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.634943][  T539] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.645492][  T539] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.654560][  T539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.662638][  T539] usb 6-1: Product: syz
[  104.666881][  T539] usb 6-1: Manufacturer: syz
[  104.671506][  T539] usb 6-1: SerialNumber: syz
[  104.945194][  T496] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  105.075192][  T496] usb 1-1: device descriptor read/64, error -71
[  105.080197][  T539] usb 6-1: 0:2 : does not exist
[  105.285141][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  105.285176][  T567] Bluetooth: hci0: command 0x1003 tx timeout
[  105.315233][  T496] usb 1-1: device descriptor read/64, error -71
[  105.485266][  T539] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  105.502656][  T539] usb 6-1: USB disconnect, device number 16
[  105.512701][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  105.545149][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  105.555119][  T496] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  105.685336][  T496] usb 1-1: device descriptor read/64, error -71
[  105.695109][    T9] usb 2-1: Using ep0 maxpacket: 16
[  105.701476][    T9] usb 2-1: config 0 has no interfaces?
[  105.708709][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.717848][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.725878][    T9] usb 2-1: Product: syz
[  105.730094][    T9] usb 2-1: Manufacturer: syz
[  105.734691][    T9] usb 2-1: SerialNumber: syz
[  105.740076][    T9] usb 2-1: config 0 descriptor??
[  105.925123][  T496] usb 1-1: device descriptor read/64, error -71
[  105.946939][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'.
[  105.946955][   T36] audit: type=1400 audit(2000003595.575:27317): avc:  denied  { nlmsg_read } for  pid=3658 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.957624][  T539] usb 2-1: USB disconnect, device number 22
[  106.035248][  T496] usb usb1-port1: attempt power cycle
[  106.374985][  T496] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  106.397397][  T496] usb 1-1: device descriptor read/8, error -71
[  106.502213][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.526168][  T496] usb 1-1: device descriptor read/8, error -71
[  106.685028][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  106.764978][  T496] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  106.786152][  T496] usb 1-1: device descriptor read/8, error -71
[  106.834942][    T9] usb 6-1: Using ep0 maxpacket: 16
[  106.841304][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  106.850252][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.860399][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.870888][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.880049][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.888097][    T9] usb 6-1: Product: syz
[  106.892265][    T9] usb 6-1: Manufacturer: syz
[  106.896936][    T9] usb 6-1: SerialNumber: syz
[  106.915965][  T496] usb 1-1: device descriptor read/8, error -71
[  107.024990][  T496] usb usb1-port1: unable to enumerate USB device
[  107.303800][    T9] usb 6-1: 0:2 : does not exist
[  107.647528][   T36] audit: type=1326 audit(2000003597.275:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc1b8e929 code=0x0
[  107.711152][    T9] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  107.727949][ T3741] SELinux:  Context ��o� is not valid (left unmapped).
[  107.728798][    T9] usb 6-1: USB disconnect, device number 17
[  107.736145][   T36] audit: type=1400 audit(2000003597.365:27319): avc:  denied  { create } for  pid=3740 comm="syz.0.1158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD
[  107.763881][   T36] audit: type=1400 audit(2000003597.365:27320): avc:  denied  { associate } for  pid=3740 comm="syz.0.1158" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=C0B26F04FD
[  107.766475][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  107.791880][   T36] audit: type=1400 audit(2000003597.365:27321): avc:  denied  { write open } for  pid=3740 comm="syz.0.1158" path="/251/file0" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD
[  107.852968][   T36] audit: type=1400 audit(2000003597.475:27322): avc:  denied  { unlink } for  pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD
[  107.877340][   T36] audit: type=1400 audit(2000003597.485:27323): avc:  denied  { read write } for  pid=3743 comm="syz.0.1159" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.901032][   T36] audit: type=1400 audit(2000003597.485:27324): avc:  denied  { open } for  pid=3743 comm="syz.0.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.924602][   T36] audit: type=1400 audit(2000003597.485:27325): avc:  denied  { ioctl } for  pid=3743 comm="syz.0.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  108.094814][  T539] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  108.239089][ T3746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.239501][ T3746] rust_binder: Error while translating object.
[  108.246089][  T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.246353][ T3746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  108.252585][  T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.263490][ T3746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430
[  108.273084][  T539] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  108.300836][  T539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.309708][  T539] usb 1-1: config 0 descriptor??
[  108.355757][ T3756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.528209][ T3765] syzkaller0: entered promiscuous mode
[  108.542337][ T3765] syzkaller0: entered allmulticast mode
[  108.574852][  T567] Bluetooth: hci0: command 0x1003 tx timeout
[  108.574904][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  108.594712][  T306] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  108.615493][ T3780] nsfs: Unknown parameter 'trans'
[  108.744735][  T306] usb 6-1: Using ep0 maxpacket: 16
[  108.753867][  T539] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0
[  108.761779][  T539] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0
[  108.769631][  T539] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0
[  108.769715][  T306] usb 6-1: config 1 has an invalid interface number: 4 but max is 2
[  108.789323][  T539] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  108.806151][  T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.819179][  T306] usb 6-1: config 1 has no interface number 1
[  108.825530][  T306] usb 6-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30
[  108.837852][  T306] usb 6-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102
[  108.856034][  T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53
[  108.865220][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.873259][  T306] usb 6-1: Product: syz
[  108.877535][  T306] usb 6-1: Manufacturer: syz
[  108.882149][  T306] usb 6-1: SerialNumber: syz
[  109.035720][  T539] usb 1-1: USB disconnect, device number 43
[  109.139185][ T3756] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  109.230531][ T3822] /dev/rnullb0: Can't open blockdev
[  109.247008][ T3826] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1185'.
[  109.320229][ T3833] binder: Unknown parameter '����'
[  109.328110][  T306] usb 6-1: USB disconnect, device number 18
[  109.390948][ T3839] 9pnet_fd: Insufficient options for proto=fd
[  109.562301][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  109.562322][   T36] audit: type=1400 audit(2000003599.186:27333): avc:  denied  { read } for  pid=3848 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  109.603375][   T36] audit: type=1400 audit(2000003599.226:27334): avc:  denied  { read } for  pid=3855 comm="syz.5.1197" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  109.627852][   T36] audit: type=1400 audit(2000003599.226:27335): avc:  denied  { open } for  pid=3855 comm="syz.5.1197" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  109.656146][   T36] audit: type=1400 audit(2000003599.236:27336): avc:  denied  { sqpoll } for  pid=3855 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  109.687814][   T36] audit: type=1400 audit(2000003599.316:27337): avc:  denied  { getattr } for  pid=3862 comm="syz.0.1199" path="cgroup:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  109.885500][ T3882] cgroup: Invalid name
[  109.907763][ T3886] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.908611][ T3886] veth0: entered promiscuous mode
[  109.921054][ T3886] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.921146][ T3886] rust_binder: Write failure EINVAL in pid:472
[  109.930793][ T3885] veth0: left promiscuous mode
[  110.306871][   T36] audit: type=1400 audit(2000003855.934:27338): avc:  denied  { read } for  pid=3904 comm="syz.0.1212" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  110.330925][   T36] audit: type=1400 audit(2000003855.934:27339): avc:  denied  { open } for  pid=3904 comm="syz.0.1212" path="/256/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  110.355620][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  110.363666][   T36] audit: type=1400 audit(2000003855.934:27340): avc:  denied  { ioctl } for  pid=3904 comm="syz.0.1212" path="/256/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  110.367292][ T3905] SELinux: failed to load policy
[  110.504563][    T9] usb 6-1: Using ep0 maxpacket: 16
[  110.515902][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  110.528714][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.542204][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.553131][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.562434][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.570538][    T9] usb 6-1: Product: syz
[  110.574872][    T9] usb 6-1: Manufacturer: syz
[  110.579551][    T9] usb 6-1: SerialNumber: syz
[  110.774592][   T31] usb 1-1: new low-speed USB device number 44 using dummy_hcd
[  110.925702][   T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  110.936823][   T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  110.947655][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  110.954308][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  110.963556][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.972393][   T31] usb 1-1: config 0 descriptor??
[  110.977743][ T3920] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  110.987947][    T9] usb 6-1: 0:2 : does not exist
[  111.145738][ T3949] tmpfs: Unknown parameter 'no'
[  111.386713][   T31] usbhid 1-1:0.0: can't add hid device: -71
[  111.392945][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  111.399488][    T9] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  111.402009][   T31] usb 1-1: USB disconnect, device number 44
[  111.417177][    T9] usb 6-1: USB disconnect, device number 19
[  111.426706][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  111.562419][ T3954] netlink: 'syz.1.1229': attribute type 15 has an invalid length.
[  111.562419][ T3955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3955 comm=syz.1.1229
[  111.619303][ T3964] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1232'.
[  111.701071][ T3971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.709821][ T3970] tipc: Disabling bearer <eth:syzkaller0>
[  111.710840][   T36] audit: type=1400 audit(2000004113.346:27341): avc:  denied  { accept } for  pid=3968 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.009473][ T1072] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.018132][ T3996] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  112.024883][ T1072] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.031787][ T3996] __vm_enough_memory: pid: 3996, comm: syz.0.1243, bytes: 70373039144960 not enough memory for the allocation
[  112.062233][ T3996] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.224445][  T306] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  112.280218][ T4004] input: syz1 as /devices/virtual/input/input13
[  112.340915][   T36] audit: type=1400 audit(2000004113.966:27342): avc:  denied  { append } for  pid=4003 comm="syz.1.1245" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  112.375471][  T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.385733][  T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.396156][  T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.407160][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.415279][  T306] usb 6-1: Product: syz
[  112.419494][  T306] usb 6-1: Manufacturer: syz
[  112.424120][  T306] usb 6-1: SerialNumber: syz
[  112.661702][  T306] usb 6-1: 0:2 : does not exist
[  112.669783][  T306] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  112.682443][  T306] usb 6-1: USB disconnect, device number 20
[  112.694080][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.094403][    T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  113.172102][ T4016] syz.5.1249: attempt to access beyond end of device
[  113.172102][ T4016] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  113.245406][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  113.256261][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  113.267829][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  113.277645][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  113.292208][    T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  113.301548][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.309735][    T9] usb 2-1: Product: syz
[  113.313922][    T9] usb 2-1: Manufacturer: syz
[  113.318606][    T9] usb 2-1: SerialNumber: syz
[  113.323845][    T9] usb 2-1: config 0 descriptor??
[  113.530890][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.539530][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.547389][   T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  113.548997][    T9] usb 2-1: USB disconnect, device number 23
[  113.714321][   T31] usb 6-1: Using ep0 maxpacket: 32
[  113.720675][   T31] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  113.728987][   T31] usb 6-1: config 0 has no interface number 0
[  113.735172][   T31] usb 6-1: config 0 interface 184 has no altsetting 0
[  113.743374][   T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  113.752503][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.760567][   T31] usb 6-1: Product: syz
[  113.764784][   T31] usb 6-1: Manufacturer: syz
[  113.769393][   T31] usb 6-1: SerialNumber: syz
[  113.774756][   T31] usb 6-1: config 0 descriptor??
[  113.780629][   T31] smsc75xx v1.0.0
[  114.084308][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  114.084316][  T567] Bluetooth: hci0: command 0x1003 tx timeout
[  114.114232][ T4029] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  114.330010][ T4054] binder: Bad value for 'stats'
[  114.384223][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  114.395417][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  114.481210][ T4062] fuse: Bad value for 'rootmode'
[  114.560513][ T4071] /dev/rnullb0: Can't open blockdev
[  114.565968][ T4072] /dev/rnullb0: Can't open blockdev
[  114.584354][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  114.624197][   T36] audit: type=1400 audit(2000004116.246:27343): avc:  denied  { ioctl } for  pid=4077 comm="syz.1.1271" path="socket:[28726]" dev="sockfs" ino=28726 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  114.734147][    T9] usb 1-1: Using ep0 maxpacket: 8
[  114.740407][    T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  114.749342][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  114.758371][    T9] usb 1-1: config 1 has no interface number 1
[  114.764757][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  114.779109][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.788279][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.796351][    T9] usb 1-1: Product: syz
[  114.800558][    T9] usb 1-1: Manufacturer: syz
[  114.805232][    T9] usb 1-1: SerialNumber: syz
[  114.894125][  T496] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  115.016215][    T9] usb 1-1: 2:1 : unsupported format bits 0x80
[  115.025052][    T9] usb 1-1: USB disconnect, device number 45
[  115.035341][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.045411][  T496] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.062264][  T496] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  115.072955][  T496] usb 2-1: config 0 interface 0 has no altsetting 0
[  115.079753][  T496] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  115.088860][  T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.097747][  T496] usb 2-1: config 0 descriptor??
[  115.103026][ T4082] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  115.511628][  T496] usbhid 2-1:0.0: can't add hid device: -71
[  115.517791][  T496] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  115.532674][  T496] usb 2-1: USB disconnect, device number 24
[  115.594530][ T4093] tmpfs: Unknown parameter 'no'
[  115.799587][ T4102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:812
[  115.812654][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[  115.832847][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[  115.847537][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  115.857098][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  115.866596][   T31] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  115.876025][   T31] usb 6-1: USB disconnect, device number 21
[  116.046505][ T4106] binder: Unknown parameter 'fscontext?}'
[  116.096318][ T4114] binder: Unknown parameter ''
[  116.104684][ T4115] binder: Unknown parameter ''
[  116.346461][ T4135] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.347078][ T4135] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.353924][ T4135] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  116.367606][ T4135] rust_binder: Write failure EINVAL in pid:497
[  116.922032][ T4155] incfs: ino conflict with backing FS 1
[  116.940235][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  116.959747][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  116.962308][ T4155] incfs: ino conflict with backing FS 2
[  116.977021][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  116.982371][ T4155] incfs: ino conflict with backing FS 3
[  116.991980][ T4155] incfs: ino conflict with backing FS 1
[  116.993701][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.006214][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.014074][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.021854][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.034156][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.042007][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.049872][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.057705][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.065538][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.073341][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.081196][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.089034][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.096872][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.104701][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.112553][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.120562][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.128405][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.136272][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.153887][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.170593][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.178488][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.186364][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.194280][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.202059][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.209882][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.218235][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.226078][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.233918][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.241711][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.249581][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.257375][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.265470][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.273234][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.281021][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.288926][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.296855][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.304693][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.312473][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.320328][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.328146][    T9] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0
[  117.337597][    T9] hid-generic 0000:007F:FFFFFFFE.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  117.369387][ T4186] fido_id[4186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  117.403796][   T49] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  117.567711][   T49] usb 6-1: Using ep0 maxpacket: 16
[  117.574917][   T49] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  117.585785][   T49] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  117.594596][   T49] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  117.603190][   T49] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  117.612966][   T49] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  117.638193][   T49] usb 6-1: config 0 has no interface number 0
[  117.644557][   T49] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  117.655952][   T49] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  117.666444][   T49] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.678393][   T49] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.691926][   T49] usb 6-1: config 0 interface 125 has no altsetting 0
[  117.700039][   T49] usb 6-1: config 0 interface 125 has no altsetting 2
[  117.715608][   T49] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  117.729744][   T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.734216][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  117.738396][   T49] usb 6-1: Product: syz
[  117.750008][   T49] usb 6-1: Manufacturer: syz
[  117.763743][   T49] usb 6-1: SerialNumber: syz
[  117.769769][   T49] usb 6-1: config 0 descriptor??
[  117.806828][   T36] audit: type=1400 audit(2000004119.437:27344): avc:  denied  { setopt } for  pid=4245 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  117.887061][ T4254] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  117.903751][    T9] usb 2-1: Using ep0 maxpacket: 16
[  117.910968][    T9] usb 2-1: config 0 has no interfaces?
[  117.918409][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  117.927827][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.936085][    T9] usb 2-1: Product: syz
[  117.940433][    T9] usb 2-1: Manufacturer: syz
[  117.945358][    T9] usb 2-1: SerialNumber: syz
[  117.951216][    T9] usb 2-1: config 0 descriptor??
[  117.974500][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.983170][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.158857][   T36] audit: type=1400 audit(2000004119.787:27345): avc:  denied  { getopt } for  pid=4210 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  118.159651][    T9] usb 2-1: USB disconnect, device number 25
[  118.203705][   T49] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  118.333708][   T49] usb 1-1: device descriptor read/64, error -71
[  118.573711][   T49] usb 1-1: device descriptor read/64, error -71
[  118.703875][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[  118.710438][ T1072] Bluetooth: hci0: Frame reassembly failed (-84)
[  118.718960][   T12] Bluetooth: hci1: Frame reassembly failed (-84)
[  118.823678][   T49] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  118.873789][   T36] audit: type=1400 audit(2000004376.509:27346): avc:  denied  { name_bind } for  pid=4304 comm="syz.2.1348" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  118.897878][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1348'.
[  118.963678][   T49] usb 1-1: device descriptor read/64, error -71
[  119.213689][   T49] usb 1-1: device descriptor read/64, error -71
[  119.323773][   T49] usb usb1-port1: attempt power cycle
[  119.663649][   T49] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  119.684695][   T49] usb 1-1: device descriptor read/8, error -71
[  119.814754][   T49] usb 1-1: device descriptor read/8, error -71
[  120.053611][   T49] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  120.074644][   T49] usb 1-1: device descriptor read/8, error -71
[  120.183954][   T31] usb 6-1: USB disconnect, device number 22
[  120.214550][   T49] usb 1-1: device descriptor read/8, error -71
[  120.235631][   T36] audit: type=1400 audit(2000004889.864:27347): avc:  denied  { execute } for  pid=4349 comm="syz.5.1368" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  120.323812][   T49] usb usb1-port1: unable to enumerate USB device
[  120.515919][ T4384] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.617872][ T4386] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.624542][ T4386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529
[  120.631406][ T4386] rust_binder: Error while translating object.
[  120.640646][ T4386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.647017][ T4386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529
[  120.723638][  T587] Bluetooth: hci0: command 0x1003 tx timeout
[  120.723648][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  120.723689][  T567] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  120.733576][  T566] Bluetooth: hci1: command 0x1003 tx timeout
[  120.903583][   T49] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  120.934040][ T4401] FAULT_INJECTION: forcing a failure.
[  120.934040][ T4401] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  120.947241][ T4401] CPU: 1 UID: 0 PID: 4401 Comm: syz.1.1384 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[  120.947280][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.947295][ T4401] Call Trace:
[  120.947302][ T4401]  <TASK>
[  120.947311][ T4401]  __dump_stack+0x21/0x30
[  120.947342][ T4401]  dump_stack_lvl+0x10c/0x190
[  120.947362][ T4401]  ? __cfi_dump_stack_lvl+0x10/0x10
[  120.947382][ T4401]  dump_stack+0x19/0x20
[  120.947401][ T4401]  should_fail_ex+0x3d9/0x530
[  120.947420][ T4401]  should_fail+0xf/0x20
[  120.947437][ T4401]  should_fail_usercopy+0x1e/0x30
[  120.947457][ T4401]  _copy_to_user+0x24/0xa0
[  120.947480][ T4401]  simple_read_from_buffer+0xed/0x160
[  120.947498][ T4401]  proc_fail_nth_read+0x19e/0x210
[  120.947515][ T4401]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  120.947532][ T4401]  ? bpf_lsm_file_permission+0xd/0x20
[  120.947551][ T4401]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  120.947568][ T4401]  vfs_read+0x278/0xb60
[  120.947589][ T4401]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  120.947619][ T4401]  ? __cfi_vfs_read+0x10/0x10
[  120.947641][ T4401]  ? __kasan_check_write+0x18/0x20
[  120.947661][ T4401]  ? mutex_lock+0x92/0x1c0
[  120.947679][ T4401]  ? __cfi_mutex_lock+0x10/0x10
[  120.947697][ T4401]  ? __fget_files+0x2c5/0x340
[  120.947722][ T4401]  ksys_read+0x141/0x250
[  120.947742][ T4401]  ? __cfi_ksys_read+0x10/0x10
[  120.947763][ T4401]  ? __kasan_check_read+0x15/0x20
[  120.947782][ T4401]  __x64_sys_read+0x7f/0x90
[  120.947803][ T4401]  x64_sys_call+0x2638/0x2ee0
[  120.947824][ T4401]  do_syscall_64+0x58/0xf0
[  120.947849][ T4401]  ? clear_bhb_loop+0x50/0xa0
[  120.947868][ T4401]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  120.947886][ T4401] RIP: 0033:0x7fdab818d33c
[  120.947900][ T4401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  120.947914][ T4401] RSP: 002b:00007fdab8f69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  120.947932][ T4401] RAX: ffffffffffffffda RBX: 00007fdab83b5fa0 RCX: 00007fdab818d33c
[  120.947944][ T4401] RDX: 000000000000000f RSI: 00007fdab8f690a0 RDI: 0000000000000004
[  120.947955][ T4401] RBP: 00007fdab8f69090 R08: 0000000000000000 R09: 0000000000000000
[  120.947966][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.947976][ T4401] R13: 0000000000000000 R14: 00007fdab83b5fa0 R15: 00007ffcb0a4d9b8
[  120.947989][ T4401]  </TASK>
[  121.230056][ T4413] fuse: Bad value for 'user_id'
[  121.235022][ T4413] fuse: Bad value for 'user_id'
[  121.255403][ T4418] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  121.273520][   T49] usb 6-1: Using ep0 maxpacket: 16
[  121.279863][   T49] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  121.288740][   T49] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.299100][   T49] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.310560][   T49] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.319775][   T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.329024][   T49] usb 6-1: Product: syz
[  121.333214][   T49] usb 6-1: Manufacturer: syz
[  121.337888][   T49] usb 6-1: SerialNumber: syz
[  121.633530][   T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  121.744974][   T49] usb 6-1: 0:2 : does not exist
[  121.782951][ T4432] overlayfs: failed to clone upperpath
[  121.788597][   T31] usb 1-1: Using ep0 maxpacket: 16
[  121.794922][   T31] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  121.803058][   T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.813499][   T31] usb 1-1: config 0 has no interface number 0
[  121.820125][   T31] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  121.829312][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.838808][   T31] usb 1-1: config 0 descriptor??
[  121.864676][ T4438] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1397'.
[  121.919622][ T4447] overlayfs: conflicting options: verity=require,redirect_dir=nofollow
[  122.036119][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'.
[  122.044928][ T4423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:902
[  122.047673][ T4464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.068496][ T4464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.086921][  T304] usb 1-1: USB disconnect, device number 50
[  122.149028][   T49] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  122.162272][   T49] usb 6-1: USB disconnect, device number 23
[  122.187882][   T36] audit: type=1400 audit(2000005915.820:27348): avc:  denied  { connect } for  pid=4472 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.288139][   T36] audit: type=1400 audit(2000005915.920:27349): avc:  denied  { setopt } for  pid=4478 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  122.359924][   T36] audit: type=1400 audit(2000005915.990:27350): avc:  denied  { ioctl } for  pid=4478 comm="syz.0.1409" path="socket:[30810]" dev="sockfs" ino=30810 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  122.386043][ T4424] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  122.393652][   T36] audit: type=1400 audit(2000005915.990:27351): avc:  denied  { accept } for  pid=4478 comm="syz.0.1409" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.565224][ T4424] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 16
[  122.575076][ T4424] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  122.588089][ T4424] usb 2-1: config 1 interface 0 has no altsetting 0
[  122.596184][ T4424] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  122.605315][ T4424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.613329][ T4424] usb 2-1: Product: ␁
[  122.617533][ T4424] usb 2-1: Manufacturer: ч
[  122.622103][ T4424] usb 2-1: SerialNumber: syz
[  122.628195][ T4462] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  122.676358][ T4482] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.033412][    T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  123.042172][ T4424] usb 2-1: USB disconnect, device number 26
[  123.204559][    T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.216429][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  123.227776][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  123.239335][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  123.249938][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.259283][ T4486] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  123.264567][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  123.276063][  T305] Bluetooth: hci1: Frame reassembly failed (-84)
[  123.472857][ T4486] input: syz0 as /devices/virtual/input/input15
[  123.513347][ T4424] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  123.571131][    T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  123.581660][    T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input14
[  123.607273][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  123.616170][    T9] usb 6-1: USB disconnect, device number 24
[  123.663324][ T4424] usb 1-1: Using ep0 maxpacket: 16
[  123.670244][ T4424] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  123.680182][ T4424] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.690597][ T4424] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.702849][ T4424] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.712340][ T4424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.720518][ T4424] usb 1-1: Product: 皠✦囌ª稀뻃됬ઘ뙯轸盩퉵㑜鍨雺䯰ᕊ卵됧呭菱㫑舵ⶪ䧉옞聛컭랉新ꑟ峔Ĥ
[  123.733789][ T4424] usb 1-1: Manufacturer: 嬫척傤尖㿖䵵츂⌼䶝픭ॢ᧔쟉彳빸虠稹ᐙ葱ఏ揱攘䲿윈ඳﵞ퍌棍捰뼐᪔쒽濁╁Ჳ顔ꉴ꬗̧死腟䭄剘ܯဝ뫉槮ㅈ殒
[  123.750888][ T4424] usb 1-1: SerialNumber: Л
[  123.820037][ T4501] binder: Unknown parameter 'dont_measure'
[  123.826340][ T4501] binder: Unknown parameter 'dont_measure'
[  123.961199][ T4424] usb 1-1: 0:2 : does not exist
[  123.969558][ T4424] usb 1-1: USB disconnect, device number 51
[  124.086206][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  124.172788][ T4512] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.173502][ T4512] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.180889][ T4512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:550
[  124.188437][   T36] audit: type=1400 audit(2000005917.820:27352): avc:  denied  { getopt } for  pid=4511 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.251690][ T4516] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  124.260835][    T9] usb 2-1: Using ep0 maxpacket: 16
[  124.267290][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  124.276459][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.290158][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.314534][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.324242][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.332380][    T9] usb 2-1: Product: syz
[  124.336690][    T9] usb 2-1: Manufacturer: syz
[  124.341327][    T9] usb 2-1: SerialNumber: syz
[  124.549076][   T12] Bluetooth: hci2: Frame reassembly failed (-84)
[  124.756655][    T9] usb 2-1: 0:2 : does not exist
[  125.000607][ T4535] overlayfs: failed to clone upperpath
[  125.160461][    T9] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  125.186330][    T9] usb 2-1: USB disconnect, device number 27
[  125.283191][  T588] Bluetooth: hci0: command 0x1003 tx timeout
[  125.289323][  T588] Bluetooth: hci1: command 0x1003 tx timeout
[  125.295407][  T567] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  125.303905][  T566] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  125.861242][  T496] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  125.870967][  T496] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  125.907437][   T36] audit: type=1400 audit(2000005919.541:27353): avc:  denied  { ioctl } for  pid=4555 comm="syz.1.1440" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  126.173032][  T496] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  126.323077][  T496] usb 2-1: Using ep0 maxpacket: 16
[  126.329507][  T496] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  126.340780][  T496] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.350576][  T496] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  126.363519][  T496] usb 2-1: config 0 interface 0 has no altsetting 0
[  126.370161][  T496] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  126.379244][  T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.388080][  T496] usb 2-1: config 0 descriptor??
[  126.475607][ T4575] SELinux: failed to load policy
[  126.513299][ T4582] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  126.562971][   T53] Bluetooth: hci2: command 0x1003 tx timeout
[  126.563022][  T587] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  126.570379][ T4588] netlink: 'syz.0.1450': attribute type 1 has an invalid length.
[  126.588991][   T36] audit: type=1400 audit(2000006176.218:27354): avc:  denied  { read } for  pid=93 comm="acpid" name="event9" dev="devtmpfs" ino=667 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  126.615122][  T496] usbhid 2-1:0.0: can't add hid device: -71
[  126.628033][  T496] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  126.630349][   T36] audit: type=1400 audit(2000006176.218:27355): avc:  denied  { open } for  pid=93 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=667 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  126.639840][  T496] usb 2-1: USB disconnect, device number 28
[  126.671304][   T36] audit: type=1400 audit(2000006176.218:27356): avc:  denied  { ioctl } for  pid=93 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=667 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  126.824979][ T4620] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.833172][ T4620] rust_binder: Error while translating object.
[  126.842954][ T4620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  126.849248][ T4620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583
[  127.193002][  T306] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  127.354105][  T306] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  127.367002][  T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.375199][  T496] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  127.378577][  T306] usb 6-1: config 0 descriptor??
[  127.544241][  T496] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  127.555558][  T496] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  127.566445][  T496] usb 2-1: config 0 interface 0 has no altsetting 0
[  127.573183][  T496] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  127.582500][  T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.591992][  T496] usb 2-1: config 0 descriptor??
[  127.597637][ T4637] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  128.008438][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.017835][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.029961][  T496] usbhid 2-1:0.0: can't add hid device: -71
[  128.038455][  T496] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  128.051380][  T496] usb 2-1: USB disconnect, device number 29
[  128.359095][   T36] audit: type=1400 audit(2000006689.992:27357): avc:  denied  { accept } for  pid=4659 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  128.619480][ T4666] overlay: ./file0 is not a directory
[  128.624967][ T4424] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  128.633570][ T4666] overlay: ./file0 is not a directory
[  128.785363][ T4424] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  128.802887][  T496] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  128.802943][ T4424] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  128.811672][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.842018][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.855764][ T4424] usb 1-1: Product: syz
[  128.859514][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.860018][ T4424] usb 1-1: Manufacturer: syz
[  128.869477][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.892667][  T306] usb 6-1: Cannot set autoneg
[  128.902448][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.902945][  T306] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  128.910019][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.928421][ T4424] usb 1-1: SerialNumber: syz
[  128.932550][ T4674] bridge_slave_0: entered allmulticast mode
[  128.936726][ T4424] usb 1-1: config 0 descriptor??
[  128.940070][ T4674] bridge_slave_0: entered promiscuous mode
[  128.947607][  T306] usb 6-1: USB disconnect, device number 25
[  128.960507][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.967811][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.975466][ T4674] bridge_slave_1: entered allmulticast mode
[  128.981919][ T4674] bridge_slave_1: entered promiscuous mode
[  128.994593][  T496] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  128.996668][   T49] usb 3-1: USB disconnect, device number 7
[  129.004008][  T496] usb 2-1: config 0 has no interface number 0
[  129.012928][   T31] ==================================================================
[  129.019541][  T496] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  129.022886][   T31] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[  129.022927][   T31] Write of size 8 at addr 0000000000000098 by task kworker/1:0/31
[  129.032420][  T496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.038722][   T31] 
[  129.038746][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[  129.038783][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  129.038799][   T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  129.038878][   T31] Call Trace:
[  129.038888][   T31]  <TASK>
[  129.038899][   T31]  __dump_stack+0x21/0x30
[  129.038932][   T31]  dump_stack_lvl+0x10c/0x190
[  129.038962][   T31]  ? __cfi_dump_stack_lvl+0x10/0x10
[  129.038992][   T31]  ? check_preempt_wakeup_fair+0x886/0xae0
[  129.039026][   T31]  print_report+0x3d/0x70
[  129.039051][   T31]  kasan_report+0x163/0x1a0
[  129.039088][   T31]  ? down_write+0x83/0x2a0
[  129.039122][   T31]  ? down_write+0x83/0x2a0
[  129.039154][   T31]  kasan_check_range+0x299/0x2a0
[  129.039192][   T31]  __kasan_check_write+0x18/0x20
[  129.039222][   T31]  down_write+0x83/0x2a0
[  129.039254][   T31]  ? __cfi_down_write+0x10/0x10
[  129.039294][   T31]  ? _raw_spin_lock+0x8c/0x120
[  129.039331][   T31]  ? __cfi__raw_spin_lock+0x10/0x10
[  129.039368][   T31]  ? mutex_unlock+0x8b/0x240
[  129.039396][   T31]  ? __cfi_mutex_unlock+0x10/0x10
[  129.039427][   T31]  rust_binderfs_remove_file+0x6c/0x110
[  129.039465][   T31]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  129.039517][   T31]  ? update_curr_dl_se+0x10c/0xb20
[  129.039550][   T31]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  129.039579][   T31]  ? update_curr+0x60d/0xc60
[  129.039615][   T31]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  129.039661][   T31]  ? update_load_avg+0x506/0x19a0
[  129.039687][   T31]  ? detach_entity_load_avg+0x7b0/0x7b0
[  129.039725][   T31]  ? dequeue_entity+0xa9c/0x1750
[  129.039753][   T31]  ? __cfi_ip6_output+0x10/0x10
[  129.039783][   T31]  ? tg_unthrottle_up+0x980/0x980
[  129.039809][   T31]  ? __cfi_ip6_local_out+0x10/0x10
[  129.039842][   T31]  ? __cfi_dst_output+0x10/0x10
[  129.039874][   T31]  ? kvm_sched_clock_read+0x15/0x30
[  129.039905][   T31]  ? sched_clock_noinstr+0xd/0x30
[  129.039936][   T31]  ? sched_clock+0x44/0x60
[  129.039961][   T31]  ? sched_clock_cpu+0x75/0x400
[  129.039990][   T31]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  129.040018][   T31]  ? kvm_sched_clock_read+0x15/0x30
[  129.040051][   T31]  ? __cfi_sched_clock_cpu+0x10/0x10
[  129.040079][   T31]  ? find_inode_fast+0x1ca/0x240
[  129.040106][   T31]  ? ilookup+0x10f/0x360
[  129.040130][   T31]  ? __kasan_check_write+0x18/0x20
[  129.040161][   T31]  ? _raw_spin_lock_irq+0x8d/0x120
[  129.040199][   T31]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  129.040239][   T31]  ? __kasan_check_write+0x18/0x20
[  129.040280][   T31]  ? kernfs_put+0x314/0x360
[  129.040318][   T31]  ? __kasan_check_write+0x18/0x20
[  129.040350][   T31]  ? kernfs_notify_workfn+0x552/0x5a0
[  129.040376][   T31]  ? __kasan_check_write+0x18/0x20
[  129.040404][   T31]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[  129.040440][   T31]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  129.040479][   T31]  ? kick_pool+0xb9/0x550
[  129.040504][   T31]  process_scheduled_works+0x7d2/0x1020
[  129.040543][   T31]  worker_thread+0xc58/0x1250
[  129.040583][   T31]  kthread+0x2ca/0x370
[  129.040620][   T31]  ? __cfi_worker_thread+0x10/0x10
[  129.040655][   T31]  ? __cfi_kthread+0x10/0x10
[  129.040692][   T31]  ret_from_fork+0x64/0xa0
[  129.040721][   T31]  ? __cfi_kthread+0x10/0x10
[  129.040759][   T31]  ret_from_fork_asm+0x1a/0x30
[  129.040795][   T31]  </TASK>
[  129.040804][   T31] ==================================================================
[  129.050198][  T496] usb 2-1: Product: syz
[  129.055007][   T31] Disabling lock debugging due to kernel taint
[  129.057297][  T496] usb 2-1: Manufacturer: syz
[  129.070649][   T31] BUG: kernel NULL pointer dereference, address: 0000000000000098
[  129.070669][   T31] #PF: supervisor write access in kernel mode
[  129.082613][  T496] usb 2-1: SerialNumber: syz
[  129.097499][   T31] #PF: error_code(0x0002) - not-present page
[  129.097520][   T31] PGD 0 P4D 0 
[  129.097539][   T31] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  129.097565][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G    B              6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[  129.112899][   T36] audit: type=1400 audit(2000006946.707:27358): avc:  denied  { read } for  pid=90 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  129.117992][   T31] Tainted: [B]=BAD_PAGE
[  129.124475][  T496] usb 2-1: config 0 descriptor??
[  129.128141][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  129.135868][   T36] audit: type=1400 audit(2000006946.707:27359): avc:  denied  { search } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.137077][   T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  129.141525][   T36] audit: type=1400 audit(2000006946.707:27360): avc:  denied  { write } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.146453][   T31] 
[  129.146462][   T31] RIP: 0010:down_write+0x9a/0x2a0
[  129.146496][   T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  129.202922][   T36] audit: type=1400 audit(2000006946.707:27361): avc:  denied  { add_name } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.203556][   T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256
[  129.240945][   T36] audit: type=1400 audit(2000006946.707:27362): avc:  denied  { create } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  129.242988][   T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  129.243007][   T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520
[  129.243024][   T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4
[  129.243043][   T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000
[  129.684802][   T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000
[  129.692791][   T31] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  129.701739][   T31] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.708333][   T31] CR2: 0000000000000098 CR3: 000000010c7dc000 CR4: 00000000003526b0
[  129.716323][   T31] Call Trace:
[  129.719611][   T31]  <TASK>
[  129.722553][   T31]  ? __cfi_down_write+0x10/0x10
[  129.727423][   T31]  ? _raw_spin_lock+0x8c/0x120
[  129.732215][   T31]  ? __cfi__raw_spin_lock+0x10/0x10
[  129.737433][   T31]  ? mutex_unlock+0x8b/0x240
[  129.742039][   T31]  ? __cfi_mutex_unlock+0x10/0x10
[  129.747077][   T31]  rust_binderfs_remove_file+0x6c/0x110
[  129.752645][   T31]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  129.765427][   T31]  ? update_curr_dl_se+0x10c/0xb20
[  129.770574][   T31]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  129.776772][   T31]  ? update_curr+0x60d/0xc60
[  129.781387][   T31]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  129.794606][   T31]  ? update_load_avg+0x506/0x19a0
[  129.799649][   T31]  ? detach_entity_load_avg+0x7b0/0x7b0
[  129.805216][   T31]  ? dequeue_entity+0xa9c/0x1750
[  129.810170][   T31]  ? __cfi_ip6_output+0x10/0x10
[  129.815073][   T31]  ? tg_unthrottle_up+0x980/0x980
[  129.820120][   T31]  ? __cfi_ip6_local_out+0x10/0x10
[  129.825681][   T31]  ? __cfi_dst_output+0x10/0x10
[  129.830552][   T31]  ? kvm_sched_clock_read+0x15/0x30
[  129.835771][   T31]  ? sched_clock_noinstr+0xd/0x30
[  129.840831][   T31]  ? sched_clock+0x44/0x60
[  129.845263][   T31]  ? sched_clock_cpu+0x75/0x400
[  129.850135][   T31]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  129.856224][   T31]  ? kvm_sched_clock_read+0x15/0x30
[  129.861441][   T31]  ? __cfi_sched_clock_cpu+0x10/0x10
[  129.866745][   T31]  ? find_inode_fast+0x1ca/0x240
[  129.871694][   T31]  ? ilookup+0x10f/0x360
[  129.876122][   T31]  ? __kasan_check_write+0x18/0x20
[  129.881250][   T31]  ? _raw_spin_lock_irq+0x8d/0x120
[  129.886407][   T31]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  129.891978][   T31]  ? __kasan_check_write+0x18/0x20
[  129.897110][   T31]  ? kernfs_put+0x314/0x360
[  129.901636][   T31]  ? __kasan_check_write+0x18/0x20
[  129.906760][   T31]  ? kernfs_notify_workfn+0x552/0x5a0
[  129.912147][   T31]  ? __kasan_check_write+0x18/0x20
[  129.917285][   T31]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[  129.922680][   T31]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  129.928267][   T31]  ? kick_pool+0xb9/0x550
[  129.932609][   T31]  process_scheduled_works+0x7d2/0x1020
[  129.938182][   T31]  worker_thread+0xc58/0x1250
[  129.942890][   T31]  kthread+0x2ca/0x370
[  129.947083][   T31]  ? __cfi_worker_thread+0x10/0x10
[  129.952215][   T31]  ? __cfi_kthread+0x10/0x10
[  129.956827][   T31]  ret_from_fork+0x64/0xa0
[  129.961258][   T31]  ? __cfi_kthread+0x10/0x10
[  129.965869][   T31]  ret_from_fork_asm+0x1a/0x30
[  129.970654][   T31]  </TASK>
[  129.973689][   T31] Modules linked in:
[  129.977613][   T31] CR2: 0000000000000098
[  129.981776][   T31] ---[ end trace 0000000000000000 ]---
[  129.987246][   T31] RIP: 0010:down_write+0x9a/0x2a0
[  129.992295][   T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  130.011920][   T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256
[  130.018010][   T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  130.025995][   T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520
[  130.033982][   T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4
[  130.041968][   T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000
[  130.050059][   T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000
[  130.058066][   T31] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  130.067025][   T31] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.073627][   T31] CR2: 0000000000000098 CR3: 000000010c7dc000 CR4: 00000000003526b0
[  130.081616][   T31] Kernel panic - not syncing: Fatal exception
[  130.088022][   T31] Kernel Offset: disabled
[  130.092378][   T31] Rebooting in 86400 seconds..