last executing test programs:

4m48.315029543s ago: executing program 0 (id=76):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000002f40)=""/205, 0xcd}, {&(0x7f0000001f00)=""/4075, 0xfeb}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)

4m47.466026416s ago: executing program 0 (id=77):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0xffffffffffffffd1) (async)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0xffffffffffffffd1)
splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0xe1, 0x3) (async)
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0xe1, 0x3)
ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000240)={{0x440}, {0x9}, 0xfffffffd}) (async)
ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000240)={{0x440}, {0x9}, 0xfffffffd})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000080)={0x80000002}) (async)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000080)={0x80000002})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) (async)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$SIOCGSKNS(r10, 0x894c, 0x0)
ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f00000001c0)) (async)
ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)

4m47.135890891s ago: executing program 0 (id=78):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4m45.965989888s ago: executing program 0 (id=83):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x800000000ff, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140))
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]})
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xd1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x1, 0x5, 0x2}}}}}]}}]}}, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x2, 0x0)

4m45.425735256s ago: executing program 0 (id=87):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000940)={0x858, 0x5})
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000240))
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ae805d2081938379bebdb4000000206a053f0040000102030109022400010105200109040007010301010b092102001001221e0d090581030804010502"], 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3080cec593"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x172531d9, 0x1ff, 0x7, 0x3a}, {0x6, 0x24, 0x1a, 0x101, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @dmm={0x7, 0x24, 0x14, 0xc, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfd, 0xc1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x7f, 0x3}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x0, 0x6, 0x77, 0x8, 0x80}, 0x91, &(0x7f0000000540)={0x5, 0xf, 0x91, 0x6, [@generic={0x4e, 0x10, 0x8, "67929be9c1d3c052bc8870157b30adefad4508716bc35ca50a91774d92259eb8bd7570525b6cbbbc7549607c16dfa3cdde6edf5dc332d7bfe519be737df87a573712fb3760f093337d7b17"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x7fff, 0xf00}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5b77ebc2de55a4ba7f1cf8d25bcf5c42"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "e8fa32776c82ee8b74004ff7528873d0"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x2, 0x8}]}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1001}}, {0x86, &(0x7f0000000640)=@string={0x86, 0x3, "3bc8844e86550d50679df98ee8de5b8083873fabc60d2b2180bdaafc48f26a5af0f308fcf63e59fe1e71c78c47da6c0a38d33d6120b37b9c49331f130daebe19ba9637f816d74fb89bded4c62f8fc4f63f96728b90a6109f7c8cca2caf35df9ecee5fa9c59044b31eab44f20157b022758dd7f9523a7cb6826fd976e8d4c748d5976ee06"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0x8, &(0x7f0000000740)=@string={0x8, 0x3, "0f72e34eebfe"}}, {0x80, &(0x7f0000000780)=@string={0x80, 0x3, "8c79e971a61c10c68cb2526523a7b82edb23318d1048c50692ef5811e015758d5ea10c6f62a323bcdcbac0163b3c30516f175106e60b796de4a0eb096d39240f1676669e948fc937e07a00d26b4ff95c4b23fe70ee563d5c2fd0fa9137796ddaf05bb9db9b11b394364d3ed356660b47b933149491d44fe18b9ff403be15"}}]})
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0xffff, 0x5b, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x1}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4m45.21445304s ago: executing program 0 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

4m45.17395957s ago: executing program 32 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

4m8.917582458s ago: executing program 1 (id=371):
r0 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @local, 0x14}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r1 = dup2(r0, r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0xb00, {0x0, 0xfff, 0x2000000000000, 0x7, 0x6, 0x10001, 0x0, 0xd, 0x4a}}, 0x43)

4m8.903513939s ago: executing program 1 (id=372):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141702, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0x220a8000)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = eventfd2(0x62bf9036, 0x0)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000598000/0x4000)=nil, 0x4000, 0x9, 0x28011, r5, 0xc1211000)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r4, 0x4c6, 0x1, r5})
getpeername$unix(r3, 0x0, &(0x7f00000000c0))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000200)=0x20)
write$cgroup_subtree(r1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x3c, 0x6, 0x0, {0x6, 0x6, 0x13, 0x0, './binderfs/binder0\x00'}}, 0x3c)
recvfrom$packet(r6, &(0x7f0000000100)=""/130, 0x82, 0x2040, 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'devices'}, {0x2d, 'memory'}, {0x2d, 'rlimit'}]}, 0x35)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141702, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0x220a8000) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) (async)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
eventfd2(0x62bf9036, 0x0) (async)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mmap(&(0x7f0000598000/0x4000)=nil, 0x4000, 0x9, 0x28011, r5, 0xc1211000) (async)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r4, 0x4c6, 0x1, r5}) (async)
getpeername$unix(r3, 0x0, &(0x7f00000000c0)) (async)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) (async)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000200)=0x20) (async)
write$cgroup_subtree(r1, 0x0, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) (async)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x3c, 0x6, 0x0, {0x6, 0x6, 0x13, 0x0, './binderfs/binder0\x00'}}, 0x3c) (async)
recvfrom$packet(r6, &(0x7f0000000100)=""/130, 0x82, 0x2040, 0x0, 0x0) (async)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'devices'}, {0x2d, 'memory'}, {0x2d, 'rlimit'}]}, 0x35) (async)

4m8.776902551s ago: executing program 1 (id=373):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m8.77639183s ago: executing program 1 (id=374):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m8.760375741s ago: executing program 1 (id=375):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f0000000040)='./file1\x00', 0x8500, 0x30)

4m8.660032142s ago: executing program 1 (id=376):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x3, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
sigaltstack(&(0x7f0000000040)={&(0x7f0000000000)=""/40, 0x80000000, 0x28}, 0x0)

4m8.641138832s ago: executing program 33 (id=376):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x3, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
sigaltstack(&(0x7f0000000040)={&(0x7f0000000000)=""/40, 0x80000000, 0x28}, 0x0)

7.868520341s ago: executing program 2 (id=2770):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x4c)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = socket$inet(0x2, 0x2, 0x8000)
r3 = accept$inet(r2, 0x0, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = dup2(0xffffffffffffffff, r3)
ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000140))
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
r7 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(r7, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x0, 0x0)

7.748945133s ago: executing program 2 (id=2773):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

7.619931785s ago: executing program 2 (id=2774):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="f3cc157f690800007248c1ff360cdb9b4b9029fcaa85b0035814a6fcc2dabcebf200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000100)='./file0\x00', 0x48)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9})
syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x323480, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x36)
write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r6, 0x107, 0x8, 0x0, &(0x7f0000000080))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r7, &(0x7f0000000000)=[{&(0x7f00000018c0)='`', 0x1}], 0x1)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRES64=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c1db9e24cb897a6605f69643d", @ANYRESDEC=r0])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$netlink(r8, 0x0, &(0x7f0000000c00))
read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020)

7.403941888s ago: executing program 3 (id=2779):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000940)={0x858, 0x5})
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000240))
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x11d39, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ae805d2081938379bebdb4000000206a053f0040000102030109022400010105200109040007010301010b092102001001221e0d090581030804010502"], 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3080cec593"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x172531d9, 0x1ff, 0x7, 0x3a}, {0x6, 0x24, 0x1a, 0x101, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @dmm={0x7, 0x24, 0x14, 0xc, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfd, 0xc1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x7f, 0x3}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x0, 0x6, 0x77, 0x8, 0x80}, 0x91, &(0x7f0000000540)={0x5, 0xf, 0x91, 0x6, [@generic={0x4e, 0x10, 0x8, "67929be9c1d3c052bc8870157b30adefad4508716bc35ca50a91774d92259eb8bd7570525b6cbbbc7549607c16dfa3cdde6edf5dc332d7bfe519be737df87a573712fb3760f093337d7b17"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x7fff, 0xf00}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5b77ebc2de55a4ba7f1cf8d25bcf5c42"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "e8fa32776c82ee8b74004ff7528873d0"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x2, 0x8}]}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1001}}, {0x86, &(0x7f0000000640)=@string={0x86, 0x3, "3bc8844e86550d50679df98ee8de5b8083873fabc60d2b2180bdaafc48f26a5af0f308fcf63e59fe1e71c78c47da6c0a38d33d6120b37b9c49331f130daebe19ba9637f816d74fb89bded4c62f8fc4f63f96728b90a6109f7c8cca2caf35df9ecee5fa9c59044b31eab44f20157b022758dd7f9523a7cb6826fd976e8d4c748d5976ee06"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0x8, &(0x7f0000000740)=@string={0x8, 0x3, "0f72e34eebfe"}}, {0x80, &(0x7f0000000780)=@string={0x80, 0x3, "8c79e971a61c10c68cb2526523a7b82edb23318d1048c50692ef5811e015758d5ea10c6f62a323bcdcbac0163b3c30516f175106e60b796de4a0eb096d39240f1676669e948fc937e07a00d26b4ff95c4b23fe70ee563d5c2fd0fa9137796ddaf05bb9db9b11b394364d3ed356660b47b933149491d44fe18b9ff403be15"}}]})
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0xffff, 0x5b, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x1}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4.583714641s ago: executing program 2 (id=2786):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
write$UHID_DESTROY(r1, &(0x7f0000006180), 0x4)
r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}})
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, &(0x7f0000000280))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000340)={0xfffffff6, 0x2, 0x1, 0x8, 0x0, "679170ffa3b52921344dd7775597bfde84dbc7", 0x1, 0x7ff})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
socket(0x16, 0x2, 0x100)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffffeb5, @string={0x2, 0x3, "9089b6741baedacb10c8a2b495f71cdce08b6a26246b3a9e4ee60e37a703d2555388690ad3acdb0a20cfbf4ecdfd1d233f3c140896175dcf665c0b81f056885a8d6434d225855661a426baab13a4a15fb2d33ce147f4270b4b1d7cecbf8b6fc0653c9bcfb8f682e151c81577f1fe"}}, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100)
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b63707561636374202d726c696d6974202d606572665f6576e56e74202d706964422003f0c1ae0a86d679cab37ea4ee424ce4286cefbf400921f1a728c042e4d587197041dd7748029eb405a4b62e2590ec"], 0x23)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10)
r6 = syz_usb_connect$uac1(0x5, 0xf6, &(0x7f0000000b40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x7, 0xe0, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x9, 0xa], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x5, 0x1, 0x7}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x0, "b439a7e03958"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x8, 0xb1, "1eb5"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x3, "0d150000e597"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xee, 0x4, 0x7, 0x40, "46e5fc0f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x2, 0x5, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x8f, "c6", '8'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2f, 0x1, 0x2, 0x8, "b6a0992ae5"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x4, 0x1, 0x4, "", "2bdfd1"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x1, "1af2e41da46563b3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0x0, 0x8, "91ec48"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9c, 0x5, 'b'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xc, 0x9b, {0x7, 0x25, 0x1, 0x81, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x1, 0x7, 0x40, 0x2f}, 0x29, &(0x7f0000000240)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x3, 0xf00, 0x1, [0xc0, 0xff000f, 0xff3f00, 0xf, 0xff0000, 0xff000f]}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x816}}, {0xf, &(0x7f0000000440)=@string={0xf, 0x3, "e2a38234a03304e1576f76f54f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x3, &(0x7f0000000500)=@string={0x3, 0x3, "fd"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2409}}, {0xd1, &(0x7f0000000580)=@string={0xd1, 0x3, "866f742d8b647f9caa9e9c161e4dbe2c47f7642f8bb113050519899ea85ac7eced1fd34bb7f350600e915829bdd365a1bd27f161ce100c972b15c16789c6bd1eb837fc6e55d2204bd8cfc2f5e30d0d6377aa3cc2553a0276ab27fc5d8a3244d49bd348fd313d118d7a7156cf8cc94b0bbd4ac7d2c388985d8461ffef9a9b22d2c604468ece119a7f9d23e6f7f3cb85dc256850349879d4e8ca1526b474552fcb39c547cc6793e8e6155529a40c7819ae85d8ad42170b2cc9d441991d432837c780ac35665a78db90c926ec3d0d4104"}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x20, 0xe, 0xd2, {0xd2, 0x30, "4432ec22c78776ab2061f36a4c764c7864e803a40461fa463e91e9264a4a986a87a0000a3b8837434bac865ea853c2bc2bd195e689a989373e543caf4832685c9b0714ddcea4636ab116fa63813fdadfc30d3ea8855ac5315ede90549ca467b078f834b3bdabaf36c9d6a28a2dc577b807df20d7facf3b3ebdec665b46c1a8beebd281420cc310a131aa33228faad8cee1c8318061faa8098b05e8bbd540bc6aa8f64c045dcb8235e422a77d882cd51604556b7a363df3a100f793f266d9db80431122f8a3ec47ab7fbf20a063b2a541"}}, &(0x7f0000000800)={0x0, 0x3, 0x65, @string={0x65, 0x3, "7fb70180f408e2ee1ede777c64981756dbdfc3d74d57600f9133dc4b1d66c4369fe95534670fa9e0197c7fefe311c8b2d95c8d50a71261a5c6de6e5dbaa064f162ff6e1bd10bc2198e42b4d57fe5be58f00718fd2e9a26762ba6412934165ec2a946da"}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0xd, 0x22, "14d41d0212618b35b74e11f95b24e39c13350d3694ba7d982273dec01a7db49dd4a2"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0x20, 0x81, 0x1, ','}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "014be2"}, &(0x7f0000000a00)={0x20, 0x83, 0x2, '4k'}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20dd87bef0ffd9da"], &(0x7f0000000a80)={0x20, 0x85, 0x3, "7308a0"}})

4.368278554s ago: executing program 3 (id=2789):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
finit_module(r0, 0x0, 0x1)

4.367794094s ago: executing program 3 (id=2790):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xa, 0x0, &(0x7f0000002940)=0xffffff95)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000400)={'bridge0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000000c0)="9133d9d2030000000000000007110ca849bd6a37158fb4e005ae8d72e58e8cb4f0e98213066d15a63c5966beee4a37010fa807cdbaf15fffd227f6e602e63fe9fd41b239a326e0fb2440c17aa16745a5ee17f7486d556af2bda9ac2d360db17c9e817203c300798d3e3765f3baf1cf1f0d87e22c9b828cd978b91a5ac5894f25892cc4da0ab2845f91a5163cd843c157f3fcb9f2119585604d1713a8960238757fc03d2b6a5bc29f9404eda8791dc808", 0xb0, 0x40004, &(0x7f0000000200)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x2f, 0x38, 0x2, 0x2, 0x55, @mcast2, @local, 0x8000, 0x21, 0xc}})

3.257014131s ago: executing program 5 (id=2794):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0xffffffffffffffd1)
splice(r0, &(0x7f0000000000)=0x8001, r0, &(0x7f0000000040)=0x3, 0x800, 0x5)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000080)={0x80000002})
syz_usb_control_io(r5, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xd, 0xd7, {0xd7, 0x31, "63ef38e4b98e9fc33ab2120be409ab22af66f48c28bd07a5ffbc58e6f9dedb1e4de2b7059c81b99a1f6bef277322c28b619bd6c3d64e95c3797918debd16f7d36c9c029edf3e9b1c609585aca907415fcb142515d356d7ef71af71f9857afb282b3dedd6a8b22543fccc588990ad932fe1ff6674277b15ada861b98d4f5ee5d5e29ed5885356ba406f12edd0ae8d8e05b4a206b9467bea1bc8a3eeaf2e617979682fcb987a69ff21eff60dae33427da1c030cebef710c23f0c00deb286ab5aa0b80853eff32a94f7c0966aa4708efa8e8e88acbaea"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000580)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x6, [@wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x7, 0x4, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x3, 0xffc0}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x9, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "51f681a98863811aaa88af9e69565dbb"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x2, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x0, 0x7f}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9f, 0x80, 0xfd, 0x0, "be21c081", "15526f69"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0x80, 0x4, 0x2, 0x7, 0x81}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x40, 0xc, 0xdc, "9280c2049838ec9745edc28bc03c0d701dc40505e39f737381c0637d6519e2c0cb982962075066f0ac8dcc4ea97ca6b1954723523e746eaf328f0828554d22d7a5fc667e27185e0bc21b353f61041522dcd0b599e09c8ab76154e4a84435e5bd6123ae6ccf4cc02d2a01a83105d0e18d15c2cbb936c771528e413d3e2d910fce0a2d0e0703d8f19c2f7862e550dd6cffcc66c914ffde0792f6e7bdd47a58878d461be585c79e96c9e783c9938799a30582b6438353b6717120a03ea6a54784dc22139025f8fc380339bd9cfce218967b6072c919e64dfd6e9a65ce3a"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf00]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0xb, 0x2, "bd71"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "1055"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x5}})
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0)
ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f00000001c0))
ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x629)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sendfile(r2, r2, 0x0, 0x5e7d)

3.092844573s ago: executing program 3 (id=2795):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x79)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000))
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0)
write$rfkill(r2, &(0x7f00000000c0)={0x200, 0x9, 0x1, 0x1}, 0x8)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x3, 0x2, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048080)
r3 = socket(0x840000000006, 0x4, 0xff)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x96, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@private=0xa010101, 0x6}, {@multicast2, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5dca}, {@rand_addr=0x64010101, 0x9}]}]}}}], 0x40}}], 0x2, 0x401ebd6)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0x1, 0x3f, 0xe, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x1, 0x9, 0x2}})
setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@mcast1, r4}, 0x14)

3.000118705s ago: executing program 3 (id=2796):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000480)=""/238, 0xee}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) (fail_nth: 1)

2.847668917s ago: executing program 3 (id=2797):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000940)={0x858, 0x5})
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000240))
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x11d39, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ae805d2081938379bebdb4000000206a053f0040000102030109022400010105200109040007010301010b092102001001221e0d090581030804010502"], 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3080cec593"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x172531d9, 0x1ff, 0x7, 0x3a}, {0x6, 0x24, 0x1a, 0x101, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @dmm={0x7, 0x24, 0x14, 0xc, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfd, 0xc1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x7f, 0x3}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x0, 0x6, 0x77, 0x8, 0x80}, 0x91, &(0x7f0000000540)={0x5, 0xf, 0x91, 0x6, [@generic={0x4e, 0x10, 0x8, "67929be9c1d3c052bc8870157b30adefad4508716bc35ca50a91774d92259eb8bd7570525b6cbbbc7549607c16dfa3cdde6edf5dc332d7bfe519be737df87a573712fb3760f093337d7b17"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x7fff, 0xf00}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5b77ebc2de55a4ba7f1cf8d25bcf5c42"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "e8fa32776c82ee8b74004ff7528873d0"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x2, 0x8}]}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1001}}, {0x86, &(0x7f0000000640)=@string={0x86, 0x3, "3bc8844e86550d50679df98ee8de5b8083873fabc60d2b2180bdaafc48f26a5af0f308fcf63e59fe1e71c78c47da6c0a38d33d6120b37b9c49331f130daebe19ba9637f816d74fb89bded4c62f8fc4f63f96728b90a6109f7c8cca2caf35df9ecee5fa9c59044b31eab44f20157b022758dd7f9523a7cb6826fd976e8d4c748d5976ee06"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0x8, &(0x7f0000000740)=@string={0x8, 0x3, "0f72e34eebfe"}}, {0x80, &(0x7f0000000780)=@string={0x80, 0x3, "8c79e971a61c10c68cb2526523a7b82edb23318d1048c50692ef5811e015758d5ea10c6f62a323bcdcbac0163b3c30516f175106e60b796de4a0eb096d39240f1676669e948fc937e07a00d26b4ff95c4b23fe70ee563d5c2fd0fa9137796ddaf05bb9db9b11b394364d3ed356660b47b933149491d44fe18b9ff403be15"}}]})
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0xffff, 0x5b, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x1}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.467778733s ago: executing program 4 (id=2800):
unshare(0x2040600)
r0 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r0, 0xffff)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
unshare(0x20000)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00')
setns(r2, 0x0)
unshare(0x40100)
syz_clone(0x14360700, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00')
recvmmsg(r1, &(0x7f0000009800), 0x0, 0x20, 0x0)

2.368376735s ago: executing program 4 (id=2801):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x111, 0x487, 0x0, 0x0)
bind$unix(r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x4a442, 0x80)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
syz_clone(0x22822400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x34}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

2.01217949s ago: executing program 4 (id=2802):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x10020, 0x0, 0x0, 0x40000})
fsmount(0xffffffffffffffff, 0x1, 0xf6)

1.645809045s ago: executing program 4 (id=2803):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2)
read$FUSE(r3, &(0x7f0000000dc0)={0x2020}, 0x2020)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x4}}, 0x10)
r5 = getpgrp(0xffffffffffffffff)
fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x200000000000000, r5})
fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7})

1.552864007s ago: executing program 5 (id=2804):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff])
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000080)="f249c14411e3a2e15b7f42c8af1228cf8922fce5a39e8dedce823fdf3d0bed70a39a1699678aeeacf3fa0d8758beb9f921f48b1f3f24ebec30ca985234b04fc991ccd81ce7fe3ecb1389ab05894edd269812b70a3a1a8a8f507233d252a1637a01f721ef8556793fba6d1e92bd79cc00785acb323f8e67"})

1.472538698s ago: executing program 2 (id=2805):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0xffdfffff, 0x600184, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r7, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0xfffffffffffffff5, 0x400000042, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.472163338s ago: executing program 5 (id=2806):
r0 = socket(0x35, 0x80000, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040), 0xfdef)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x404c080)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x10000, 0xfffffff7})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x2], 0x80a0000, 0x42240})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x69, 0x2)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000640)={[0xa, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300), 0x0)
socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000002080)={'team0\x00', 0x8000})
setresuid(0x0, 0xffffffffffffffff, 0xee01)

1.31372328s ago: executing program 5 (id=2807):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000000000), 0x2002)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000240)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

865.799627ms ago: executing program 5 (id=2808):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x8c)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x6e, {0x2, 0x4e24, @empty}, 'veth0\x00'})
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)

708.068189ms ago: executing program 5 (id=2809):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0xf1f8, 0xe}, 'syz1\x00', 0x22})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x6000000)
read(r0, &(0x7f0000000000), 0x2002)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000001d18105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

263.025496ms ago: executing program 4 (id=2803):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2)
read$FUSE(r3, &(0x7f0000000dc0)={0x2020}, 0x2020)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x4}}, 0x10)
r5 = getpgrp(0xffffffffffffffff)
fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x200000000000000, r5})
fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7})

135.511008ms ago: executing program 4 (id=2810):
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
syz_pidfd_open(r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x8, 0xd, 0x7, 0x0, [{0x4, 0x9, 0x3, '\x00', 0x2}, {0x9, 0x2c, 0x4, '\x00', 0x5e}, {0x6, 0xf8, 0x5c, '\x00', 0x3}, {0x6, 0x4, 0xc8, '\x00', 0x7}, {0x9a, 0x7, 0xf9, '\x00', 0x3}, {0x40, 0x6, 0xe, '\x00', 0x1}, {0x40, 0x5d, 0x7}, {0xf8, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x5, 0xa, '\x00', 0xf9}, {0xe, 0x7, 0x66, '\x00', 0x32}, {0x0, 0x5, 0x3, '\x00', 0xd4}, {0x4, 0x3, 0x0, '\x00', 0x7}, {0x73, 0x9, 0x8, '\x00', 0x1}, {0xf, 0x5a, 0xfd, '\x00', 0x8}, {0xb8, 0x8, 0x7, '\x00', 0x3}, {0x4, 0x5, 0xc0, '\x00', 0xc}, {0x52, 0xd7, 0x7, '\x00', 0x8}, {0x9, 0x0, 0x1, '\x00', 0x4}, {0x7, 0x7, 0x77, '\x00', 0x8}, {0x2, 0x10, 0x9, '\x00', 0x4}, {0x6f, 0xbe, 0x0, '\x00', 0x7}, {0x3, 0x1, 0x4, '\x00', 0x96}, {0x7, 0xf9, 0x4, '\x00', 0xc}, {0x2, 0xf3, 0x6, '\x00', 0x1}]}})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffffffffffc)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x9, 0xd, 0x8, 0x20000000000, 0x0, 0x8, 0x0, 0xadb, 0x5, 0x2, 0x7c6, 0x30de, 0x4, 0xf1f, 0x7, 0x4]})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x53, r3, 0xfffff000)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

0s ago: executing program 2 (id=2811):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x40, 0x4)
recvfrom$packet(r0, &(0x7f0000000040)=""/97, 0x61, 0x2, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)

kernel console output (not intermixed with test programs):

netlink_route_socket pid=6093 comm=syz.2.2233
[  269.442887][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6093 comm=syz.2.2233
[  269.456560][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6093 comm=syz.2.2233
[  269.483938][ T6097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6097 comm=syz.2.2233
[  269.497137][ T6097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6097 comm=syz.2.2233
[  269.512046][ T6097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6097 comm=syz.2.2233
[  269.549804][  T423] r8152-cfgselector 4-1: USB disconnect, device number 15
[  269.771011][ T6110] can0: slcan on ttyS3.
[  269.787711][ T6112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1175
[  269.844138][ T6110] can0 (unregistered): slcan off ttyS3.
[  269.880141][ T6114] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2238'.
[  269.990837][ T6122] FAULT_INJECTION: forcing a failure.
[  269.990837][ T6122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.044375][ T6122] CPU: 1 UID: 0 PID: 6122 Comm: syz.2.2241 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  270.044410][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  270.044424][ T6122] Call Trace:
[  270.044432][ T6122]  <TASK>
[  270.044441][ T6122]  __dump_stack+0x21/0x30
[  270.044471][ T6122]  dump_stack_lvl+0x10c/0x190
[  270.044494][ T6122]  ? __cfi_dump_stack_lvl+0x10/0x10
[  270.044519][ T6122]  ? unwind_get_return_address+0x51/0x90
[  270.044541][ T6122]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  270.044567][ T6122]  dump_stack+0x19/0x20
[  270.044592][ T6122]  should_fail_ex+0x3d9/0x530
[  270.044616][ T6122]  should_fail+0xf/0x20
[  270.044639][ T6122]  should_fail_usercopy+0x1e/0x30
[  270.044664][ T6122]  _copy_from_user+0x22/0xb0
[  270.044692][ T6122]  ___sys_recvmsg+0x12f/0x510
[  270.044715][ T6122]  ? __sys_recvmsg+0x280/0x280
[  270.044736][ T6122]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  270.044759][ T6122]  ? selinux_file_permission+0x309/0xb30
[  270.044792][ T6122]  ? __fget_files+0x2c5/0x340
[  270.044821][ T6122]  do_recvmmsg+0x326/0x770
[  270.044843][ T6122]  ? __sys_recvmmsg+0x290/0x290
[  270.044863][ T6122]  ? __cfi_vfs_write+0x10/0x10
[  270.044890][ T6122]  ? fput+0x1a5/0x240
[  270.044921][ T6122]  __x64_sys_recvmmsg+0x191/0x240
[  270.044942][ T6122]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  270.044963][ T6122]  ? __kasan_check_read+0x15/0x20
[  270.044989][ T6122]  x64_sys_call+0x292c/0x2ee0
[  270.045023][ T6122]  do_syscall_64+0x58/0xf0
[  270.045050][ T6122]  ? clear_bhb_loop+0x35/0x90
[  270.045082][ T6122]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  270.045111][ T6122] RIP: 0033:0x7f5218b8e929
[  270.045129][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.045148][ T6122] RSP: 002b:00007f5219964038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  270.045172][ T6122] RAX: ffffffffffffffda RBX: 00007f5218db5fa0 RCX: 00007f5218b8e929
[  270.045188][ T6122] RDX: 0000000000000007 RSI: 0000200000009800 RDI: 0000000000000003
[  270.045202][ T6122] RBP: 00007f5219964090 R08: 0000000000000000 R09: 0000000000000000
[  270.045216][ T6122] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001
[  270.045230][ T6122] R13: 0000000000000000 R14: 00007f5218db5fa0 R15: 00007ffdb365e378
[  270.045247][ T6122]  </TASK>
[  270.613828][   T10] usb 5-1: USB disconnect, device number 90
[  270.846633][   T36] kauditd_printk_skb: 1810 callbacks suppressed
[  270.846652][   T36] audit: type=1400 audit(2000000125.149:48216): avc:  denied  { write } for  pid=6099 comm="syz.5.2235" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.900744][   T36] audit: type=1400 audit(2000000125.159:48217): avc:  denied  { write } for  pid=6099 comm="syz.5.2235" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.907679][ T6100] audit: audit_backlog=65 > audit_backlog_limit=64
[  270.936204][ T6143] audit: audit_backlog=65 > audit_backlog_limit=64
[  270.939660][   T36] audit: type=1400 audit(2000000125.159:48218): avc:  denied  { write } for  pid=6099 comm="syz.5.2235" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.947556][ T6143] audit: audit_lost=210 audit_rate_limit=0 audit_backlog_limit=64
[  270.973498][ T6100] audit: audit_lost=211 audit_rate_limit=0 audit_backlog_limit=64
[  270.980712][   T36] audit: type=1400 audit(2000000125.159:48219): avc:  denied  { write } for  pid=6099 comm="syz.5.2235" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.981697][ T6100] audit: backlog limit exceeded
[  271.019225][   T36] audit: type=1400 audit(2000000125.159:48220): avc:  denied  { write } for  pid=6099 comm="syz.5.2235" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  271.165557][ T6141] rust_binder: Read failure Err(EFAULT) in pid:1196
[  271.534101][  T306] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  271.723756][  T306] usb 4-1: Using ep0 maxpacket: 16
[  271.750247][  T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.772824][  T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  271.792007][  T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  271.815975][  T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.825203][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.837608][  T306] usb 4-1: Product: syz
[  271.843397][  T306] usb 4-1: Manufacturer: syz
[  271.850557][  T306] usb 4-1: SerialNumber: syz
[  271.865021][ T6151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  271.878134][  T306] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  271.889347][  T306] cdc_ncm 4-1:1.0: bind() failure
[  272.079488][  T306] usb 4-1: USB disconnect, device number 16
[  272.923151][  T306] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  273.018466][ T6209] 9pnet_virtio: no channels available for device syz
[  273.083120][  T306] usb 4-1: Using ep0 maxpacket: 16
[  273.095048][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.108840][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.118893][  T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  273.131964][  T306] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  273.163127][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.183284][  T306] usb 4-1: config 0 descriptor??
[  273.603308][  T306] microsoft 0003:045E:07DA.000F: unknown main item tag 0x2
[  273.610679][  T306] microsoft 0003:045E:07DA.000F: unknown global tag 0xc
[  273.617684][  T306] microsoft 0003:045E:07DA.000F: item 0 0 1 12 parsing failed
[  273.625469][  T306] microsoft 0003:045E:07DA.000F: parse failed
[  273.631609][  T306] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22
[  273.749231][ T6212] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  273.817931][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.841275][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.856630][   T10] usb 4-1: USB disconnect, device number 17
[  274.148267][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.163735][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.933123][    T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  274.952718][ T6256] input: syz1 as /devices/virtual/input/input34
[  274.995161][ T6256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1447
[  275.083134][    T9] usb 4-1: device descriptor read/64, error -71
[  275.343172][    T9] usb 4-1: device descriptor read/64, error -71
[  275.583131][    T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  275.713180][    T9] usb 4-1: device descriptor read/64, error -71
[  275.892416][   T36] kauditd_printk_skb: 2188 callbacks suppressed
[  275.892436][   T36] audit: type=1400 audit(2000000130.199:50406): avc:  denied  { create } for  pid=6270 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.920718][   T36] audit: type=1400 audit(2000000130.209:50407): avc:  denied  { create } for  pid=6270 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.942334][   T36] audit: type=1400 audit(2000000130.209:50408): avc:  denied  { write } for  pid=6270 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.953150][    T9] usb 4-1: device descriptor read/64, error -71
[  275.964972][   T36] audit: type=1400 audit(2000000130.209:50409): avc:  denied  { read } for  pid=6270 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  276.033148][   T36] audit: type=1400 audit(2000000130.209:50410): avc:  denied  { read } for  pid=6270 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  276.068153][   T36] audit: type=1400 audit(2000000130.229:50411): avc:  denied  { ioctl } for  pid=6242 comm="syz.3.2286" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.074782][ T6279] fuse: Bad value for 'group_id'
[  276.099414][    T9] usb usb4-port1: attempt power cycle
[  276.112867][ T6279] fuse: Bad value for 'group_id'
[  276.123633][   T36] audit: type=1400 audit(2000000130.259:50412): avc:  denied  { create } for  pid=6272 comm="syz.5.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  276.144927][   T36] audit: type=1400 audit(2000000130.259:50413): avc:  denied  { create } for  pid=6272 comm="syz.5.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  276.166349][   T36] audit: type=1400 audit(2000000130.319:50414): avc:  denied  { read write } for  pid=5638 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.191418][   T36] audit: type=1400 audit(2000000130.319:50415): avc:  denied  { read write open } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.303143][   T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  276.443147][    T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  276.455759][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.465918][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  276.475698][   T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.490421][    T9] usb 4-1: device descriptor read/8, error -71
[  276.498219][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.507326][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.515447][   T10] usb 5-1: Product: syz
[  276.519624][   T10] usb 5-1: Manufacturer: syz
[  276.524239][   T10] usb 5-1: SerialNumber: syz
[  276.625401][    T9] usb 4-1: device descriptor read/8, error -71
[  276.847248][ T6291] tmpfs: Invalid gid '0x00000000ffffffff'
[  276.863143][    T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  276.886037][    T9] usb 4-1: device descriptor read/8, error -71
[  277.016666][    T9] usb 4-1: device descriptor read/8, error -71
[  277.123377][    T9] usb usb4-port1: unable to enumerate USB device
[  277.318879][ T6306] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  277.334483][ T6306] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  277.348795][ T6306] rust_binder: Error while translating object.
[  277.352427][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.367749][ T6306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  277.372115][ T6306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1467
[  277.378181][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.406774][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.415380][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.521319][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.529918][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.631137][   T10] cdc_ncm 5-1:1.0: bind() failure
[  277.651225][   T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  277.682858][   T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  277.696565][   T10] usb 5-1: USB disconnect, device number 91
[  277.731345][ T6316] No source specified
[  277.844628][ T6321] usb usb8: usbfs: process 6321 (syz.3.2320) did not claim interface 0 before use
[  277.921970][ T6321] incfs_lookup_dentry err:-111
[  277.933204][ T6321] incfs: Can't find or create .index dir in ./file0
[  277.944888][ T6321] incfs: mount failed -111
[  278.277328][ T6333] kvm: pic: single mode not supported
[  278.279112][ T6333] kvm: pic: single mode not supported
[  278.289815][ T6333] kvm: pic: single mode not supported
[  278.295489][ T6333] kvm: pic: single mode not supported
[  279.443474][ T6356] input: syz1 as /devices/virtual/input/input35
[  279.473129][ T6355] overlayfs: missing 'lowerdir'
[  279.789562][  T599] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  279.808370][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'.
[  279.953158][  T599] usb 4-1: Using ep0 maxpacket: 8
[  279.967418][  T599] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  279.985358][  T599] usb 4-1: config 179 has no interface number 0
[  279.999170][  T599] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  280.023767][  T599] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  280.049922][  T599] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  280.075385][  T599] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  280.108185][  T599] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  280.122263][  T599] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  280.132023][  T599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.150289][ T6356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  280.173885][ T6367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172
[  280.397951][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.441615][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.500030][ T6373] binder: Bad value for 'max'
[  280.671333][   T10] usb 4-1: USB disconnect, device number 22
[  280.671416][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  280.685793][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  280.774307][ T6380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  280.774355][ T6380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:182
[  280.810891][ T6380] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  280.833477][ T6380] rust_binder: Read failure Err(EFAULT) in pid:182
[  280.924302][   T36] kauditd_printk_skb: 1277 callbacks suppressed
[  280.924326][   T36] audit: type=1400 audit(2000000135.239:51693): avc:  denied  { create } for  pid=6381 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  280.991655][   T36] audit: type=1400 audit(2000000135.239:51694): avc:  denied  { sys_module } for  pid=6382 comm="syz.4.2342" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  281.024569][ T6386] kvm: kvm [6385]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1
[  281.063990][   T36] audit: type=1400 audit(2000000135.239:51695): avc:  denied  { read } for  pid=6382 comm="syz.4.2342" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  281.108589][ T6386] input: syz0 as /devices/virtual/input/input36
[  281.122850][   T36] audit: type=1400 audit(2000000135.239:51696): avc:  denied  { read open } for  pid=6382 comm="syz.4.2342" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  281.202381][   T36] audit: type=1400 audit(2000000135.239:51697): avc:  denied  { create } for  pid=6382 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  281.235741][   T36] audit: type=1400 audit(2000000135.249:51698): avc:  denied  { read write } for  pid=5638 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.303158][   T36] audit: type=1400 audit(2000000135.249:51699): avc:  denied  { read write open } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.423139][   T36] audit: type=1400 audit(2000000135.249:51700): avc:  denied  { ioctl } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.452492][   T36] audit: type=1400 audit(2000000135.269:51701): avc:  denied  { create } for  pid=6381 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  281.486730][ T6400] FAULT_INJECTION: forcing a failure.
[  281.486730][ T6400] name failslab, interval 1, probability 0, space 0, times 0
[  281.514795][   T36] audit: type=1400 audit(2000000135.269:51702): avc:  denied  { create } for  pid=6381 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  281.533187][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.3.2349 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  281.533230][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  281.533247][ T6400] Call Trace:
[  281.533256][ T6400]  <TASK>
[  281.533267][ T6400]  __dump_stack+0x21/0x30
[  281.533309][ T6400]  dump_stack_lvl+0x10c/0x190
[  281.533337][ T6400]  ? __cfi_dump_stack_lvl+0x10/0x10
[  281.533368][ T6400]  dump_stack+0x19/0x20
[  281.533395][ T6400]  should_fail_ex+0x3d9/0x530
[  281.533424][ T6400]  should_failslab+0xac/0x100
[  281.533456][ T6400]  kmem_cache_alloc_noprof+0x42/0x3a0
[  281.533484][ T6400]  ? __anon_vma_prepare+0xac/0x570
[  281.533514][ T6400]  __anon_vma_prepare+0xac/0x570
[  281.533541][ T6400]  ? __kasan_check_write+0x18/0x20
[  281.533568][ T6400]  ? _raw_spin_lock+0x8c/0x120
[  281.533600][ T6400]  do_pte_missing+0x2cd5/0x3e50
[  281.533636][ T6400]  ? _raw_spin_unlock+0x45/0x60
[  281.533669][ T6400]  ? __cfi___pmd_alloc+0x10/0x10
[  281.533702][ T6400]  ? pte_marker_clear+0x1b0/0x1b0
[  281.533739][ T6400]  handle_mm_fault+0x1166/0x1b90
[  281.533775][ T6400]  ? __cfi_handle_mm_fault+0x10/0x10
[  281.533811][ T6400]  ? lock_mm_and_find_vma+0xb8/0x3a0
[  281.533844][ T6400]  do_user_addr_fault+0x4ca/0x1200
[  281.533878][ T6400]  exc_page_fault+0x59/0xc0
[  281.533902][ T6400]  asm_exc_page_fault+0x2b/0x30
[  281.533937][ T6400] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  281.533965][ T6400] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  281.533988][ T6400] RSP: 0018:ffffc90003b87d68 EFLAGS: 00050202
[  281.534010][ T6400] RAX: ffffffff82a47201 RBX: 00000000000000d8 RCX: 00000000000000d8
[  281.534029][ T6400] RDX: 0000000000000000 RSI: ffff88813c2ed600 RDI: 0000200000000300
[  281.534046][ T6400] RBP: ffffc90003b87d98 R08: ffff88813c2ed6d7 R09: 1ffff1102785dada
[  281.534064][ T6400] R10: dffffc0000000000 R11: ffffed102785dadb R12: 00002000000003d8
[  281.534084][ T6400] R13: 00007ffffffff000 R14: 0000200000000300 R15: ffff88813c2ed600
[  281.534105][ T6400]  ? _copy_from_user+0x71/0xb0
[  281.534139][ T6400]  ? _copy_to_user+0x7d/0xa0
[  281.534170][ T6400]  copy_regset_to_user+0xb9/0x110
[  281.534203][ T6400]  arch_ptrace+0x250/0x410
[  281.534231][ T6400]  __se_sys_ptrace+0x152/0x3c0
[  281.534263][ T6400]  ? __x64_sys_ptrace+0xc0/0xc0
[  281.534301][ T6400]  __x64_sys_ptrace+0x9f/0xc0
[  281.534333][ T6400]  x64_sys_call+0x2d88/0x2ee0
[  281.534364][ T6400]  do_syscall_64+0x58/0xf0
[  281.534396][ T6400]  ? clear_bhb_loop+0x35/0x90
[  281.534431][ T6400]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  281.534466][ T6400] RIP: 0033:0x7fcf8398e929
[  281.534486][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.534506][ T6400] RSP: 002b:00007fcf84832038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  281.534531][ T6400] RAX: ffffffffffffffda RBX: 00007fcf83bb5fa0 RCX: 00007fcf8398e929
[  281.534548][ T6400] RDX: 000000007fffffff RSI: 00000000000004db RDI: 000000000000000c
[  281.534561][ T6400] RBP: 00007fcf84832090 R08: 0000000000000000 R09: 0000000000000000
[  281.534575][ T6400] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  281.534589][ T6400] R13: 0000000000000000 R14: 00007fcf83bb5fa0 R15: 00007ffed7bb9ff8
[  281.534607][ T6400]  </TASK>
[  282.139471][ T6416] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  282.173132][  T306] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  282.333100][  T306] usb 4-1: Using ep0 maxpacket: 16
[  282.352688][  T306] usb 4-1: unable to get BOS descriptor or descriptor too short
[  282.363335][  T306] usb 4-1: unable to read config index 0 descriptor/start: -71
[  282.384114][  T306] usb 4-1: can't read configurations, error -71
[  282.497367][ T6426] kvm: kvm [6425]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882
[  282.588727][ T6426] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  282.588764][ T6426] rust_binder: Error in use_page_slow: EBUSY
[  282.611389][ T6426] rust_binder: use_range failure EBUSY
[  282.617496][ T6426] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  282.624504][ T6426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  282.632205][ T6426] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  282.641763][ T6426] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:200
[  282.889042][ T6431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  283.603774][ T6455] netlink: 'syz.4.2368': attribute type 8 has an invalid length.
[  283.670792][ T6459] binder: Unknown parameter 'seclaƒel'
[  284.196357][ T6481] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  284.463136][ T6490] rust_binder: Write failure EINVAL in pid:231
[  284.673130][    T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  284.804667][ T6502] overlayfs: failed to clone upperpath
[  284.843461][    T9] usb 4-1: device descriptor read/64, error -71
[  284.993122][  T305] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  285.093152][    T9] usb 4-1: device descriptor read/64, error -71
[  285.202515][  T305] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  285.212930][  T305] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  285.239153][  T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.248935][  T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  285.257156][  T305] usb 5-1: SerialNumber: syz
[  285.283400][ T6500] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  285.363134][    T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  285.509094][ T6498] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  285.523151][    T9] usb 4-1: device descriptor read/64, error -71
[  285.720911][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.743256][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.761116][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.764703][ T6498] netlink: 'syz.4.2386': attribute type 3 has an invalid length.
[  285.769637][    T9] usb 4-1: device descriptor read/64, error -71
[  285.784596][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.845568][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.865847][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.905354][  T305] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  285.913231][    T9] usb usb4-port1: attempt power cycle
[  285.929090][  T305] usb 5-1: USB disconnect, device number 92
[  285.943516][   T36] kauditd_printk_skb: 2069 callbacks suppressed
[  285.943533][   T36] audit: type=1400 audit(2000000140.259:53733): avc:  denied  { ioctl } for  pid=6484 comm="syz.3.2382" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  285.978261][   T36] audit: type=1400 audit(2000000140.259:53734): avc:  denied  { ioctl } for  pid=6484 comm="syz.3.2382" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.021840][ T6526] syzkaller0: entered allmulticast mode
[  286.023144][   T36] audit: type=1400 audit(2000000140.319:53735): avc:  denied  { ioctl } for  pid=6484 comm="syz.3.2382" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.074416][   T36] audit: type=1400 audit(2000000140.319:53736): avc:  denied  { ioctl } for  pid=6484 comm="syz.3.2382" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.099507][   T36] audit: type=1400 audit(2000000140.319:53737): avc:  denied  { create } for  pid=6525 comm="syz.4.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  286.119175][   T36] audit: type=1400 audit(2000000140.339:53738): avc:  denied  { read write } for  pid=6525 comm="syz.4.2397" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.143741][   T36] audit: type=1400 audit(2000000140.339:53739): avc:  denied  { read write open } for  pid=6525 comm="syz.4.2397" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.170778][   T36] audit: type=1400 audit(2000000140.339:53740): avc:  denied  { ioctl } for  pid=6525 comm="syz.4.2397" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.196995][   T36] audit: type=1400 audit(2000000140.339:53741): avc:  denied  { ioctl } for  pid=6525 comm="syz.4.2397" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.223417][   T36] audit: type=1400 audit(2000000140.339:53742): avc:  denied  { ioctl } for  pid=6525 comm="syz.4.2397" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.283172][    T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  286.305455][    T9] usb 4-1: device descriptor read/8, error -71
[  286.403141][  T305] usb 5-1: new full-speed USB device number 93 using dummy_hcd
[  286.445187][    T9] usb 4-1: device descriptor read/8, error -71
[  286.555567][  T305] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  286.566400][  T305] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  286.577952][  T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  286.588996][  T305] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  286.606917][  T305] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  286.616021][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.624887][  T305] usb 5-1: Product: syz
[  286.629072][  T305] usb 5-1: Manufacturer: syz
[  286.634532][  T305] usb 5-1: SerialNumber: syz
[  286.641100][  T305] usb 5-1: config 0 descriptor??
[  286.648574][ T6526] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  286.659483][  T305] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37
[  286.706656][    T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  286.713503][ T6541] binder: Bad value for 'max'
[  286.720429][ T6541] binder: Bad value for 'max'
[  286.745820][    T9] usb 4-1: device descriptor read/8, error -71
[  286.870731][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.887797][    T9] usb 4-1: device descriptor read/8, error -71
[  286.893294][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.953621][  T599] usb 5-1: USB disconnect, device number 93
[  287.023187][    T9] usb usb4-port1: unable to enumerate USB device
[  287.317394][ T6555] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  287.546698][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.563291][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.329960][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.351686][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.043193][  T423] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  289.203113][  T423] usb 5-1: Using ep0 maxpacket: 32
[  289.211075][  T423] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  289.219734][  T423] usb 5-1: config 0 has no interface number 0
[  289.225882][  T423] usb 5-1: config 0 interface 184 has no altsetting 0
[  289.235886][  T423] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  289.244968][  T423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.252957][  T423] usb 5-1: Product: syz
[  289.257129][  T423] usb 5-1: Manufacturer: syz
[  289.261735][  T423] usb 5-1: SerialNumber: syz
[  289.269719][  T423] usb 5-1: config 0 descriptor??
[  289.277789][  T423] smsc75xx v1.0.0
[  289.728473][ T6614] input: syz1 as /devices/virtual/input/input38
[  290.345966][ T6643] block device autoloading is deprecated and will be removed.
[  290.373252][ T6643] syz.2.2441: attempt to access beyond end of device
[  290.373252][ T6643] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  290.643611][ T6649] Unsupported ieee802154 address type: 0
[  290.689121][ T6602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  290.711289][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  290.743970][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  290.758034][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  290.802945][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  290.841153][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  290.868490][  T423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  290.915170][  T423] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  290.953871][   T36] kauditd_printk_skb: 1838 callbacks suppressed
[  290.953890][   T36] audit: type=1400 audit(2000000145.269:55581): avc:  denied  { write } for  pid=6636 comm="syz.5.2440" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  290.984293][  T423] usb 5-1: USB disconnect, device number 94
[  291.003121][   T36] audit: type=1400 audit(2000000145.269:55582): avc:  denied  { write } for  pid=6636 comm="syz.5.2440" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  291.072300][   T36] audit: type=1400 audit(2000000145.279:55583): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.113103][   T36] audit: type=1400 audit(2000000145.279:55584): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.185934][ T6664] audit: audit_backlog=65 > audit_backlog_limit=64
[  291.186460][  T289] audit: audit_backlog=65 > audit_backlog_limit=64
[  291.192499][ T6664] audit: audit_lost=226 audit_rate_limit=0 audit_backlog_limit=64
[  291.192520][ T6664] audit: backlog limit exceeded
[  291.192814][ T6664] audit: audit_backlog=65 > audit_backlog_limit=64
[  291.219647][ T6671] audit: audit_backlog=65 > audit_backlog_limit=64
[  291.240335][ T6671] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  291.240362][ T6671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  291.273179][ T6671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:263
[  291.340501][ T6673] overlay: Unknown parameter '#&['
[  291.507426][ T6681] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  291.594145][ T6686] rust_binder: Error while translating object.
[  291.594177][ T6686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  291.622572][ T6686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1544
[  292.153609][ T6709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  292.239131][ T6714] hub 6-0:1.0: USB hub found
[  292.248540][ T6714] hub 6-0:1.0: 1 port detected
[  292.310567][ T6714] rust_binder: Write failure EFAULT in pid:1552
[  292.422057][ T6717] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2468'.
[  292.494061][ T6721] FAULT_INJECTION: forcing a failure.
[  292.494061][ T6721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.513104][  T423] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  292.527503][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.2470 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  292.527540][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  292.527554][ T6721] Call Trace:
[  292.527561][ T6721]  <TASK>
[  292.527570][ T6721]  __dump_stack+0x21/0x30
[  292.527597][ T6721]  dump_stack_lvl+0x10c/0x190
[  292.527625][ T6721]  ? __cfi_dump_stack_lvl+0x10/0x10
[  292.527648][ T6721]  ? kstrtoull+0x13b/0x1e0
[  292.527667][ T6721]  dump_stack+0x19/0x20
[  292.527690][ T6721]  should_fail_ex+0x3d9/0x530
[  292.527710][ T6721]  should_fail+0xf/0x20
[  292.527729][ T6721]  should_fail_usercopy+0x1e/0x30
[  292.527750][ T6721]  _copy_from_user+0x22/0xb0
[  292.527774][ T6721]  ___sys_sendmsg+0x159/0x2a0
[  292.527822][ T6721]  ? __sys_sendmsg+0x280/0x280
[  292.527852][ T6721]  ? proc_fail_nth_write+0x17e/0x210
[  292.527871][ T6721]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  292.527896][ T6721]  __x64_sys_sendmsg+0x1eb/0x2c0
[  292.527913][ T6721]  ? fput+0x1a5/0x240
[  292.527941][ T6721]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  292.527960][ T6721]  ? ksys_write+0x1ef/0x250
[  292.527985][ T6721]  ? __kasan_check_read+0x15/0x20
[  292.528007][ T6721]  x64_sys_call+0x2a4c/0x2ee0
[  292.528031][ T6721]  do_syscall_64+0x58/0xf0
[  292.528056][ T6721]  ? clear_bhb_loop+0x35/0x90
[  292.528085][ T6721]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  292.528115][ T6721] RIP: 0033:0x7f5218b8e929
[  292.528132][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.528156][ T6721] RSP: 002b:00007f5219964038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.528179][ T6721] RAX: ffffffffffffffda RBX: 00007f5218db5fa0 RCX: 00007f5218b8e929
[  292.528194][ T6721] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  292.528207][ T6721] RBP: 00007f5219964090 R08: 0000000000000000 R09: 0000000000000000
[  292.528221][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.528235][ T6721] R13: 0000000000000000 R14: 00007f5218db5fa0 R15: 00007ffdb365e378
[  292.528252][ T6721]  </TASK>
[  292.771568][  T423] usb 4-1: Using ep0 maxpacket: 16
[  292.810893][  T423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.838614][  T423] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  292.911194][  T423] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  292.966895][ T6725] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2472'.
[  292.977704][  T423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.004937][  T423] usb 4-1: config 0 descriptor??
[  293.434779][  T423] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  293.458970][  T599] usb 3-1: USB disconnect, device number 90
[  293.478049][  T423] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  293.518089][  T423] microsoft 0003:045E:07DA.0010: no inputs found
[  293.540174][  T423] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  293.550532][ T6744] xfrm0: mtu less than device minimum
[  293.682908][ T6746] tipc: Enabling of bearer <ib:lo> rejected, media not registered
[  293.693705][    C0] usb 4-1: input irq status -75 received
[  293.757840][   T12] bridge_slave_1: left allmulticast mode
[  293.765049][   T12] bridge_slave_1: left promiscuous mode
[  293.771099][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.780287][   T12] bridge_slave_0: left allmulticast mode
[  293.786099][   T12] bridge_slave_0: left promiscuous mode
[  293.791899][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.894612][  T306] usb 4-1: USB disconnect, device number 29
[  293.904378][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.924960][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.947999][ T6747] bridge_slave_0: entered allmulticast mode
[  293.965813][ T6747] bridge_slave_0: entered promiscuous mode
[  293.984310][   T12] tipc: Left network mode
[  293.995282][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.007039][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.015756][ T6747] bridge_slave_1: entered allmulticast mode
[  294.022337][ T6747] bridge_slave_1: entered promiscuous mode
[  294.036216][   T12] veth0_vlan: left promiscuous mode
[  294.461315][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.468436][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.475771][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.482822][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.606606][ T6774] fuse: Unknown parameter 'default_ze·ßrmissiŽÑ-Jaë¡êVºóò–7L¬¸›ÔDD?ÙÛÞ'
[  294.644287][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.652281][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.685198][  T303] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.692280][  T303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.719906][ T6775] hub 6-0:1.0: USB hub found
[  294.731987][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.739074][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.746569][ T6775] hub 6-0:1.0: 1 port detected
[  294.768193][ T6775] rust_binder: Write failure EFAULT in pid:1328
[  294.777488][ T6777] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  295.081616][ T6747] veth0_vlan: entered promiscuous mode
[  295.164996][ T6747] veth1_macvtap: entered promiscuous mode
[  295.225677][ T6791] kvm: apic: phys broadcast and lowest prio
[  295.635633][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'.
[  295.840777][ T6804] hub 6-0:1.0: USB hub found
[  295.856246][ T6804] hub 6-0:1.0: 1 port detected
[  295.915200][ T6804] rust_binder: Write failure EFAULT in pid:305
[  295.968915][   T36] kauditd_printk_skb: 1913 callbacks suppressed
[  295.968936][   T36] audit: type=1400 audit(2000000150.279:57477): avc:  denied  { create } for  pid=6815 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  296.037871][   T36] audit: type=1400 audit(2000000150.279:57478): avc:  denied  { create } for  pid=6815 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  296.113116][   T36] audit: type=1400 audit(2000000150.279:57479): avc:  denied  { write } for  pid=6815 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  296.114403][ T6823] rust_binder: Failed to allocate buffer. len:18446744073709551576, is_oneway:false
[  296.152591][   T36] audit: type=1400 audit(2000000150.289:57480): avc:  denied  { create } for  pid=6814 comm="syz.3.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  296.158376][ T6823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  296.181208][   T36] audit: type=1400 audit(2000000150.349:57481): avc:  denied  { write } for  pid=6819 comm="syz.2.2504" name="001" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  296.215895][   T36] audit: type=1400 audit(2000000150.349:57482): avc:  denied  { write } for  pid=6819 comm="syz.2.2504" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  296.240744][ T6823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:310
[  296.240787][ T6823] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  296.241625][   T36] audit: type=1400 audit(2000000150.359:57483): avc:  denied  { write } for  pid=6814 comm="syz.3.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  296.251672][ T6823] rust_binder: Read failure Err(EFAULT) in pid:310
[  296.275812][   T36] audit: type=1400 audit(2000000150.379:57484): avc:  denied  { read write } for  pid=5638 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.319864][   T36] audit: type=1400 audit(2000000150.379:57485): avc:  denied  { read write open } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.383156][   T36] audit: type=1400 audit(2000000150.379:57486): avc:  denied  { ioctl } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.433128][  T306] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  296.593102][  T306] usb 3-1: Using ep0 maxpacket: 32
[  296.609779][  T306] usb 3-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  296.640478][  T306] usb 3-1: config 1 interface 0 has no altsetting 0
[  296.643129][    T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  296.658906][  T306] usb 3-1: New USB device found, idVendor=046d, idProduct=4101, bcdDevice= 0.40
[  296.677527][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.689146][  T306] usb 3-1: Product: 斄�餩渮촱癔檓羗囙�䔟낾�瘊��᥆�ꓩꡆ⃄磛�⮕�ꛖἿ媱�솅ꄔ�急㡘��볘渻岷覑闥�࿃ꅰ�Õ䥘ᜲ⑻켧憖䠔䎪ש嶣脧䩨肬�ﾨ堉窬
[  296.711309][  T306] usb 3-1: SerialNumber: ����줇蛋�ꅢ䗺�Ѓ륥熒ꠞ嚬퀙煈谇쌳埙穂⵹撼鳃���藵�峸�틟忡ܰ�䌧픙紂蟆튶ϧ苵㣖ㆅ勊锪僾ᰄ벘ද맥䲔ᚗⅯ涞�䊕☪뎣毻ϰ鋾뉼梩⠕畺㹱�ໜ窒漳�勬�戹켒ッ�꿑
[  296.815799][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.826809][  T423] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  296.841612][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  296.862874][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.883905][    T9] usb 5-1: config 0 descriptor??
[  296.983451][  T423] usb 4-1: device descriptor read/64, error -71
[  297.001858][ T6851] overlayfs: failed to resolve './file0': -2
[  297.055901][ T6853] futex_wake_op: syz.5.2519 tries to shift op by 32; fix this program
[  297.100853][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  297.113139][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  297.132023][    T9] usb 5-1: USB disconnect, device number 95
[  297.234455][  T423] usb 4-1: device descriptor read/64, error -71
[  297.264677][ T6864] overlayfs: failed to clone upperpath
[  297.473128][  T423] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  297.593144][    T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  297.613124][  T423] usb 4-1: device descriptor read/64, error -71
[  297.743114][    T9] usb 5-1: Using ep0 maxpacket: 16
[  297.750785][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.761801][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  297.770873][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.780812][    T9] usb 5-1: config 0 descriptor??
[  297.853108][  T423] usb 4-1: device descriptor read/64, error -71
[  297.973112][  T423] usb usb4-port1: attempt power cycle
[  298.313158][  T423] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  298.335672][  T423] usb 4-1: device descriptor read/8, error -71
[  298.456771][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  298.476157][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  298.488371][  T423] usb 4-1: device descriptor read/8, error -71
[  298.514384][    T9] usb 5-1: USB disconnect, device number 96
[  298.553650][ T6879] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.579078][ T6879] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.753106][  T423] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  298.815993][  T423] usb 4-1: device descriptor read/8, error -71
[  298.956727][  T423] usb 4-1: device descriptor read/8, error -71
[  299.083534][  T423] usb usb4-port1: unable to enumerate USB device
[  299.191057][  T306] usbhid 3-1:1.0: can't add hid device: -71
[  299.203145][  T306] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  299.234899][  T306] usb 3-1: USB disconnect, device number 91
[  299.248648][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.506409][ T6927] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.610627][ T6934] input: syz1 as /devices/virtual/input/input39
[  299.704381][  T306] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  299.843108][  T306] usb 3-1: device descriptor read/64, error -71
[  300.093108][  T306] usb 3-1: device descriptor read/64, error -71
[  300.343126][  T306] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  300.413106][  T307] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  300.483098][  T306] usb 3-1: device descriptor read/64, error -71
[  300.533126][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  300.563119][  T307] usb 5-1: Using ep0 maxpacket: 32
[  300.575149][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  300.590854][  T307] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  300.612555][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  300.623664][  T307] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  300.634054][  T307] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  300.647691][  T307] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  300.657407][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.669781][  T307] usb 5-1: config 0 descriptor??
[  300.693136][    T9] usb 4-1: Using ep0 maxpacket: 16
[  300.701270][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.712902][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  300.722560][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  300.738150][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  300.743143][  T306] usb 3-1: device descriptor read/64, error -71
[  300.748912][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.762205][    T9] usb 4-1: Product: syz
[  300.767113][    T9] usb 4-1: Manufacturer: syz
[  300.771752][    T9] usb 4-1: SerialNumber: syz
[  300.781222][ T6962] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  300.791902][    T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  300.800157][    T9] cdc_ncm 4-1:1.0: bind() failure
[  300.863563][  T306] usb usb3-port1: attempt power cycle
[  300.881771][  T307] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  301.002878][  T305] usb 4-1: USB disconnect, device number 34
[  301.143772][   T36] kauditd_printk_skb: 2221 callbacks suppressed
[  301.143790][   T36] audit: type=1400 audit(2000000155.459:59708): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.213134][  T306] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  301.233522][ T6963] binder: Bad value for 'max'
[  301.238274][   T36] audit: type=1400 audit(2000000155.549:59709): avc:  denied  { mounton } for  pid=6957 comm="syz.4.2561" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  301.255085][  T306] usb 3-1: device descriptor read/8, error -71
[  301.263762][   T36] audit: type=1400 audit(2000000155.559:59710): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.292587][   T36] audit: type=1400 audit(2000000155.569:59711): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.317774][   T36] audit: type=1400 audit(2000000155.569:59712): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.342902][   T36] audit: type=1400 audit(2000000155.569:59713): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.371507][   T36] audit: type=1400 audit(2000000155.569:59714): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.396636][   T36] audit: type=1400 audit(2000000155.579:59715): avc:  denied  { ioctl } for  pid=6921 comm="syz.2.2548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  301.422968][   T36] audit: type=1400 audit(2000000155.609:59716): avc:  denied  { create } for  pid=6964 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  301.446041][   T36] audit: type=1400 audit(2000000155.609:59717): avc:  denied  { create } for  pid=6964 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  301.446113][  T306] usb 3-1: device descriptor read/8, error -71
[  301.610220][ T6974] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  301.621493][ T6974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1375
[  301.713132][  T306] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  301.761913][ T6975] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2566'.
[  301.779780][  T306] usb 3-1: device descriptor read/8, error -71
[  301.915937][  T306] usb 3-1: device descriptor read/8, error -71
[  302.023235][  T306] usb usb3-port1: unable to enumerate USB device
[  302.033774][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  302.185501][    T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  302.194667][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.204506][    T9] usb 4-1: config 0 descriptor??
[  302.419773][    T9] usb 4-1: Cannot read MAC address
[  302.430286][    T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  302.452066][    T9] usb 4-1: USB disconnect, device number 35
[  302.893116][  T599] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  302.984419][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2575'.
[  303.043149][  T599] usb 3-1: device descriptor read/64, error -71
[  303.140311][   T10] usb 5-1: USB disconnect, device number 97
[  303.152171][   T10] usblp0: removed
[  303.233128][  T305] usb 4-1: new low-speed USB device number 36 using dummy_hcd
[  303.258072][ T6996] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  303.283096][  T599] usb 3-1: device descriptor read/64, error -71
[  303.383118][  T305] usb 4-1: device descriptor read/64, error -71
[  303.438337][ T7004] binder: Unknown parameter 'dirsQ'
[  303.533128][  T599] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  303.548716][ T7004] binder: Unknown parameter 'dirsQ'
[  303.643122][  T305] usb 4-1: device descriptor read/64, error -71
[  303.673110][  T599] usb 3-1: device descriptor read/64, error -71
[  303.685398][ T7009] fuse: Unknown parameter '¡Ôvl鼂'Ñ�…Ö
Ÿ5óº-;´½ÝŒ†;*©¯	ƒ ì�¢èñV¥øJ
 ÉDP#Ô© ¾Ê)[…Ögñv×’¦Û•¦¤;—!-)E¯ur˜D>_Ÿ]³NöO±0x00000000000000041844674407370955161500000000000000000000'
[  303.706471][ T7009] fuse: Unknown parameter 'Ã�ÿ'
[  303.778599][ T7009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  303.883107][  T305] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  303.913113][  T599] usb 3-1: device descriptor read/64, error -71
[  304.033139][  T599] usb usb3-port1: attempt power cycle
[  304.038675][  T305] usb 4-1: device descriptor read/64, error -71
[  304.283120][  T305] usb 4-1: device descriptor read/64, error -71
[  304.383130][  T599] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  304.393647][  T305] usb usb4-port1: attempt power cycle
[  304.405330][  T599] usb 3-1: device descriptor read/8, error -71
[  304.535489][  T599] usb 3-1: device descriptor read/8, error -71
[  304.667427][ T7022] overlayfs: failed to clone upperpath
[  304.733116][  T305] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  304.775132][  T305] usb 4-1: device descriptor read/8, error -71
[  304.783109][  T599] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  304.805730][  T599] usb 3-1: device descriptor read/8, error -71
[  304.906075][  T305] usb 4-1: device descriptor read/8, error -71
[  304.935993][  T599] usb 3-1: device descriptor read/8, error -71
[  305.053229][  T599] usb usb3-port1: unable to enumerate USB device
[  305.153110][  T305] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[  305.175326][  T305] usb 4-1: device descriptor read/8, error -71
[  305.305406][  T305] usb 4-1: device descriptor read/8, error -71
[  305.413203][  T305] usb usb4-port1: unable to enumerate USB device
[  305.838232][ T7066] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  305.879767][ T7066] SELinux: failed to load policy
[  306.124121][ T7082] netlink: 'syz.5.2608': attribute type 4 has an invalid length.
[  306.153097][   T36] kauditd_printk_skb: 1321 callbacks suppressed
[  306.153115][   T36] audit: type=1400 audit(2000000160.459:61039): avc:  denied  { read write } for  pid=6747 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.205127][   T36] audit: type=1400 audit(2000000160.459:61040): avc:  denied  { read write open } for  pid=6747 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.244758][   T36] audit: type=1400 audit(2000000160.459:61041): avc:  denied  { ioctl } for  pid=6747 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.261022][ T7079] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.270596][ T7086] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.279697][ T7089] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.290266][ T7089] audit: audit_lost=235 audit_rate_limit=0 audit_backlog_limit=64
[  306.296698][ T7083] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.299520][ T7079] audit: audit_lost=236 audit_rate_limit=0 audit_backlog_limit=64
[  306.313118][ T7086] audit: audit_lost=237 audit_rate_limit=0 audit_backlog_limit=64
[  306.603115][    T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  306.611296][  T307] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[  306.763110][  T307] usb 5-1: device descriptor read/64, error -71
[  306.783093][    T9] usb 3-1: Using ep0 maxpacket: 8
[  306.795633][    T9] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  306.810474][    T9] usb 3-1: config 0 has no interface number 0
[  306.825539][    T9] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  306.843461][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.870087][    T9] usb 3-1: config 0 descriptor??
[  306.917309][ T7111] rust_binder: Write failure EFAULT in pid:1411
[  307.013117][  T307] usb 5-1: device descriptor read/64, error -71
[  307.085773][    T9] usb 3-1: USB disconnect, device number 100
[  307.263120][  T307] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[  307.403191][  T307] usb 5-1: device descriptor read/64, error -71
[  307.643115][  T307] usb 5-1: device descriptor read/64, error -71
[  307.686772][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'.
[  307.753671][  T307] usb usb5-port1: attempt power cycle
[  307.855461][ T7133] @: renamed from vlan0 (while UP)
[  308.018014][ T7141] binder: Unknown parameter 'ÿÿ00000000000000000006'
[  308.113140][  T307] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[  308.155467][  T307] usb 5-1: device descriptor read/8, error -71
[  308.291070][  T307] usb 5-1: device descriptor read/8, error -71
[  308.358441][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.368355][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.375508][ T7148] bridge_slave_0: entered allmulticast mode
[  308.388808][ T7148] bridge_slave_0: entered promiscuous mode
[  308.399968][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.407113][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.415158][ T7148] bridge_slave_1: entered allmulticast mode
[  308.421862][ T7148] bridge_slave_1: entered promiscuous mode
[  308.495395][  T303] bridge_slave_1: left allmulticast mode
[  308.501087][  T303] bridge_slave_1: left promiscuous mode
[  308.523514][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.540259][  T303] bridge_slave_0: left allmulticast mode
[  308.546293][  T303] bridge_slave_0: left promiscuous mode
[  308.552124][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.573267][  T307] usb 5-1: new full-speed USB device number 101 using dummy_hcd
[  308.606078][  T307] usb 5-1: device descriptor read/8, error -71
[  308.735616][  T307] usb 5-1: device descriptor read/8, error -71
[  308.758412][  T303] tipc: Left network mode
[  308.764272][  T303] veth1_macvtap: left promiscuous mode
[  308.769931][  T303] veth0_vlan: left promiscuous mode
[  308.844766][  T307] usb usb5-port1: unable to enumerate USB device
[  308.927466][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.934587][ T7148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.941885][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.948989][ T7148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.029591][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.038726][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.073728][  T330] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.080838][  T330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.122215][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.129335][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.327128][ T7178] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  309.346199][ T7148] veth0_vlan: entered promiscuous mode
[  309.411186][ T7180] binder: Bad value for 'stats'
[  309.443201][ T7148] veth1_macvtap: entered promiscuous mode
[  309.563123][    T9] usb 5-1: new low-speed USB device number 102 using dummy_hcd
[  309.645193][ T7186] fuse: Bad value for 'fd'
[  309.660912][ T7185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  309.660978][ T7185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  309.725992][    T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  309.745122][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.765624][    T9] usb 5-1: config 0 descriptor??
[  310.146490][ T7202] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  310.243125][   T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  310.394613][   T10] usb 4-1: device descriptor read/64, error -71
[  310.515035][ T7210] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  310.515070][ T7210] rust_binder: Error in use_page_slow: EBUSY
[  310.544786][ T7210] rust_binder: use_range failure EBUSY
[  310.551042][ T7210] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  310.565761][ T7210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  310.581575][ T7210] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  310.599488][ T7210] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:21
[  310.663196][   T10] usb 4-1: device descriptor read/64, error -71
[  310.824090][  T599] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  310.923216][   T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  310.940317][ T7223] rust_binder: Error while translating object.
[  310.940363][ T7223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  310.947178][ T7223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:32
[  310.996167][  T599] usb 3-1: unable to get BOS descriptor or descriptor too short
[  311.015302][  T599] usb 3-1: config 0 has no interfaces?
[  311.026365][  T599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  311.035575][  T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.053090][  T599] usb 3-1: Product: syz
[  311.057296][  T599] usb 3-1: Manufacturer: syz
[  311.061911][  T599] usb 3-1: SerialNumber: syz
[  311.073174][   T10] usb 4-1: device descriptor read/64, error -71
[  311.088199][ T7225] syzkaller0: entered allmulticast mode
[  311.096513][  T599] usb 3-1: config 0 descriptor??
[  311.113323][ T7225] fuse: Invalid rootmode
[  311.177702][   T36] kauditd_printk_skb: 2451 callbacks suppressed
[  311.177721][   T36] audit: type=1400 audit(2000000165.489:63465): avc:  denied  { read write } for  pid=7148 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.212933][ T7178] rust_binder: Error while translating object.
[  311.213006][ T7178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  311.224760][ T7178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384
[  311.240739][   T36] audit: type=1400 audit(2000000165.489:63466): avc:  denied  { read write open } for  pid=7148 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.259561][ T7178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:384
[  311.275702][   T36] audit: type=1400 audit(2000000165.489:63467): avc:  denied  { ioctl } for  pid=7148 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.311630][    T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  311.321726][    T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  311.332098][    T9] asix 5-1:0.0: probe with driver asix failed with error -71
[  311.333955][  T599] usb 3-1: USB disconnect, device number 101
[  311.339540][   T36] audit: type=1400 audit(2000000165.519:63468): avc:  denied  { map } for  pid=7177 comm="syz.4.2647" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  311.369685][   T10] usb 4-1: device descriptor read/64, error -71
[  311.377917][    T9] usb 5-1: USB disconnect, device number 102
[  311.395972][   T36] audit: type=1400 audit(2000000165.519:63469): avc:  denied  { read } for  pid=7177 comm="syz.4.2647" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  311.421503][   T36] audit: type=1400 audit(2000000165.519:63470): avc:  denied  { ioctl } for  pid=7177 comm="syz.4.2647" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  311.477697][   T36] audit: type=1400 audit(2000000165.519:63471): avc:  denied  { call } for  pid=7177 comm="syz.4.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  311.497530][   T36] audit: type=1400 audit(2000000165.519:63472): avc:  denied  { transfer } for  pid=7177 comm="syz.4.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  311.503699][   T10] usb usb4-port1: attempt power cycle
[  311.519615][ T7231] rust_binder: Write failure EINVAL in pid:38
[  311.522731][   T36] audit: type=1400 audit(2000000165.529:63473): avc:  denied  { ioctl } for  pid=7193 comm="syz.3.2652" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.553898][   T36] audit: type=1400 audit(2000000165.539:63474): avc:  denied  { ioctl } for  pid=7193 comm="syz.3.2652" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.853212][   T10] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  311.909742][   T10] usb 4-1: device descriptor read/8, error -71
[  311.922552][ T7237] overlayfs: overlapping lowerdir path
[  311.945724][ T7239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  311.949749][ T7239] rust_binder: Error in use_page_slow: ESRCH
[  311.963103][ T7239] rust_binder: use_range failure ESRCH
[  311.972405][ T7239] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  311.987406][ T7239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  312.005545][ T7239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:390
[  312.055652][   T10] usb 4-1: device descriptor read/8, error -71
[  312.158494][ T7246] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.158911][ T7246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392
[  312.323148][   T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  312.361343][   T10] usb 4-1: device descriptor read/8, error -71
[  312.497671][   T10] usb 4-1: device descriptor read/8, error -71
[  312.624914][   T10] usb usb4-port1: unable to enumerate USB device
[  312.683132][  T599] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  312.834030][  T599] usb 3-1: Using ep0 maxpacket: 8
[  312.862190][  T599] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  312.879943][  T599] usb 3-1: config 179 has no interface number 0
[  312.888943][  T599] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  312.906130][  T599] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  312.918116][  T599] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  312.953695][  T599] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  312.983106][  T599] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  313.003468][  T599] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  313.013646][  T599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.035498][ T7256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  313.085481][ T7275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  313.094556][ T7279] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2684'.
[  313.293107][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  313.443105][    T9] usb 6-1: device descriptor read/64, error -71
[  313.476108][  T599] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input40
[  313.693129][    T9] usb 6-1: device descriptor read/64, error -71
[  313.873130][  T307] usb 5-1: new full-speed USB device number 103 using dummy_hcd
[  313.884076][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.896653][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.943126][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  313.973100][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  314.023113][  T307] usb 5-1: device descriptor read/64, error -71
[  314.083140][    T9] usb 6-1: device descriptor read/64, error -71
[  314.113124][   T10] usb 4-1: device descriptor read/64, error -71
[  314.263124][  T307] usb 5-1: device descriptor read/64, error -71
[  314.320324][  T423] usb 3-1: USB disconnect, device number 102
[  314.320416][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  314.326634][    T9] usb 6-1: device descriptor read/64, error -71
[  314.334734][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  314.350629][  T423] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  314.362619][   T10] usb 4-1: device descriptor read/64, error -71
[  314.473712][    T9] usb usb6-port1: attempt power cycle
[  314.503248][  T307] usb 5-1: new full-speed USB device number 104 using dummy_hcd
[  314.603145][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  314.643171][  T307] usb 5-1: device descriptor read/64, error -71
[  314.733230][   T10] usb 4-1: device descriptor read/64, error -71
[  314.813252][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  314.835146][    T9] usb 6-1: device descriptor read/8, error -71
[  314.883167][  T307] usb 5-1: device descriptor read/64, error -71
[  314.965152][    T9] usb 6-1: device descriptor read/8, error -71
[  314.973102][   T10] usb 4-1: device descriptor read/64, error -71
[  314.993228][  T307] usb usb5-port1: attempt power cycle
[  315.083506][   T10] usb usb4-port1: attempt power cycle
[  315.203119][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  315.225496][    T9] usb 6-1: device descriptor read/8, error -71
[  315.333104][  T307] usb 5-1: new full-speed USB device number 105 using dummy_hcd
[  315.355403][    T9] usb 6-1: device descriptor read/8, error -71
[  315.361654][  T307] usb 5-1: device descriptor read/8, error -71
[  315.423132][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  315.445137][   T10] usb 4-1: device descriptor read/8, error -71
[  315.473189][    T9] usb usb6-port1: unable to enumerate USB device
[  315.496157][  T307] usb 5-1: device descriptor read/8, error -71
[  315.575126][   T10] usb 4-1: device descriptor read/8, error -71
[  315.733110][  T307] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[  315.785600][  T307] usb 5-1: device descriptor read/8, error -71
[  315.813121][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  315.848765][   T10] usb 4-1: device descriptor read/8, error -71
[  315.915549][  T307] usb 5-1: device descriptor read/8, error -71
[  315.985004][   T10] usb 4-1: device descriptor read/8, error -71
[  316.023437][  T307] usb usb5-port1: unable to enumerate USB device
[  316.097481][   T10] usb usb4-port1: unable to enumerate USB device
[  316.183329][   T36] kauditd_printk_skb: 1436 callbacks suppressed
[  316.183349][   T36] audit: type=1400 audit(2000000170.499:64911): avc:  denied  { ioctl } for  pid=7148 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.255668][   T36] audit: type=1400 audit(2000000170.559:64912): avc:  denied  { read write } for  pid=7318 comm="syz.2.2699" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  316.289136][   T36] audit: type=1400 audit(2000000170.559:64913): avc:  denied  { read write open } for  pid=7318 comm="syz.2.2699" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  316.318630][   T36] audit: type=1400 audit(2000000170.559:64914): avc:  denied  { read } for  pid=7318 comm="syz.2.2699" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  316.341509][   T36] audit: type=1400 audit(2000000170.559:64915): avc:  denied  { read open } for  pid=7318 comm="syz.2.2699" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  316.365187][   T36] audit: type=1400 audit(2000000170.559:64916): avc:  denied  { ioctl } for  pid=7318 comm="syz.2.2699" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  316.390017][   T36] audit: type=1400 audit(2000000170.569:64917): avc:  denied  { read write } for  pid=7319 comm="syz.5.2700" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  316.413902][   T36] audit: type=1400 audit(2000000170.569:64918): avc:  denied  { read write open } for  pid=7319 comm="syz.5.2700" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  316.438567][   T36] audit: type=1400 audit(2000000170.569:64919): avc:  denied  { ioctl } for  pid=7319 comm="syz.5.2700" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  316.463762][   T36] audit: type=1400 audit(2000000170.569:64920): avc:  denied  { ioctl } for  pid=7319 comm="syz.5.2700" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  316.502710][  T305] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  316.723126][  T305] usb 6-1: Using ep0 maxpacket: 16
[  316.736267][  T305] usb 6-1: config 4 has an invalid interface number: 15 but max is 0
[  316.764791][  T305] usb 6-1: config 4 has no interface number 0
[  316.770941][  T305] usb 6-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  316.788985][  T305] usb 6-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  316.806282][  T305] usb 6-1: config 4 interface 15 has no altsetting 0
[  316.819720][  T305] usb 6-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44
[  316.830566][  T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.839686][  T305] usb 6-1: Product: syz
[  316.845301][  T305] usb 6-1: Manufacturer: syz
[  316.850086][  T305] usb 6-1: SerialNumber: syz
[  316.862114][ T7321] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  316.871623][ T7321] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  317.092572][ T7321] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  317.103110][   T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  317.108513][ T7321] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  317.243113][   T10] usb 4-1: device descriptor read/64, error -71
[  317.483098][   T10] usb 4-1: device descriptor read/64, error -71
[  317.733146][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  317.873141][   T10] usb 4-1: device descriptor read/64, error -71
[  318.003118][  T599] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  318.113113][   T10] usb 4-1: device descriptor read/64, error -71
[  318.143100][ T7298] usb 5-1: new full-speed USB device number 107 using dummy_hcd
[  318.173109][  T599] usb 3-1: Using ep0 maxpacket: 8
[  318.180841][  T599] usb 3-1: config 1 interface 0 has no altsetting 0
[  318.193430][  T599] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.40
[  318.214724][  T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.222768][  T599] usb 3-1: Product: syz
[  318.223974][   T10] usb usb4-port1: attempt power cycle
[  318.233846][  T599] usb 3-1: Manufacturer: syz
[  318.238554][  T599] usb 3-1: SerialNumber: syz
[  318.293100][ T7298] usb 5-1: device descriptor read/64, error -71
[  318.448022][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.471914][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.500112][  T599] usbhid 3-1:1.0: can't add hid device: -71
[  318.508976][  T599] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  318.523591][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.533998][ T7298] usb 5-1: device descriptor read/64, error -71
[  318.545868][  T599] usb 3-1: USB disconnect, device number 103
[  318.556056][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.573101][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  318.601056][   T10] usb 4-1: device descriptor read/8, error -71
[  318.745886][   T10] usb 4-1: device descriptor read/8, error -71
[  318.773139][ T7298] usb 5-1: new full-speed USB device number 108 using dummy_hcd
[  318.782853][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71
[  318.803329][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  318.815170][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.826284][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.837338][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.848715][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.859816][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  318.871772][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.882797][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  318.893902][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  318.904877][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  318.915827][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  318.926861][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  318.933136][ T7298] usb 5-1: device descriptor read/64, error -71
[  318.938785][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  318.954965][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  318.966019][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  318.977052][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  318.988130][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  318.993127][   T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  319.003162][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  319.019261][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  319.035682][   T10] usb 4-1: device descriptor read/8, error -71
[  319.043359][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  319.059228][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  319.070334][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  319.082608][  T305] ax88179_178a 6-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  319.106458][  T305] ax88179_178a 6-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, Toshiba USB Ethernet Adapter, 3c:0c:2e:00:00:00
[  319.143199][  T305] usb 6-1: USB disconnect, device number 6
[  319.149566][  T305] ax88179_178a 6-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, Toshiba USB Ethernet Adapter
[  319.192615][   T10] usb 4-1: device descriptor read/8, error -71
[  319.203187][ T7298] usb 5-1: device descriptor read/64, error -71
[  319.303343][   T10] usb usb4-port1: unable to enumerate USB device
[  319.313232][ T7298] usb usb5-port1: attempt power cycle
[  319.363128][    T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  319.494706][ T7360] SELinux:  Context /dev/kvm is not valid (left unmapped).
[  319.513127][    T9] usb 3-1: Using ep0 maxpacket: 16
[  319.520956][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.532720][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  319.545630][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  319.554752][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.564813][    T9] usb 3-1: config 0 descriptor??
[  319.663140][ T7298] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[  319.697501][ T7298] usb 5-1: device descriptor read/8, error -71
[  319.837457][ T7298] usb 5-1: device descriptor read/8, error -71
[  319.896586][ T7373] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.917614][ T7373] rust_binder: Error in use_page_slow: ESRCH
[  319.931177][ T7373] rust_binder: use_range failure ESRCH
[  319.937322][ T7373] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  319.942957][ T7373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  319.951017][ T7373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1455
[  319.981720][    T9] microsoft 0003:045E:07DA.0011: invalid report_count 20480
[  320.005366][    T9] microsoft 0003:045E:07DA.0011: item 0 2 1 9 parsing failed
[  320.013025][    T9] microsoft 0003:045E:07DA.0011: parse failed
[  320.019693][    T9] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22
[  320.093118][ T7298] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[  320.094882][ T7376] netlink: 'syz.3.2721': attribute type 4 has an invalid length.
[  320.121014][ T7376] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  320.131310][ T7376] SELinux: failed to load policy
[  320.135705][ T7298] usb 5-1: device descriptor read/8, error -71
[  320.182740][  T599] usb 3-1: USB disconnect, device number 104
[  320.207319][ T7381] rust_binder: Write failure EFAULT in pid:1462
[  320.265867][ T7298] usb 5-1: device descriptor read/8, error -71
[  320.273129][  T305] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  320.323814][ T7390] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.383601][ T7298] usb usb5-port1: unable to enumerate USB device
[  320.388767][ T7397] netlink: 'syz.3.2728': attribute type 4 has an invalid length.
[  320.410653][ T7397] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  320.420973][ T7397] SELinux: failed to load policy
[  320.435251][  T305] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  320.443443][  T305] usb 6-1: config 0 has no interface number 0
[  320.449535][  T305] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  320.460326][  T305] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  320.471022][  T305] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  320.482581][  T305] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x9 has an invalid bInterval 23, changing to 4
[  320.493615][  T305] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  320.507622][  T305] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  320.517133][  T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.529069][  T305] usb 6-1: config 0 descriptor??
[  320.538804][ T7369] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  320.599487][ T7401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1481
[  320.763612][  T423] usb 6-1: USB disconnect, device number 7
[  320.961666][ T7414] FAULT_INJECTION: forcing a failure.
[  320.961666][ T7414] name failslab, interval 1, probability 0, space 0, times 0
[  320.974627][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.4.2734 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  320.974661][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.974718][ T7414] Call Trace:
[  320.974725][ T7414]  <TASK>
[  320.974734][ T7414]  __dump_stack+0x21/0x30
[  320.974763][ T7414]  dump_stack_lvl+0x10c/0x190
[  320.974796][ T7414]  ? __cfi_dump_stack_lvl+0x10/0x10
[  320.974825][ T7414]  ? skb_put+0x112/0x1f0
[  320.974859][ T7414]  dump_stack+0x19/0x20
[  320.974885][ T7414]  should_fail_ex+0x3d9/0x530
[  320.974911][ T7414]  should_failslab+0xac/0x100
[  320.974939][ T7414]  __kmalloc_node_track_caller_noprof+0x68/0x440
[  320.974967][ T7414]  ? sidtab_sid2str_get+0x139/0x370
[  320.975002][ T7414]  kmemdup_noprof+0x31/0x80
[  320.975028][ T7414]  sidtab_sid2str_get+0x139/0x370
[  320.975061][ T7414]  security_sid_to_context_core+0x30d/0x5d0
[  320.975093][ T7414]  security_sid_to_context+0x2e/0x50
[  320.975117][ T7414]  avc_audit_post_callback+0x198/0x780
[  320.975140][ T7414]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  320.975163][ T7414]  ? __cfi_audit_log_format+0x10/0x10
[  320.975184][ T7414]  ? audit_log_untrustedstring+0xea/0x100
[  320.975206][ T7414]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  320.975229][ T7414]  common_lsm_audit+0x147a/0x1860
[  320.975250][ T7414]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  320.975280][ T7414]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  320.975303][ T7414]  ? __cfi_common_lsm_audit+0x10/0x10
[  320.975324][ T7414]  ? avc_denied+0x112/0x180
[  320.975346][ T7414]  slow_avc_audit+0x18d/0x1f0
[  320.975367][ T7414]  ? __cfi_slow_avc_audit+0x10/0x10
[  320.975397][ T7414]  ? avc_has_perm_noaudit+0x21c/0x360
[  320.975420][ T7414]  avc_has_perm+0x1cd/0x220
[  320.975442][ T7414]  ? __cfi_avc_has_perm+0x10/0x10
[  320.975463][ T7414]  ? __kasan_check_write+0x18/0x20
[  320.975487][ T7414]  ? proc_fail_nth_write+0x17e/0x210
[  320.975508][ T7414]  selinux_mmap_file+0x1f3/0x320
[  320.975557][ T7414]  ? __cfi_selinux_mmap_file+0x10/0x10
[  320.975589][ T7414]  ? vfs_write+0x8ba/0xe80
[  320.975615][ T7414]  security_mmap_file+0x2af/0x350
[  320.975646][ T7414]  vm_mmap_pgoff+0x11d/0x4e0
[  320.975679][ T7414]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  320.975705][ T7414]  ? __fget_files+0x2c5/0x340
[  320.975734][ T7414]  ksys_mmap_pgoff+0x166/0x1e0
[  320.975761][ T7414]  __x64_sys_mmap+0x121/0x140
[  320.975789][ T7414]  x64_sys_call+0x13bf/0x2ee0
[  320.975818][ T7414]  do_syscall_64+0x58/0xf0
[  320.975845][ T7414]  ? clear_bhb_loop+0x35/0x90
[  320.975875][ T7414]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  320.975907][ T7414] RIP: 0033:0x7f5c3e18e929
[  320.975925][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.975945][ T7414] RSP: 002b:00007f5c3ef54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  320.975968][ T7414] RAX: ffffffffffffffda RBX: 00007f5c3e3b5fa0 RCX: 00007f5c3e18e929
[  320.975985][ T7414] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000
[  320.976006][ T7414] RBP: 00007f5c3ef54090 R08: 0000000000000003 R09: 000000004758f000
[  320.976021][ T7414] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  320.976035][ T7414] R13: 0000000000000000 R14: 00007f5c3e3b5fa0 R15: 00007ffe1bf2ee68
[  320.976053][ T7414]  </TASK>
[  321.324604][   T36] kauditd_printk_skb: 1382 callbacks suppressed
[  321.324623][   T36] audit: type=1400 audit(2000000175.629:66303): avc:  denied  { read write } for  pid=5638 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  321.395684][   T36] audit: type=1400 audit(2000000175.659:66304): avc:  denied  { read write open } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  321.472029][   T36] audit: type=1400 audit(2000000175.659:66305): avc:  denied  { ioctl } for  pid=5638 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  321.498591][   T36] audit: type=1400 audit(2000000175.679:66306): avc:  denied  { read } for  pid=7417 comm="syz.4.2735" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  321.522285][   T36] audit: type=1400 audit(2000000175.679:66307): avc:  denied  { read open } for  pid=7417 comm="syz.4.2735" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  321.548336][   T36] audit: type=1400 audit(2000000175.679:66308): avc:  denied  { read } for  pid=7417 comm="syz.4.2735" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  321.571084][   T36] audit: type=1400 audit(2000000175.679:66309): avc:  denied  { read open } for  pid=7417 comm="syz.4.2735" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  321.594729][   T36] audit: type=1400 audit(2000000175.679:66310): avc:  denied  { read write } for  pid=7417 comm="syz.4.2735" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  321.618211][   T36] audit: type=1400 audit(2000000175.679:66311): avc:  denied  { read write open } for  pid=7417 comm="syz.4.2735" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  321.642458][   T36] audit: type=1400 audit(2000000175.679:66312): avc:  denied  { ioctl } for  pid=7417 comm="syz.4.2735" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  322.213122][  T599] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  322.353130][  T599] usb 6-1: device descriptor read/64, error -71
[  322.411872][ T7439] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  322.473879][ T7444] overlayfs: missing 'lowerdir'
[  322.593519][ T7448] random: crng reseeded on system resumption
[  322.603110][  T599] usb 6-1: device descriptor read/64, error -71
[  322.758678][ T7456] FAULT_INJECTION: forcing a failure.
[  322.758678][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.780234][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.2.2747 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  322.780270][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  322.780284][ T7456] Call Trace:
[  322.780292][ T7456]  <TASK>
[  322.780301][ T7456]  __dump_stack+0x21/0x30
[  322.780332][ T7456]  dump_stack_lvl+0x10c/0x190
[  322.780356][ T7456]  ? __cfi_dump_stack_lvl+0x10/0x10
[  322.780381][ T7456]  ? __cfi__raw_spin_lock+0x10/0x10
[  322.780408][ T7456]  ? __asan_memcpy+0x5a/0x80
[  322.780432][ T7456]  dump_stack+0x19/0x20
[  322.780456][ T7456]  should_fail_ex+0x3d9/0x530
[  322.780480][ T7456]  should_fail+0xf/0x20
[  322.780501][ T7456]  should_fail_usercopy+0x1e/0x30
[  322.780526][ T7456]  _copy_to_iter+0x3bb/0x14b0
[  322.780556][ T7456]  ? __cfi__copy_to_iter+0x10/0x10
[  322.780582][ T7456]  ? rhashtable_walk_next+0x22e/0x300
[  322.780607][ T7456]  ? check_stack_object+0x82/0x140
[  322.780632][ T7456]  ? __virt_addr_valid+0x2a6/0x380
[  322.780663][ T7456]  seq_read_iter+0xd39/0xfe0
[  322.780696][ T7456]  seq_read+0x2e3/0x3d0
[  322.780724][ T7456]  ? kstrtouint+0x78/0xf0
[  322.780746][ T7456]  ? __cfi_seq_read+0x10/0x10
[  322.780788][ T7456]  ? __cfi_selinux_file_permission+0x10/0x10
[  322.780824][ T7456]  ? __import_iovec+0x5ad/0x7d0
[  322.780853][ T7456]  ? __cfi_seq_read+0x10/0x10
[  322.780881][ T7456]  proc_reg_read+0x1f7/0x2f0
[  322.780905][ T7456]  vfs_readv+0x62b/0xa50
[  322.780934][ T7456]  ? __cfi_proc_reg_read+0x10/0x10
[  322.780959][ T7456]  ? do_readv+0x2d0/0x2d0
[  322.780988][ T7456]  ? __cfi_mutex_unlock+0x10/0x10
[  322.781010][ T7456]  __x64_sys_preadv+0x197/0x2a0
[  322.781037][ T7456]  ? __cfi___x64_sys_preadv+0x10/0x10
[  322.781063][ T7456]  ? __kasan_check_read+0x15/0x20
[  322.781088][ T7456]  x64_sys_call+0x1ee9/0x2ee0
[  322.781113][ T7456]  do_syscall_64+0x58/0xf0
[  322.781139][ T7456]  ? clear_bhb_loop+0x35/0x90
[  322.781170][ T7456]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  322.781199][ T7456] RIP: 0033:0x7fd2d258e929
[  322.781216][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.781235][ T7456] RSP: 002b:00007fd2d343b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  322.781263][ T7456] RAX: ffffffffffffffda RBX: 00007fd2d27b5fa0 RCX: 00007fd2d258e929
[  322.781280][ T7456] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  322.781293][ T7456] RBP: 00007fd2d343b090 R08: 0000000000000001 R09: 0000000000000000
[  322.781307][ T7456] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  322.781320][ T7456] R13: 0000000000000000 R14: 00007fd2d27b5fa0 R15: 00007ffdb8554258
[  322.781337][ T7456]  </TASK>
[  323.047151][   T31] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  323.103108][  T599] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  323.205561][   T31] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  323.213730][   T31] usb 4-1: config 0 has no interface number 0
[  323.219844][   T31] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  323.230695][   T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  323.241367][   T31] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  323.253046][  T599] usb 6-1: device descriptor read/64, error -71
[  323.264063][   T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  323.275091][   T31] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  323.288140][   T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  323.297214][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.311551][   T31] usb 4-1: config 0 descriptor??
[  323.323212][  T305] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  323.333579][ T7446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  323.342562][ T7446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  323.351734][ T7465] binder: Unknown parameter ''
[  323.493105][  T599] usb 6-1: device descriptor read/64, error -71
[  323.499393][  T305] usb 3-1: Using ep0 maxpacket: 16
[  323.507006][  T305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.517140][  T305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  323.526046][  T305] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.544029][  T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.550975][ T7469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2753'.
[  323.559070][  T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.570095][  T305] usb 3-1: Product: syz
[  323.576770][   T31] usb 4-1: USB disconnect, device number 52
[  323.584210][  T305] usb 3-1: Manufacturer: syz
[  323.600324][  T305] usb 3-1: SerialNumber: syz
[  323.605981][  T599] usb usb6-port1: attempt power cycle
[  323.698130][ T7472] SELinux: security_context_str_to_sid () failed with errno=-22
[  323.794455][ T7474] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  323.794487][ T7474] rust_binder: Read failure Err(EFAULT) in pid:453
[  323.803820][ T7474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:453
[  323.895352][ T7477] kvm: user requested TSC rate below hardware speed
[  323.953138][  T599] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  323.975188][  T599] usb 6-1: device descriptor read/8, error -71
[  324.026495][  T423] usb 3-1: USB disconnect, device number 105
[  324.105063][  T599] usb 6-1: device descriptor read/8, error -71
[  324.343103][  T599] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  324.357847][ T7487] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  324.375694][  T599] usb 6-1: device descriptor read/8, error -71
[  324.536066][  T599] usb 6-1: device descriptor read/8, error -71
[  324.649348][  T599] usb usb6-port1: unable to enumerate USB device
[  324.766938][ T7504] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2768'.
[  325.231089][ T7531] rust_binder: Error in use_page_slow: ESRCH
[  325.231115][ T7531] rust_binder: use_range failure ESRCH
[  325.237812][ T7531] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  325.247087][ T7531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  325.255694][ T7531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1519
[  325.273104][  T423] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  325.463238][  T423] usb 6-1: Using ep0 maxpacket: 16
[  325.473989][  T423] usb 6-1: unable to get BOS descriptor or descriptor too short
[  325.486521][  T423] usb 6-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  325.503084][  T423] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  325.516479][  T423] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.534013][  T423] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.543532][  T423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.551560][  T423] usb 6-1: Product: syz
[  325.563104][  T423] usb 6-1: Manufacturer: syz
[  325.573123][  T423] usb 6-1: SerialNumber: syz
[  325.573128][   T31] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  325.703090][   T31] usb 3-1: device descriptor read/64, error -71
[  325.703279][    T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  325.773109][ T7298] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  325.866092][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9
[  325.877354][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26416, setting to 1024
[  325.889078][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  325.902235][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  325.911381][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.919597][ T7298] usb 4-1: device descriptor read/64, error -71
[  325.928323][    T9] usb 5-1: config 0 descriptor??
[  325.935248][ T7538] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  325.953103][   T31] usb 3-1: device descriptor read/64, error -71
[  326.163088][ T7298] usb 4-1: device descriptor read/64, error -71
[  326.193126][   T31] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  326.333166][   T31] usb 3-1: device descriptor read/64, error -71
[  326.345912][   T36] kauditd_printk_skb: 2318 callbacks suppressed
[  326.345931][   T36] audit: type=1400 audit(2000000180.659:68631): avc:  denied  { ioctl } for  pid=7537 comm="syz.4.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.378275][   T36] audit: type=1400 audit(2000000180.659:68632): avc:  denied  { ioctl } for  pid=7537 comm="syz.4.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.403284][   T36] audit: type=1400 audit(2000000180.689:68633): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.433117][ T7298] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  326.441302][   T36] audit: type=1400 audit(2000000180.749:68634): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.467119][   T36] audit: type=1400 audit(2000000180.749:68635): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.493104][   T36] audit: type=1400 audit(2000000180.749:68636): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.518359][   T36] audit: type=1400 audit(2000000180.749:68637): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.543577][   T36] audit: type=1400 audit(2000000180.759:68638): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.568738][   T36] audit: type=1400 audit(2000000180.759:68639): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.575590][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.593897][   T36] audit: type=1400 audit(2000000180.759:68640): avc:  denied  { ioctl } for  pid=7532 comm="syz.3.2779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.612535][ T7298] usb 4-1: device descriptor read/64, error -71
[  326.630707][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.647015][  T307] hid-generic C98F:0003:0000.0012: item fetching failed at offset 0/2
[  326.655578][  T307] hid-generic C98F:0003:0000.0012: probe with driver hid-generic failed with error -22
[  326.753113][   T31] usb 3-1: device descriptor read/64, error -71
[  326.822627][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  326.828756][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  326.844760][    T9] usb 5-1: USB disconnect, device number 111
[  326.863185][   T31] usb usb3-port1: attempt power cycle
[  326.863615][ T7298] usb 4-1: device descriptor read/64, error -71
[  326.983721][ T7298] usb usb4-port1: attempt power cycle
[  327.203114][   T31] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  327.225867][   T31] usb 3-1: device descriptor read/8, error -71
[  327.323131][ T7298] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  327.345971][ T7298] usb 4-1: device descriptor read/8, error -71
[  327.365758][   T31] usb 3-1: device descriptor read/8, error -71
[  327.485383][ T7298] usb 4-1: device descriptor read/8, error -71
[  327.603145][   T31] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  327.625888][   T31] usb 3-1: device descriptor read/8, error -71
[  327.633330][    T9] usb 5-1: new full-speed USB device number 112 using dummy_hcd
[  327.723134][ T7298] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  327.745322][ T7298] usb 4-1: device descriptor read/8, error -71
[  327.755962][   T31] usb 3-1: device descriptor read/8, error -71
[  327.785669][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  327.796725][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  327.807581][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  327.818492][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  327.833950][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  327.843012][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.851075][    T9] usb 5-1: Product: syz
[  327.855303][    T9] usb 5-1: Manufacturer: syz
[  327.859898][    T9] usb 5-1: SerialNumber: syz
[  327.868145][ T7543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  327.873767][   T31] usb usb3-port1: unable to enumerate USB device
[  327.882221][ T7298] usb 4-1: device descriptor read/8, error -71
[  327.952371][  T423] cdc_ncm 6-1:1.0: skipping garbage
[  327.973088][  T423] cdc_ncm 6-1:1.0: skipping garbage
[  327.978410][  T423] cdc_ncm 6-1:1.0: skipping garbage
[  327.988475][  T423] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  328.002065][ T7298] usb usb4-port1: unable to enumerate USB device
[  328.009022][  T423] cdc_ncm 6-1:1.0: bind() failure
[  328.017149][  T423] usb 6-1: USB disconnect, device number 12
[  328.083092][ T7543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  328.100933][ T7543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  328.169779][ T7549] binder: Bad value for 'max'
[  328.400770][ T7561] rust_binder: Write failure EFAULT in pid:102
[  328.533131][ T7298] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  328.673099][ T7298] usb 3-1: device descriptor read/64, error -71
[  328.703137][  T305] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  328.729218][ T7543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  328.737301][ T7543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  328.853107][  T305] usb 4-1: Using ep0 maxpacket: 32
[  328.860685][  T305] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  328.868835][  T305] usb 4-1: config 0 has no interface number 0
[  328.878500][  T305] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  328.887677][  T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.895711][  T305] usb 4-1: Product: syz
[  328.899930][  T305] usb 4-1: Manufacturer: syz
[  328.904565][  T305] usb 4-1: SerialNumber: syz
[  328.911065][  T305] usb 4-1: config 0 descriptor??
[  328.918204][  T305] smsc95xx v2.0.0
[  328.921913][  T305] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  328.923140][ T7298] usb 3-1: device descriptor read/64, error -71
[  328.932061][  T305] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  328.947768][    T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  328.955090][    T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  328.962567][    T9] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  329.124393][  T423] usb 4-1: USB disconnect, device number 57
[  329.154212][    T9] cdc_ncm 5-1:1.0: setting tx_max = 184
[  329.171344][    T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  329.183392][ T7298] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  329.343123][ T7298] usb 3-1: device descriptor read/64, error -71
[  329.378815][ T7543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  329.378853][ T7543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:476
[  329.393476][ T7543] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  329.423114][ T7543] rust_binder: Read failure Err(EFAULT) in pid:476
[  329.444431][   T31] usb 5-1: USB disconnect, device number 112
[  329.468633][   T31] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  329.583269][ T7298] usb 3-1: device descriptor read/64, error -71
[  329.703993][ T7298] usb usb3-port1: attempt power cycle
[  329.728554][ T7582] FAULT_INJECTION: forcing a failure.
[  329.728554][ T7582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  329.741745][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.2796 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  329.741778][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  329.741793][ T7582] Call Trace:
[  329.741801][ T7582]  <TASK>
[  329.741821][ T7582]  __dump_stack+0x21/0x30
[  329.741849][ T7582]  dump_stack_lvl+0x10c/0x190
[  329.741873][ T7582]  ? __cfi_dump_stack_lvl+0x10/0x10
[  329.741898][ T7582]  ? unwind_get_return_address+0x51/0x90
[  329.741945][ T7582]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  329.741972][ T7582]  dump_stack+0x19/0x20
[  329.741996][ T7582]  should_fail_ex+0x3d9/0x530
[  329.742020][ T7582]  should_fail+0xf/0x20
[  329.742041][ T7582]  should_fail_usercopy+0x1e/0x30
[  329.742066][ T7582]  _copy_from_user+0x22/0xb0
[  329.742095][ T7582]  ___sys_recvmsg+0x12f/0x510
[  329.742117][ T7582]  ? __sys_recvmsg+0x280/0x280
[  329.742138][ T7582]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  329.742161][ T7582]  ? selinux_file_permission+0x309/0xb30
[  329.742194][ T7582]  ? __fget_files+0x2c5/0x340
[  329.742221][ T7582]  do_recvmmsg+0x326/0x770
[  329.742241][ T7582]  ? __sys_recvmmsg+0x290/0x290
[  329.742259][ T7582]  ? __cfi_vfs_write+0x10/0x10
[  329.742284][ T7582]  ? fput+0x1a5/0x240
[  329.742315][ T7582]  __x64_sys_recvmmsg+0x191/0x240
[  329.742335][ T7582]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  329.742355][ T7582]  ? __kasan_check_read+0x15/0x20
[  329.742378][ T7582]  x64_sys_call+0x292c/0x2ee0
[  329.742404][ T7582]  do_syscall_64+0x58/0xf0
[  329.742432][ T7582]  ? clear_bhb_loop+0x35/0x90
[  329.742465][ T7582]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  329.742494][ T7582] RIP: 0033:0x7fcf8398e929
[  329.742512][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.742531][ T7582] RSP: 002b:00007fcf84832038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  329.742555][ T7582] RAX: ffffffffffffffda RBX: 00007fcf83bb5fa0 RCX: 00007fcf8398e929
[  329.742572][ T7582] RDX: 0000000000000007 RSI: 0000200000009800 RDI: 0000000000000003
[  329.742586][ T7582] RBP: 00007fcf84832090 R08: 0000000000000000 R09: 0000000000000000
[  329.742612][ T7582] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001
[  329.742626][ T7582] R13: 0000000000000000 R14: 00007fcf83bb5fa0 R15: 00007ffed7bb9ff8
[  329.742642][ T7582]  </TASK>
[  329.823184][  T423] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  330.043099][ T7298] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  330.065966][ T7298] usb 3-1: device descriptor read/8, error -71
[  330.144752][  T423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.163088][  T423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.185872][  T423] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  330.208414][ T7298] usb 3-1: device descriptor read/8, error -71
[  330.216813][  T423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.238873][  T423] usb 6-1: config 0 descriptor??
[  330.453111][ T7298] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  330.463097][  T307] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  330.475411][  T423] usbhid 6-1:0.0: can't add hid device: -71
[  330.481781][  T423] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  330.514626][  T423] usb 6-1: USB disconnect, device number 13
[  330.517431][ T7608] cgroup: fork rejected by pids controller in /syz4
[  330.552293][ T7298] usb 3-1: device descriptor read/8, error -71
[  330.552595][  T316] udevd[316]: setting mode of /dev/bus/usb/006/013 to 020664 failed: No such file or directory
[  330.580716][  T316] udevd[316]: setting owner of /dev/bus/usb/006/013 to uid=0, gid=0 failed: No such file or directory
[  330.623087][  T307] usb 4-1: device descriptor read/64, error -71
[  330.697765][ T7298] usb 3-1: device descriptor read/8, error -71
[  330.833180][ T7298] usb usb3-port1: unable to enumerate USB device
[  330.863101][  T307] usb 4-1: device descriptor read/64, error -71
[  331.094457][  T303] bridge_slave_1: left allmulticast mode
[  331.100156][  T303] bridge_slave_1: left promiscuous mode
[  331.106968][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.113137][  T307] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  331.121915][  T303] bridge_slave_0: left allmulticast mode
[  331.128447][  T303] bridge_slave_0: left promiscuous mode
[  331.134946][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.263103][  T307] usb 4-1: device descriptor read/64, error -71
[  331.276212][  T303] veth1_macvtap: left promiscuous mode
[  331.296307][  T303] veth0_vlan: left promiscuous mode
[  331.357345][   T36] kauditd_printk_skb: 1611 callbacks suppressed
[  331.357364][   T36] audit: type=1400 audit(2000000185.669:70252): avc:  denied  { read write } for  pid=7723 comm="syz.2.2805" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  331.438666][   T36] audit: type=1400 audit(2000000185.689:70253): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.465309][   T36] audit: type=1400 audit(2000000185.689:70254): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.530153][  T307] usb 4-1: device descriptor read/64, error -71
[  331.590670][   T36] audit: type=1400 audit(2000000185.689:70255): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.630756][ T7730] rust_binder: Error while translating object.
[  331.630815][ T7730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  331.643138][   T36] audit: type=1400 audit(2000000185.689:70256): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.653137][ T7730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:122
[  331.679869][  T307] usb usb4-port1: attempt power cycle
[  331.718708][   T36] audit: type=1400 audit(2000000185.689:70257): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.748137][   T36] audit: type=1400 audit(2000000185.689:70258): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.773538][   T36] audit: type=1400 audit(2000000185.689:70259): avc:  denied  { ioctl } for  pid=7587 comm="syz.3.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.798851][   T36] audit: type=1400 audit(2000000185.699:70260): avc:  denied  { read write open } for  pid=7723 comm="syz.2.2805" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  331.823319][   T36] audit: type=1400 audit(2000000185.699:70261): avc:  denied  { ioctl } for  pid=7723 comm="syz.2.2805" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  331.850276][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.857397][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.867269][ T7726] bridge_slave_0: entered allmulticast mode
[  331.887265][ T7726] bridge_slave_0: entered promiscuous mode
[  331.912685][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.937172][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.953830][ T7726] bridge_slave_1: entered allmulticast mode
[  331.960249][ T7726] bridge_slave_1: entered promiscuous mode
[  332.063136][  T307] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  332.085975][  T307] usb 4-1: device descriptor read/8, error -71
[  332.176835][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.183919][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.191180][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.198244][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.235905][  T307] usb 4-1: device descriptor read/8, error -71
[  332.250879][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.258204][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.272652][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.279749][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.290564][  T303] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.297640][  T303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.370393][ T7726] veth0_vlan: entered promiscuous mode
[  332.403131][  T423] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  332.405066][ T7726] veth1_macvtap: entered promiscuous mode
[  332.483142][  T307] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  332.515930][  T307] usb 4-1: device descriptor read/8, error -71
[  332.563163][  T423] usb 6-1: Using ep0 maxpacket: 16
[  332.571327][  T423] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  332.583809][  T423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 37525, setting to 1024
[  332.596163][  T423] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024
[  332.614818][  T423] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  332.643846][  T423] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  332.654510][  T423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.665810][  T307] usb 4-1: device descriptor read/8, error -71
[  332.692156][  T423] usb 6-1: config 0 descriptor??
[  332.698779][ T7737] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  332.706042][ T7742] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5:
[  332.706042][ T7742] attempt to add with overflow
[  332.710310][  T423] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  332.724401][ T7742] ------------[ cut here ]------------
[  332.735536][ T7742] kernel BUG at rust/helpers/bug.c:7!
[  332.741545][ T7742] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  332.748517][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.4.2810 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  332.762000][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  332.772075][ T7742] RIP: 0010:rust_helper_BUG+0x8/0x10
[  332.773629][  T307] usb usb4-port1: unable to enumerate USB device
[  332.777410][ T7742] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f6 ac 66 4c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bc 68 2f c0 90 90 90 90 90 90 90 90 90
[  332.803350][ T7742] RSP: 0018:ffffc90000eaf3f0 EFLAGS: 00010246
[  332.809451][ T7742] RAX: 000000000000008c RBX: 1ffff920001d5e80 RCX: 687e9ddb8d6b5a00
[  332.817451][ T7742] RDX: ffffc90006284000 RSI: 00000000000067bc RDI: 00000000000067bd
[  332.825462][ T7742] RBP: ffffc90000eaf3f0 R08: ffffc90000eaf0e7 R09: 1ffff920001d5e1c
[  332.833457][ T7742] R10: dffffc0000000000 R11: fffff520001d5e1d R12: 0000000000000000
[  332.841439][ T7742] R13: dffffc0000000000 R14: ffffc90000eaf420 R15: ffffc90000eaf450
[  332.849417][ T7742] FS:  00007f7eac1ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  332.858350][ T7742] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  332.864938][ T7742] CR2: 000000110c325f44 CR3: 0000000116016000 CR4: 00000000003526b0
[  332.872919][ T7742] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006
[  332.880987][ T7742] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  332.888965][ T7742] Call Trace:
[  332.892245][ T7742]  <TASK>
[  332.895178][ T7742]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  332.902745][ T7742]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  332.910735][ T7742]  ? kernel_text_address+0xa9/0xe0
[  332.915941][ T7742]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  332.929495][ T7742]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  332.935665][ T7742]  ? arch_stack_walk+0x10b/0x170
[  332.940615][ T7742]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  332.947849][ T7742]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  332.955753][ T7742]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0
[  332.965655][ T7742]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  332.976246][ T7742]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0
[  332.988487][ T7742]  ? mas_wr_store_type+0x8eb/0x1ad0
[  332.993691][ T7742]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10
[  333.006455][ T7742]  ? mas_preallocate+0x56e/0xc60
[  333.011394][ T7742]  ? __cfi_mas_preallocate+0x10/0x10
[  333.016682][ T7742]  ? kasan_save_alloc_info+0x40/0x50
[  333.021973][ T7742]  ? __asan_memset+0x39/0x50
[  333.026586][ T7742]  mmap_region+0x1371/0x1bd0
[  333.031193][ T7742]  ? __cfi_mmap_region+0x10/0x10
[  333.036140][ T7742]  ? __kasan_check_read+0x15/0x20
[  333.041178][ T7742]  ? arch_get_unmapped_area_topdown+0x232/0x8d0
[  333.047443][ T7742]  ? file_mmap_ok+0x147/0x1a0
[  333.052128][ T7742]  do_mmap+0xb6d/0x13c0
[  333.056292][ T7742]  ? __cfi_do_mmap+0x10/0x10
[  333.060890][ T7742]  ? down_write_killable+0xe9/0x2d0
[  333.066109][ T7742]  ? __cfi_down_write_killable+0x10/0x10
[  333.071752][ T7742]  vm_mmap_pgoff+0x38f/0x4e0
[  333.076352][ T7742]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  333.081466][ T7742]  ? __fget_files+0x2c5/0x340
[  333.086156][ T7742]  ksys_mmap_pgoff+0x166/0x1e0
[  333.090929][ T7742]  __x64_sys_mmap+0x121/0x140
[  333.095618][ T7742]  x64_sys_call+0x13bf/0x2ee0
[  333.100305][ T7742]  do_syscall_64+0x58/0xf0
[  333.104731][ T7742]  ? clear_bhb_loop+0x35/0x90
[  333.109425][ T7742]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  333.115322][ T7742] RIP: 0033:0x7f7eac38e929
[  333.119731][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.139336][ T7742] RSP: 002b:00007f7eac1ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  333.147765][ T7742] RAX: ffffffffffffffda RBX: 00007f7eac5b6080 RCX: 00007f7eac38e929
[  333.155744][ T7742] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ff9000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  333.163725][ T7742] RBP: 00007f7eac410b39 R08: 0000000000000007 R09: 00000000fffff000
[  333.171713][ T7742] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000000
[  333.179694][ T7742] R13: 0000000000000000 R14: 00007f7eac5b6080 R15: 00007ffcc7b13068
[  333.187685][ T7742]  </TASK>
[  333.190713][ T7742] Modules linked in:
[  333.195127][ T7742] ---[ end trace 0000000000000000 ]---
[  333.200921][ T7742] RIP: 0010:rust_helper_BUG+0x8/0x10
[  333.225187][  T307] usb 6-1: USB disconnect, device number 14
[  333.297768][ T7742] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f6 ac 66 4c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bc 68 2f c0 90 90 90 90 90 90 90 90 90
[  333.392173][ T7742] RSP: 0018:ffffc90000eaf3f0 EFLAGS: 00010246
[  333.408781][ T7742] RAX: 000000000000008c RBX: 1ffff920001d5e80 RCX: 687e9ddb8d6b5a00
[  333.434652][ T7742] RDX: ffffc90006284000 RSI: 00000000000067bc RDI: 00000000000067bd
[  333.446797][ T7742] RBP: ffffc90000eaf3f0 R08: ffffc90000eaf0e7 R09: 1ffff920001d5e1c
[  333.460754][ T7742] R10: dffffc0000000000 R11: fffff520001d5e1d R12: 0000000000000000
[  333.477427][ T7742] R13: dffffc0000000000 R14: ffffc90000eaf420 R15: ffffc90000eaf450
[  333.503927][ T7742] FS:  00007f7eac1ca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  333.512917][ T7742] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  333.546811][ T7742] CR2: 000055d88e642b98 CR3: 0000000116016000 CR4: 00000000003526b0
[  333.563089][ T7742] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006
[  333.571170][ T7742] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  333.579300][ T7742] Kernel panic - not syncing: Fatal exception
[  333.585686][ T7742] Kernel Offset: disabled
[  333.590017][ T7742] Rebooting in 86400 seconds..