last executing test programs:

4.35607158s ago: executing program 3 (id=1465):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r1, r1, 0x22)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x808, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x676, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x8, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0xffff, 0x9, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x7, 0x6, 0x200008, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x401, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0x6, 0x400, 0x401, 0x6, 0x1, 0x34, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xa, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0xffffe24b, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x100005, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x10008, 0x4, 0x6cff, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x5, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x80, 0x0, 0xfffffffe, 0xffff, 0x0, 0x6, 0x0, 0x120000, 0x3a4e, 0x6, 0xa2ed, 0x4, 0x27], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x935, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8000007, 0x5, 0x3, 0x7fffffff, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x7, 0x5, 0x2, 0x3, 0x14c, 0x60a7, 0x80006, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x4, 0x7, 0x2, 0x8, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x2, 0xc, 0x7, 0x1, 0x6c19, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xfdff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.287365091s ago: executing program 3 (id=1466):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38)
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000280)="d179802c74d5141422a75cb26a9829c465496a73b4946ab8dd39ecf147472bdf7f7f682db6655aa2fbefb63b87acc144250fb04927b3faf9babe2006294d19a5ee", 0x41}, {&(0x7f0000000340)="68bab0cc9c27a7bbc3301425080c9b88a33f28312ed6b6a91e16075a763ef393992be49728b2f44407044eef454fd2e5d4bcf03c8109d11f31010b9a14fc2c04bee9e77116649997f3e0fbb26da96133eaf30edf1307cc7ae07e10297bdf9baf9990d19bae187bb77f5de967d3774d16b7916b61957e3ff03a1569fa18da4fa41b6e5bd189640e15b06578db713c3af7c32dba67d3d3b8fc74fe03632f37cc", 0x9f}, {&(0x7f0000000000)="3c1db36c", 0x4}, {&(0x7f0000000400)="69dc502c16cb96b011925eef57cb8fb5b260330e715124413b699d9d5b73475b4c12c26a75f74d48dad7877704fc747346365185064ec7ef313f7e601954e67c4bfdbd6ee299a5bcd4fd9d55127dffda31668b3b18079a822d095c", 0x5b}, {&(0x7f0000000580)="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", 0xc81}], 0x5)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[])
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000000000000000000004426d199bb81f8bad3963e1829962cd32a7e8613fca76005e9b2b286ff746e960ca60cb99765b8163d22a74aa3c67e1124f86502071e70d50abc9a55500800f1c16b19a7710c351d363ecf75776aeda05f659e7d32929d53903be4776fbc7ba258aa0090a83d7a82fc148edc21b126ed159648ca8b522f5ead4bb869c476d04045898e1f8dc13aa7f99853d34dbd7d53145590f2d844da577db750fcd388e5f7f768cf54a3f67752dd3ce96ee3f3afdefb4d74f508e54b3fd67ca9bb9bdeb3e4918eb99f367fa94bc9f7782d8ad78f712c495f6cf1cb42719c3c6a0b9c2b85a119bbcd1cdb7e2707aa5a0ac402977239fea3487387b858cfb138b786d3e6559e20e82512662fdedf5cfaa06287f2500c596fe791b6305b2f87a13ab3eb0549009efeea662138c1d674d224a59c75246b781f73eff44c2efd2dc079d2e26b441bab0ea15261e97ee9e50f7d006dd7e171d8631e874aa40cc5a0d60fcaa6fed5a4c6521d83adc442f9597cfacc9586e4260c91b07162aca5328abbd1cbe2448718d777a8ad8c70383ad3b82dcae6b20f8e519f2eb33e787ce7b9083615e31525a88fecb0b03edcd1fe765da9b9eef5f0ed06e32221c26a5049fa56bc266af54b3f1e3e2d02cc14d52a141638c2810f6efdc9ced9f34dd830d092190a6f8bf58892ef253c6986c8db189291c1a71f93d4f8eb737f65808eb0e6c5106c8668238f58d87e3cc7a8695f47e5221568a47f985d4faaad786b009c68240838beef53525122122d796c5c140ba81cc3aba89a0d815c25edd4", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES32=r0], 0x48}}, 0x40)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.217609491s ago: executing program 3 (id=1467):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10)
socket$inet(0x2, 0x4, 0x400)
socket$packet(0x11, 0xa, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee200009010902240001000000000904000000ff0100000724", @ANYRES16=r3], 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0xc4)
copy_file_range(r4, 0x0, r4, 0x0, 0x2, 0x99)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
close_range(r0, 0xffffffffffffffff, 0x0)

2.955890239s ago: executing program 3 (id=1471):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x80) (async)
r3 = eventfd(0x80)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x8, r3, 0x8})
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

2.852688191s ago: executing program 3 (id=1472):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) (async, rerun: 32)
r2 = epoll_create(0x3)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x80088a02, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r1, 0x2101}, {r0, 0x200}], 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x2]}, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000080)) (async)
read$FUSE(r1, &(0x7f0000009800)={0x2020}, 0x2020) (async)
ioctl$FITHAW(r0, 0xc0045878)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r6, 0x0) (async)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7) (async)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x2, 0x22}, @fda={0x66646185, 0x4, 0x2, 0x34}, @fd}, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32)

2.794009921s ago: executing program 3 (id=1473):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x10, 0xa, {0xa, 0x4, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r3=>0x0)
ioprio_get$pid(0x2, r3)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ASHMEM_SET_NAME(r2, 0x8008770b, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000280)={0x40, 0x24, 0xb4, {0xb4, 0x7, "dd74b98b8f42d29dd5d73edfe47684873aeca2f4cddd0bd2a1bbf53e93866074bdf53c786da3148cacdaa49dc96c25ba37ecabc5d602f02363de25f33b9ce104b284c45a389fbec144ea2b80662cd6e51b8b7f1c278d6414ef3ca1abf4bb2879a6514a8374cc48b8f073f711f4a98fa33af3144a54deab5b718eb1164dc05727562386940dc00c8a6da1aa40b1d41281526750cf7acf7fc3a7f06e105fde6cbadb5896c1add2e60408163381997a94d683ec"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f0000000340)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x4, [@generic={0xfb, 0x10, 0x1, "86f06d2242235a20da898a3709623444153556d6070df73f6197c2168c50ae8a472271a53dc75a097b8f48255d3552acf225587558bf2db773690ce7a36a4ec0f0b0acb23c9d4c669a8297e220e8cf26f9bfb52e2f8a84f47c209654209fbd07eb37a51a347a0d1d1735f5cae3f8586b8c448ff6282a92aaf3ef9a6f3baeeb166238370490bb9c8bd3c2bf012a7d11fb053a039d8507f55ce5ef809d3956bc183d3510f87827dab46010b27e40ac5b019cf7e7f1de326b7c237fae61f2cadaa8decb6026be8d3d537b6e97df3afd4c0fdb4f40d2d75031a24ef7acb181dc1b3b40bf0daa6ef6f2b70dda045400ff9cdbfda93187afb1728a"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xe, 0x5, 0xb839}, @wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x0, 0x1, 0x4, 0x8}, @ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x2, 0x9, "7440ad61", "b09bf49d"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x37, 0x10, 0x0, 0x8, 0x77, 0x7fff, 0x1}}}, &(0x7f0000000840)={0x84, &(0x7f00000001c0)={0x20, 0x3, 0x2e, "e81b9b07f2ca86957cd63b5bdf343cc966052573435e0d0a131bca19e2d0f3f39713f3fda2987a0a9afc7d8b0d0f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xf0f0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8000}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "c58d"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "034d"}, &(0x7f0000000740)={0x40, 0x1a, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xda}})

538.643883ms ago: executing program 2 (id=1488):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f77900400f20d866b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f784228325bb8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
setgid(0xee00)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})

319.658196ms ago: executing program 2 (id=1494):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e24, @multicast2}})
unshare(0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d46ca2db82ea7b4f97f1e99e48197142031ace3ce4fdfed2ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6c0fea5e9645110c5c4c0a94fdaf0e0a8623628f0991754a7f1ea67c8f"}}]}]}, 0xb4}}, 0x40084)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000340)={0x6, 0x1, 0x9}, 0x10)
r4 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x100800)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000440)={r1, 0x6, 0x3, r1})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a4c145dab54c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x20008000)
pread64(r0, &(0x7f0000000640)=""/15, 0xf, 0x1000)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000680)=""/166)
recvfrom$inet6(r1, &(0x7f0000000740)=""/198, 0xc6, 0x40, &(0x7f0000000840)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
connect$unix(r4, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r7 = openat(r1, &(0x7f0000000900)='./file0\x00', 0x121000, 0x1)
execveat(r7, &(0x7f0000000940)='./file0\x00', &(0x7f0000000bc0)={[&(0x7f0000000980)='[\\\x00', &(0x7f00000009c0)='\xdd\xdd\x00', &(0x7f0000000a00)='nl80211\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)='%+/[\x867.\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='(\a{+\x00', &(0x7f0000000b80)='\x00']}, &(0x7f0000000cc0)={[&(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='(\x00']}, 0x1000)
r8 = geteuid()
stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40)={0x0, <r10=>0x0}, &(0x7f0000000e80)=0xc)
mount$fuse(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x30a000, &(0x7f0000000ec0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x808}}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}, {@default_permissions}], [{@euid_lt={'euid<', r10}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/[*]('}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0xa}}, {@smackfshat={'smackfshat', 0x3d, '--@'}}, {@dont_hash}, {@dont_hash}]}})
connect$inet6(r7, &(0x7f0000001080)={0xa, 0x4e24, 0x3, @private1, 0x6}, 0x1c)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x64)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r4)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x98, r11, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000000}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9c}, @NL80211_TXQ_ATTR_CWMIN={0x6}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xa}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8aab}]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008000}, 0x4006085)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001280)=0x2, 0x4)

299.733316ms ago: executing program 2 (id=1496):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x9, 0x5, 0x4, 0x4}, {0x9, 0x7, 0x2, 0x586a}, {0xfffe, 0x8, 0x2, 0x3}, {0x4c, 0xab, 0x4, 0x3}, {0x5, 0x2, 0x40, 0xf}, {0x1, 0x7, 0x8, 0x80000001}]}) (rerun: 64)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) (async)
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020) (async)
setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x5fcb6232, {0x4, 0x20, 0x0, '\x00', {0x4, 0x801, 0xadf, 0x804, r3, 0x0, 0x2000, '\x00', 0x6, 0x0, 0x10, 0x40, {0x8, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0xfffffffffffffffa, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) (async, rerun: 64)
write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0x0, 0x0, 0x2}}, 0x50) (rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (rerun: 32)

217.305807ms ago: executing program 2 (id=1498):
r0 = socket(0x9, 0x0, 0x6)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x6, 0x1, 0x400}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000180)={0x6, [], 0x0, "64aa7bf94f71f2"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000180)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x0, "64aa7bf94f71f2"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001180)={{r2, 0x1, 0xa3, 0x4, 0x200, 0x56c, 0x8000000000000001, 0x7f, 0x1, 0x1, 0x1, 0x4be, 0x2, 0x4, 0x401}, 0x10, [0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001180)={{r2, 0x1, 0xa3, 0x4, 0x200, 0x56c, 0x8000000000000001, 0x7f, 0x1, 0x1, 0x1, 0x4be, 0x2, 0x4, 0x401}, 0x10, [0x0, 0x0]})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001280)={'rose0\x00', &(0x7f0000001200)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000012c0)={0x2, 0x0, [{0xacf, 0x0, 0x9}, {0xb7e}]}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000012c0)={0x2, 0x0, [{0xacf, 0x0, 0x9}, {0xb7e}]})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001300)=0x4) (async)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001300)=0x4)
pipe2(&(0x7f0000001340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x400001fe, 0x0, 0xf}, {0x40000070, 0x0, 0x78}]})
mknod$loop(&(0x7f00000013c0)='./file0\x00', 0x4, 0x0) (async)
mknod$loop(&(0x7f00000013c0)='./file0\x00', 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000001440)={<r5=>0x0, <r6=>0x0})
utimes(&(0x7f0000001400)='./file0\x00', &(0x7f0000001480)={{r5, r6/1000+60000}, {0x0, 0xea60}})
io_submit(0x0, 0x5, &(0x7f0000001880)=[&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x400, r0, &(0x7f00000014c0)="7223a2b5a288630a9a6f41f6330170f59234e1982207c5c987b1c4c112a1a832898fe53cf20da7d53c866acdc4d3bd4468807dd5e0beb9c276c84b83e85fee9f63d4ad2a646e369948f0edc1db128e89ec773efabeb0cb66ace92f0274a60c7b9a7436a2ef147ad5a677f6b30f64c07e0b5bf58bc726e74d86c4a796ec84b3e52fc724ec99eca41bc97643d4110205ec073cd4ae0071e7ccd3d626030bde3ef6eede9c8a033bbfc5da1dc9e277ee27ed6e80f14d730fefcd03d9df432f3c1572cd5644aa1b75edd408aa166344a4b47408804bd782154df1e94d628f8dbf6a39494fa253c9073fcf", 0xe8, 0x7fffffff, 0x0, 0x3, r4}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xb, r3, &(0x7f0000001600)="85db7508b8edcf0be9e3fa", 0xb, 0x8, 0x0, 0x5, r4}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x7, 0x1df, r3, &(0x7f0000001680)="ac9b68ba2a838186885185b879c2e0cd6f701a1979cf45a61b6db2bb3173ce129e7554e3ceba4992bfccdc35b20dc482cf96fca78707885057b9ee3a69be74381a3ee08e72cf43db1ad1b98aa814f92514def890c9406f7ff442545dc93c8f397f7a277b10d2396cef1bc0d2aabd09be63f81b5312b2713bbd33ce9c5594fd0a006bd3f8b6c0856f846347847fa9fa0e05e6c4af249747d84f429809b4c2f6444f61", 0xa2, 0xff9b, 0x0, 0x3, r4}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1000, 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x8e, r0, &(0x7f00000017c0)="92923082bbc1ab59d58b575fc06207af557d6b3927a01223ca1095ad9aef74848dcd537e5b96276b5cfd821e5c7102066425db1af21dfcbbbb1a148f6a560ec1e35416539e9c44dae4", 0x49, 0x62d85ad5, 0x0, 0x1, r4}])
io_setup(0x7, &(0x7f00000018c0)) (async)
io_setup(0x7, &(0x7f00000018c0)=<r7=>0x0)
clock_gettime(0x0, &(0x7f0000001940)={<r8=>0x0, <r9=>0x0})
io_getevents(r7, 0xfffffffffffffffe, 0x2, &(0x7f0000001900)=[{}, {}], &(0x7f0000001980)={r8, r9+10000000})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r4, 0x8004af70, &(0x7f00000019c0)) (async)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r4, 0x8004af70, &(0x7f00000019c0))
pselect6(0x40, &(0x7f0000001a00)={0x8, 0x6, 0x5, 0x2, 0x3c, 0xffffffffffffffff, 0x100000001, 0x7}, &(0x7f0000001a40)={0x0, 0x7, 0xb, 0x18, 0x200, 0x8, 0x1, 0xff}, &(0x7f0000001a80)={0x8f5, 0x10, 0x5, 0xc000000000, 0x0, 0x5, 0x7fff, 0x4}, &(0x7f0000001ac0)={0x0, 0x989680}, &(0x7f0000001b40)={&(0x7f0000001b00)={[0x9]}, 0x8})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b80), 0x40000, 0x0) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b80), 0x40000, 0x0)
ioctl$PTP_PIN_SETFUNC(r10, 0x40603d07, &(0x7f0000001bc0)={'\x00', 0x4, 0x0, 0x8})
ioctl(r4, 0x2, &(0x7f0000001c40)="2c37dc30536e2fcc")
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x2010, r3, 0xe1065000)
setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0)
connect$vsock_stream(r3, &(0x7f0000001c80)={0x28, 0x0, 0x0, @local}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001d00), r0) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d00), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000001f80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d40)={0x1dc, r11, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001fc0)={'syz0\x00', {0xff91, 0x6, 0x70, 0x7}, 0x54, [0x2, 0x0, 0x0, 0x6, 0x5, 0x400, 0x3, 0x6, 0xfffffff2, 0x7, 0x8, 0x4, 0x7fff, 0x7ff, 0x43, 0x3ff, 0x8, 0xffff, 0x0, 0x1, 0x7f, 0x8, 0x81, 0x7, 0x5, 0x1, 0x1, 0xfc, 0x3, 0x7, 0x0, 0x4, 0x7, 0x93, 0x5, 0x0, 0x6, 0x6, 0xadb5, 0x3ff, 0x3, 0x1400000, 0x0, 0x5, 0xd, 0x8, 0x4, 0x7fff, 0x8, 0xffff, 0xf, 0x7, 0x8, 0x80000001, 0xa8, 0x3, 0x3, 0x3ff, 0x401, 0x1000, 0x400, 0x3, 0x5, 0x8d], [0x7, 0x1876, 0x4, 0x7, 0x100, 0x4b9, 0x80, 0x6, 0x0, 0x8, 0x7283, 0x0, 0x1, 0x1, 0x0, 0x7b0, 0x80000001, 0x8fa, 0x4, 0xf, 0x7, 0x5, 0x2, 0x2, 0x4fce, 0x6e71da04, 0x1fc8effe, 0x3, 0x7419, 0x2, 0xffffff01, 0x2, 0x2eb, 0x7f, 0x8, 0x101, 0x0, 0x7, 0x14e, 0xa, 0x4000, 0x9, 0x4, 0xa46f, 0x542, 0x7, 0xd36, 0x8, 0x780, 0x7d69, 0x986, 0xdf, 0x8, 0xa, 0x9e, 0x5, 0x254b, 0x3, 0x7, 0x10, 0x0, 0x3, 0x5], [0x2, 0x10, 0x50e, 0x0, 0xffffffff, 0x3ff, 0x2, 0xc, 0xffff, 0xffffffff, 0x4, 0x7fffffff, 0x4, 0x1, 0x33, 0xf, 0x10000, 0x5, 0x1, 0x9, 0xc64, 0x5, 0xfffffff2, 0x80000000, 0x401, 0x3af, 0x3, 0x1, 0x4, 0x6, 0x33e, 0xffffffff, 0x7989, 0xffff8efb, 0xd0000, 0x4, 0x3, 0x4, 0xffffffff, 0x2, 0x200, 0x8, 0x2, 0xfffffff8, 0x7, 0x80000001, 0x4, 0x6, 0xf0, 0x0, 0x10000, 0x1, 0xa, 0x75, 0x4d4, 0x8, 0x80000001, 0x8000, 0x6, 0x3, 0x3, 0x4, 0x60, 0x7ff], [0x1, 0x4, 0x78193872, 0x2, 0x40, 0x48800000, 0x7, 0x4, 0x85, 0x3, 0xa6, 0xfffffc01, 0x10001, 0x9, 0xa94000, 0xffffff3b, 0x7, 0xffffff01, 0x8, 0x8, 0x2, 0x8, 0x7fff, 0x9, 0xb, 0xfffffff0, 0xffff628e, 0x6, 0x0, 0x1689, 0x2, 0xe6f, 0x0, 0x6, 0x18, 0x8, 0x4, 0x6, 0x8, 0x4, 0x50de, 0x4, 0x101, 0x80000000, 0x0, 0x7ce99c86, 0x0, 0x3, 0xdd8, 0x0, 0x0, 0xfffffff6, 0x2, 0x400, 0x1, 0x401, 0x5, 0xe, 0x2, 0x9, 0x1, 0x0, 0x3]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001fc0)={'syz0\x00', {0xff91, 0x6, 0x70, 0x7}, 0x54, [0x2, 0x0, 0x0, 0x6, 0x5, 0x400, 0x3, 0x6, 0xfffffff2, 0x7, 0x8, 0x4, 0x7fff, 0x7ff, 0x43, 0x3ff, 0x8, 0xffff, 0x0, 0x1, 0x7f, 0x8, 0x81, 0x7, 0x5, 0x1, 0x1, 0xfc, 0x3, 0x7, 0x0, 0x4, 0x7, 0x93, 0x5, 0x0, 0x6, 0x6, 0xadb5, 0x3ff, 0x3, 0x1400000, 0x0, 0x5, 0xd, 0x8, 0x4, 0x7fff, 0x8, 0xffff, 0xf, 0x7, 0x8, 0x80000001, 0xa8, 0x3, 0x3, 0x3ff, 0x401, 0x1000, 0x400, 0x3, 0x5, 0x8d], [0x7, 0x1876, 0x4, 0x7, 0x100, 0x4b9, 0x80, 0x6, 0x0, 0x8, 0x7283, 0x0, 0x1, 0x1, 0x0, 0x7b0, 0x80000001, 0x8fa, 0x4, 0xf, 0x7, 0x5, 0x2, 0x2, 0x4fce, 0x6e71da04, 0x1fc8effe, 0x3, 0x7419, 0x2, 0xffffff01, 0x2, 0x2eb, 0x7f, 0x8, 0x101, 0x0, 0x7, 0x14e, 0xa, 0x4000, 0x9, 0x4, 0xa46f, 0x542, 0x7, 0xd36, 0x8, 0x780, 0x7d69, 0x986, 0xdf, 0x8, 0xa, 0x9e, 0x5, 0x254b, 0x3, 0x7, 0x10, 0x0, 0x3, 0x5], [0x2, 0x10, 0x50e, 0x0, 0xffffffff, 0x3ff, 0x2, 0xc, 0xffff, 0xffffffff, 0x4, 0x7fffffff, 0x4, 0x1, 0x33, 0xf, 0x10000, 0x5, 0x1, 0x9, 0xc64, 0x5, 0xfffffff2, 0x80000000, 0x401, 0x3af, 0x3, 0x1, 0x4, 0x6, 0x33e, 0xffffffff, 0x7989, 0xffff8efb, 0xd0000, 0x4, 0x3, 0x4, 0xffffffff, 0x2, 0x200, 0x8, 0x2, 0xfffffff8, 0x7, 0x80000001, 0x4, 0x6, 0xf0, 0x0, 0x10000, 0x1, 0xa, 0x75, 0x4d4, 0x8, 0x80000001, 0x8000, 0x6, 0x3, 0x3, 0x4, 0x60, 0x7ff], [0x1, 0x4, 0x78193872, 0x2, 0x40, 0x48800000, 0x7, 0x4, 0x85, 0x3, 0xa6, 0xfffffc01, 0x10001, 0x9, 0xa94000, 0xffffff3b, 0x7, 0xffffff01, 0x8, 0x8, 0x2, 0x8, 0x7fff, 0x9, 0xb, 0xfffffff0, 0xffff628e, 0x6, 0x0, 0x1689, 0x2, 0xe6f, 0x0, 0x6, 0x18, 0x8, 0x4, 0x6, 0x8, 0x4, 0x50de, 0x4, 0x101, 0x80000000, 0x0, 0x7ce99c86, 0x0, 0x3, 0xdd8, 0x0, 0x0, 0xfffffff6, 0x2, 0x400, 0x1, 0x401, 0x5, 0xe, 0x2, 0x9, 0x1, 0x0, 0x3]}, 0x45c)
io_getevents(0x0, 0x5, 0x2, &(0x7f0000002440)=[{}, {}], &(0x7f0000002480)={0x77359400})

193.424058ms ago: executing program 0 (id=1501):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x3, 0x0, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x80000000000000, 0x31}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})

136.941138ms ago: executing program 0 (id=1503):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
recvmsg(0xffffffffffffffff, 0x0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @local}}}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0xffffffff, 0x4)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0xfffe, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102}}}})
r3 = gettid()
tkill(r3, 0x1f)
ptrace$setregs(0xd, r3, 0x8, &(0x7f00000001c0)="89a21b6269f6ecedbebd6a35c5ee94deaa9aecb2b2c8ae2fc796bdc5873f901ac8e556eb208f5cf8b6f9454d9f00912016745b6f10111d9dda2bacb586103b94bb509d747ade6bc22a0d1c18e5da57ea73ba699a2deb12bf6f54f195fa792260ea38c47aa31590e451dc8cc187d84e18db4ae912de4d3537fd87af3a4ec2d928fa303b62abe2f99eca0e299474f30013b8412c70b5096bc2b1df551380dc33d639c6034b0bcb06526f748ff77317109410b44543946c5f87a6d1349b42ed190495e24331bc8e88a2dbcc0bebf4d2b720c77bb1fb375347fb12431e3b4130")
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

135.958448ms ago: executing program 0 (id=1504):
r0 = socket(0x10, 0x803, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000001fc0)="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", 0xe00}, {&(0x7f0000000000)="a88ad4d39b60bf3019f6952ebd5c69a7d67f57e0a16c5a11d06913156969fb4c237893fefaf7a31834e7d19aac210520dbe0575946b07d0eb9fec87580c950607cb0b5c040292a55662c2f4c8a06ee6ef59ad3b8feebcfcc44faf41e08d16e7e5ee8ef197ba06c462ff65e7477640f5ce854a3e7d9039c919f287617a5c9b7507a50066ccce5a245dfb5778e0367c145bee2fe8f504a6f6b33fc849ff3", 0x9d}, {&(0x7f00000000c0)="f0211a28730b9b40c3cd7279bec4a1a1c470c2f33556d72adc2864fd0007f10a0463a58c317fff0a977a7739f2a20ef4ea587305a6c25e9e874137691918a529212e8dc27128909b93a187c446c12355891c", 0x52}, {&(0x7f0000000880)="ebf392c77bd6c1648643544f411cffccf70701b369a9bf25adeb0416c0c4b43d7ec3d4ead944d55eaf525730f1f33a5d597a3a96bc92412359c0b975d49f189563f7d153b76873dcd7986a8e90b3cd445a35f04cde8abcc4906be24040ceefe8ae3c748c43b36e4f99029d51ec1abe13399aa72fd68e3ba3784ac492575063e03325b7b7767c361408b83a03ac97c14eb51b8cc5d4ce5038a7d6f2980adada2a989f9e9adf12cdd2285be2c281a0e47246d726cf24d7213b2d98715195f88cf9f5242225587ec394b0353dcfe60254f3b6", 0xd1}, {&(0x7f0000000a00)="cfedbe579da717ff95ff4865c66ed4a76906dfadf691c71602a38309e2bbe8893832ec9be18510207295b9861f4aa0c3d3d9067cf3040ed69a45499c87acbc953b36d3fcf5428d108a4452543c1a987096f01076da8de1c84bd19401847226dfbac2a0cc8daa78be0118a5d7cc868efdda4c17abd48d7344d803d60af69c32d6a3a0941bc7571e13830f7712d2dfc56380c82c05e32e146c15136a50a8df566b227170cbb841d91da8cdbc2a6d4a6b1143ecf7a59fc56e3d26554a5a834b5a9f881129581928941a5a05dd72ccc4d48b8e4a4e19890852a34eca1a0454ed06cbca2b9cd4c097507d96399fd041", 0xed}, {&(0x7f0000000300)="c343dff2a9acf65a41ae732d", 0xc}], 0x6)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x8000}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x800)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r1}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000540)='memory.high\x00', 0x2, 0x0)
read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x3a3)
r5 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000bc0)=""/143, &(0x7f0000000480)=0x8f)
write$selinux_access(0xffffffffffffffff, 0x0, 0x5f)
getpgrp(0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000c80)=""/232, 0xe8}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0)
syz_clone(0x82010800, &(0x7f0000000200)="5626c8540000000047324df2ea32fffc530800000000000000ef0a5e6c", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="da325439614ad4986567c5b110960a9c8dc1937728156a95c5882a3a12fc6cd50f4b9f83053ca0c4b191132d83a01e8f08716f1469ea5ec93be287512b10451b0641e0856918854b13ea13041c3f8a5e1b6f1e0448da943357b201a64fb8415d58d0d181bea559b6a8ce45d4d256e607c39f94305c1c281a4f2850915662977edd35f409e54bc5471feb1737a8327d389c9455bd3d55d27fbd351b15fd2506a46ba1cef4974615c31d80629de5b69c2317cf209f90c0ebbff43d919788437012ebcdd05ffc4f1de37ace0ac63054d17792fae00a31ff1880fe32a760")
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)

135.526788ms ago: executing program 1 (id=1505):
r0 = dup(0xffffffffffffffff)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/176)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x11, 0x9e, &(0x7f00000000c0)="ae8493bc1c2692270dbb0f63bcf595a16557ff0f6e5cafc352ba5e4ec3524c3c0da90eea7d9b451c523e4f0b7427f58d0ae1999605ad3e86572aab0b21260e4c6568699fb29735ab222060e07d83d520373e153e26287c284e3af3d6aeab56e8f83677f92cc757692d58eaa272f6cdd5d41a7b18fa99220226af38a9b17278cc5fedb93c9875fd850ab02d3eabd06d2babac4b09a5f61e40cf67ff2ca4ec"})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x0, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000240))
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004884)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x20004005)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000580)='\x00')
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f00000005c0)=[@cpuid={0x2, 0x18, {0x2, 0xbd5}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x6, 0x6}}, @cpuid={0x2, 0x18, {0x4, 0x6}}, @code={0x1, 0x59, {"0f01f866baf80cb89058f087ef66bafc0cb80f11028aef66baf80cb8eeddf783ef66bafc0cb0adee2e6445d9e40f01c4468c5cc4163666410fc73244f9c40381ce56002bf30fa7d0"}}, @code={0x1, 0x5f, {"0fdef73e65260f31420f01d1b9420800000f3226420f6beec482fd02576ec744240024010000c74424025c300000ff2c248fa8609658894946d827c7442400d1000000c744240200a00000ff1c24"}}, @cpuid={0x2, 0x18, {0x10001, 0xe}}, @cpuid={0x2, 0x18, {0xe, 0x7}}, @cpuid={0x2, 0x18, {0x6, 0xffffffff}}], 0x160})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
cachestat(r0, &(0x7f0000000780)={0x5, 0x8000}, &(0x7f00000007c0), 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000800))
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000840)={@private=0xa010102, @rand_addr=0x64010100, 0xffffffffffffffff, "48705e745f4faad16c2402d15c2a87131cb3f49591a236db803771f28c76430e", 0x4, 0x9, 0xff, 0x1}, 0x3c)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000880)=0x2)
r6 = eventfd2(0x0, 0x803)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000008c0)={r2, 0x5, 0x0, r6})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000900), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe4, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x44354a1d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9a}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14c}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8aa7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x380000}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x43, 0x3, "55bb3c7060f8680f631e8cedea3c27f40160baf5a63ab3d563f8b9acf16dd7b58f12ee3ad1e774b4c031a94bd7d906d07a75566bc3bd2a3af1215189482570"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000b00)=@arm64={0x1, 0x3, 0x4a, '\x00', 0x5})
fcntl$getown(r4, 0x9)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000b80)={@mcast2, <r8=>0x0}, &(0x7f0000000bc0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c00)={'wg0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000d00)={&(0x7f0000000b40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x37d)

128.361288ms ago: executing program 2 (id=1506):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x800455cc, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r1, 0x800455cc, 0x0) (async)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

122.379318ms ago: executing program 1 (id=1507):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timerfd_create(0x0, 0x80800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x82)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
mmap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r2, 0x45809000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0)
read(r1, &(0x7f0000000080)=""/93, 0xffffff6c)

71.689529ms ago: executing program 0 (id=1508):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0xa, 0x5)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="0f1ae0a565d76fe383cf54def7248c5302738c39c84950efffe1489233042f8359df9ac4dc64aadfc096a100231f2061fcfcc09cb47a5dc57ed1f13abc2f9fd584b7c492fab45cc6dd96cad36d3dab7b8bedf456b4f417fff11d31e6c9dac4298be35ac660eb31e9be475edf7c7ec8317d6873886e8e6027403e8af3b972b0c8ff3262d040ee3b5aae8dcf43e764c7d5a45ed7fb3357e56701fa1efcf713dbb95a928144ad1d3470b4", 0xa9}, {0x0}, {&(0x7f0000002380)}], 0x3}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000740)="84acd778dffc50b2e94a366ff9659a060dc19084f26096a0dfbc0a0d9726efb77c8c8ff6e514e60316b2cddb2cfc8ec1cd103efac26a06cee8e82b902152a5751d19a2867f16d8e5696a58720a", 0x77}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000380000000000000029000000360000007303000000000000c910fe8000000000000000000000000000bb040181c2040000e409000000000000010000000000002900000036000000331c00000000000007480000000310040500800600000000000008000000000000005508000000000000000001000000000061000000000000000c0000000000000007000000000000008a00000000000000010700000000000000c204000000040a8755731c387a9c2099d34ae2ea6060fb652db7a2409297146d9be5c0e0e978473b006174f6b84784afbe7aa729f4d8bf018692a981e84bc4e033"], 0x228}}, {{0x0, 0x0, &(0x7f0000000880), 0x1e}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40c0044)
splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x790}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x40000}, 0x400c810)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3db02a3e090ff85aa7a530d1d8e6a5a003385f9241ca215aff8864ae3f63f79990148b3312792d719c3d58b8eadf328baea79254fd4dbecfb4237b1e4682d4ec56a3b88fbf1050f77852435beb1790f7a004b0f632df", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,\x00'])
r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r9, r0, 0x0, 0x80000000)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r10, &(0x7f0000000140)="f9de34ef32d9a6f6ef37462576bc874346fc54d1baba236b7b9a9c045cf4070009042e", 0x23)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r11, 0x40044591, 0x0)

71.242309ms ago: executing program 1 (id=1509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10d000, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000801)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000740)={0x90, 0x0, 0x0, {0x0, 0x3, 0x6, 0x5, 0xffffff65, 0x0, {0x1, 0x6, 0xd7, 0x4, 0x3f2, 0xd1, 0xff56, 0x7fffffff, 0xbd59, 0xc000, 0xa133, r9, 0x0, 0x5, 0x7fffffff}}}, 0x90)
ppoll(&(0x7f0000000380)=[{r6, 0x200}, {r8, 0x4000}], 0x2, &(0x7f0000000500), 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000)
r10 = dup3(r4, r3, 0x0)
recvmmsg(r10, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000001, 0x0)
write$P9_RATTACH(r10, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x20, 0x4, 0x6}}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000)
select(0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2d4}, &(0x7f0000001900)={0x40, 0x2, 0x80000000000, 0x80000000000000}, &(0x7f0000000440))

59.941319ms ago: executing program 2 (id=1510):
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
recvmmsg(r1, &(0x7f0000000100), 0x0, 0x12103, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00')
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000100)=0x1ff)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8)
setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0)
r6 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x800, &(0x7f0000000280))
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="3600004e82205b81b0e0248123a638b78cc9ba231ab37c70b03b4e0c157f986a422428a0090198af978ecd9ec7ad6950db88af5e1ffbfe9c53a700000000004e0000004e"])
r7 = getpid()
syz_pidfd_open(r7, 0x0)
r8 = socket(0x10, 0x803, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f00000035c0)=""/74, 0x4a}, {&(0x7f00000000c0)=""/33, 0x21}], 0x8}, 0xd}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/rt6_stats\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0)

58.855169ms ago: executing program 0 (id=1511):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xac302, 0x0)
cachestat(r0, &(0x7f0000000080)={0x7fffffffffffffff, 0xfffffffffffffffa}, &(0x7f00000000c0), 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0xe})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540))
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000af2000/0x3000)=nil)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)

57.688439ms ago: executing program 0 (id=1512):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x100000, 0x105000, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

2.0012ms ago: executing program 1 (id=1513):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r1, r2, 0x0, 0x10ffff)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"})
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x37)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

354.78µs ago: executing program 1 (id=1514):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2) (async)
syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syz_tun\x00', 0x1000}) (async)
connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
syz_open_procfs(r1, &(0x7f0000000180)='attr/exec\x00') (async)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=1515):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x20, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)

kernel console output (not intermixed with test programs):

38e929 code=0x7ffc0000
[   89.580824][   T36] audit: type=1326 audit(2000000270.568:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12313c11e5 code=0x7ffc0000
[   89.584031][ T2981] FAULT_INJECTION: forcing a failure.
[   89.584031][ T2981] name failslab, interval 1, probability 0, space 0, times 0
[   89.604239][   T36] audit: type=1326 audit(2000000270.568:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123138e929 code=0x7ffc0000
[   89.616706][ T1842] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   89.640618][   T36] audit: type=1326 audit(2000000270.568:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123138e929 code=0x7ffc0000
[   89.648355][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: syz.2.916 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[   89.648384][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   89.648395][ T2981] Call Trace:
[   89.648401][ T2981]  <TASK>
[   89.648409][ T2981]  __dump_stack+0x21/0x30
[   89.648436][ T2981]  dump_stack_lvl+0x10c/0x190
[   89.648456][ T2981]  ? __cfi_dump_stack_lvl+0x10/0x10
[   89.648478][ T2981]  ? vsnprintf+0x7b4/0x1aa0
[   89.648502][ T2981]  ? __asan_memcpy+0x5a/0x80
[   89.648524][ T2981]  dump_stack+0x19/0x20
[   89.648543][ T2981]  should_fail_ex+0x3d9/0x530
[   89.648564][ T2981]  ? __cfi_cgroup_show_path+0x10/0x10
[   89.648585][ T2981]  should_failslab+0xac/0x100
[   89.648609][ T2981]  __kmalloc_cache_noprof+0x41/0x3c0
[   89.648631][ T2981]  ? cgroup_show_path+0xc4/0x4a0
[   89.648649][ T2981]  ? __cfi_cgroup_show_path+0x10/0x10
[   89.648668][ T2981]  cgroup_show_path+0xc4/0x4a0
[   89.648687][ T2981]  ? __cfi_cgroup_show_path+0x10/0x10
[   89.648706][ T2981]  kernfs_sop_show_path+0x11d/0x160
[   89.648729][ T2981]  ? __cfi_kernfs_sop_show_path+0x10/0x10
[   89.648751][ T2981]  show_path+0xa4/0xe0
[   89.648773][ T2981]  show_mountinfo+0x1ba/0xb20
[   89.648792][ T2981]  ? __cfi_show_mountinfo+0x10/0x10
[   89.648810][ T2981]  ? __kvmalloc_node_noprof+0x168/0x300
[   89.648831][ T2981]  ? selinux_file_permission+0x309/0xb30
[   89.648859][ T2981]  m_show+0x7f/0x90
[   89.648876][ T2981]  seq_read_iter+0xae8/0xfe0
[   89.648912][ T2981]  vfs_read+0x53d/0xb60
[   89.648934][ T2981]  ? __cfi_vfs_read+0x10/0x10
[   89.648956][ T2981]  ? __cfi_mutex_lock+0x10/0x10
[   89.648978][ T2981]  ksys_read+0x141/0x250
[   89.648999][ T2981]  ? __cfi_ksys_read+0x10/0x10
[   89.649020][ T2981]  ? __kasan_check_read+0x15/0x20
[   89.649041][ T2981]  __x64_sys_read+0x7f/0x90
[   89.649062][ T2981]  x64_sys_call+0x2638/0x2ee0
[   89.649085][ T2981]  do_syscall_64+0x58/0xf0
[   89.649100][ T2981]  ? clear_bhb_loop+0x50/0xa0
[   89.649120][ T2981]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   89.649140][ T2981] RIP: 0033:0x7f84f0f8e929
[   89.649156][ T2981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.649172][ T2981] RSP: 002b:00007f84f1e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   89.649192][ T2981] RAX: ffffffffffffffda RBX: 00007f84f11b5fa0 RCX: 00007f84f0f8e929
[   89.649206][ T2981] RDX: 0000000000002020 RSI: 0000200000000f00 RDI: 0000000000000003
[   89.649227][ T2981] RBP: 00007f84f1e44090 R08: 0000000000000000 R09: 0000000000000000
[   89.649239][ T2981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.649250][ T2981] R13: 0000000000000000 R14: 00007f84f11b5fa0 R15: 00007ffd9dc55158
[   89.649265][ T2981]  </TASK>
[   89.780737][   T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   89.793817][   T36] audit: type=1326 audit(2000000270.568:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f123138e929 code=0x7ffc0000
[   89.810687][ T1842] usb 2-1: Using ep0 maxpacket: 16
[   89.978206][ T1842] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[   89.986255][ T1842] usb 2-1: config 0 has no interface number 0
[   89.992375][ T1842] usb 2-1: too many endpoints for config 0 interface 3 altsetting 48: 48, using maximum allowed: 30
[   90.003185][ T1842] usb 2-1: config 0 interface 3 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[   90.016314][ T1842] usb 2-1: config 0 interface 3 has no altsetting 0
[   90.024534][ T1842] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[   90.033794][   T31] usb 1-1: device descriptor read/64, error -71
[   90.040735][ T1842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.048726][ T1842] usb 2-1: Product: syz
[   90.052915][ T1842] usb 2-1: Manufacturer: syz
[   90.057504][ T1842] usb 2-1: SerialNumber: syz
[   90.062777][ T1842] usb 2-1: config 0 descriptor??
[   90.270071][ T2969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'.
[   90.279316][   T31] usb 1-1: device descriptor read/64, error -71
[   90.311627][ T1842] hub 2-1:0.3: bad descriptor, ignoring hub
[   90.317572][ T1842] hub 2-1:0.3: probe with driver hub failed with error -5
[   90.342567][ T1842] usb 2-1: USB disconnect, device number 34
[   90.520650][   T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   90.650907][   T31] usb 1-1: device descriptor read/64, error -71
[   90.890665][   T31] usb 1-1: device descriptor read/64, error -71
[   91.001503][   T31] usb usb1-port1: attempt power cycle
[   91.023882][ T2994] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.350660][   T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   91.379420][ T1268] usb 4-1: 0:2 : does not exist
[   91.388137][ T1268] usb 4-1: USB disconnect, device number 37
[   91.399474][   T31] usb 1-1: device descriptor read/8, error -71
[   91.414153][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.457719][ T3003] FAULT_INJECTION: forcing a failure.
[   91.457719][ T3003] name failslab, interval 1, probability 0, space 0, times 0
[   91.470540][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: syz.1.925 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[   91.470575][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   91.470587][ T3003] Call Trace:
[   91.470592][ T3003]  <TASK>
[   91.470599][ T3003]  __dump_stack+0x21/0x30
[   91.470631][ T3003]  dump_stack_lvl+0x10c/0x190
[   91.470652][ T3003]  ? __cfi_dump_stack_lvl+0x10/0x10
[   91.470674][ T3003]  ? vsnprintf+0x7b4/0x1aa0
[   91.470700][ T3003]  ? __asan_memcpy+0x5a/0x80
[   91.470723][ T3003]  dump_stack+0x19/0x20
[   91.470743][ T3003]  should_fail_ex+0x3d9/0x530
[   91.470765][ T3003]  ? __cfi_cgroup_show_path+0x10/0x10
[   91.470796][ T3003]  should_failslab+0xac/0x100
[   91.470823][ T3003]  __kmalloc_cache_noprof+0x41/0x3c0
[   91.470847][ T3003]  ? cgroup_show_path+0xc4/0x4a0
[   91.470866][ T3003]  ? __cfi_cgroup_show_path+0x10/0x10
[   91.470887][ T3003]  cgroup_show_path+0xc4/0x4a0
[   91.470907][ T3003]  ? __cfi_cgroup_show_path+0x10/0x10
[   91.470927][ T3003]  kernfs_sop_show_path+0x11d/0x160
[   91.470951][ T3003]  ? __cfi_kernfs_sop_show_path+0x10/0x10
[   91.470974][ T3003]  show_path+0xa4/0xe0
[   91.470998][ T3003]  show_mountinfo+0x1ba/0xb20
[   91.471019][ T3003]  ? __cfi_show_mountinfo+0x10/0x10
[   91.471037][ T3003]  ? __kvmalloc_node_noprof+0x168/0x300
[   91.471060][ T3003]  ? selinux_file_permission+0x309/0xb30
[   91.471088][ T3003]  m_show+0x7f/0x90
[   91.471107][ T3003]  seq_read_iter+0xae8/0xfe0
[   91.471137][ T3003]  vfs_read+0x53d/0xb60
[   91.471159][ T3003]  ? __cfi_vfs_read+0x10/0x10
[   91.471182][ T3003]  ? __cfi_mutex_lock+0x10/0x10
[   91.471205][ T3003]  ksys_read+0x141/0x250
[   91.471227][ T3003]  ? __cfi_ksys_read+0x10/0x10
[   91.471251][ T3003]  ? __kasan_check_read+0x15/0x20
[   91.471273][ T3003]  __x64_sys_read+0x7f/0x90
[   91.471296][ T3003]  x64_sys_call+0x2638/0x2ee0
[   91.471321][ T3003]  do_syscall_64+0x58/0xf0
[   91.471337][ T3003]  ? clear_bhb_loop+0x50/0xa0
[   91.471359][ T3003]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   91.471380][ T3003] RIP: 0033:0x7f077878e929
[   91.471396][ T3003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.471412][ T3003] RSP: 002b:00007f07796bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.471433][ T3003] RAX: ffffffffffffffda RBX: 00007f07789b5fa0 RCX: 00007f077878e929
[   91.471448][ T3003] RDX: 0000000000002020 RSI: 0000200000000f00 RDI: 0000000000000003
[   91.471461][ T3003] RBP: 00007f07796bc090 R08: 0000000000000000 R09: 0000000000000000
[   91.471474][ T3003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.471486][ T3003] R13: 0000000000000000 R14: 00007f07789b5fa0 R15: 00007ffd166f9228
[   91.471502][ T3003]  </TASK>
[   91.581686][   T31] usb 1-1: device descriptor read/8, error -71
[   91.875061][ T3025] binder: Bad value for 'defcontext'
[   91.980714][   T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   92.002024][   T31] usb 1-1: device descriptor read/8, error -71
[   92.039950][ T3054] /dev/nbd3: Can't lookup blockdev
[   92.064260][ T3059] /dev/rnullb0: Can't open blockdev
[   92.085105][ T3042] rust_binder: Error while translating object.
[   92.085141][ T3042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   92.091391][ T3042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679
[   92.105362][ T3061] FAULT_INJECTION: forcing a failure.
[   92.105362][ T3061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.129740][ T3061] CPU: 1 UID: 0 PID: 3061 Comm: syz.3.944 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[   92.129771][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   92.129794][ T3061] Call Trace:
[   92.129801][ T3061]  <TASK>
[   92.129808][ T3061]  __dump_stack+0x21/0x30
[   92.129834][ T3061]  dump_stack_lvl+0x10c/0x190
[   92.129854][ T3061]  ? __cfi_dump_stack_lvl+0x10/0x10
[   92.129880][ T3061]  dump_stack+0x19/0x20
[   92.129894][ T3061]  should_fail_ex+0x3d9/0x530
[   92.129907][ T3061]  should_fail+0xf/0x20
[   92.129918][ T3061]  should_fail_usercopy+0x1e/0x30
[   92.129930][ T3061]  _copy_to_iter+0x1a3/0x14b0
[   92.129944][ T3061]  ? __cfi_v9fs_show_options+0x10/0x10
[   92.129957][ T3061]  ? __cfi__copy_to_iter+0x10/0x10
[   92.129969][ T3061]  ? check_stack_object+0x82/0x140
[   92.129982][ T3061]  ? __virt_addr_valid+0x2a6/0x380
[   92.129998][ T3061]  ? __kasan_check_write+0x18/0x20
[   92.130010][ T3061]  seq_read_iter+0xd39/0xfe0
[   92.130030][ T3061]  vfs_read+0x53d/0xb60
[   92.130043][ T3061]  ? __cfi_vfs_read+0x10/0x10
[   92.130055][ T3061]  ? __cfi_mutex_lock+0x10/0x10
[   92.130068][ T3061]  ksys_read+0x141/0x250
[   92.130080][ T3061]  ? __cfi_ksys_read+0x10/0x10
[   92.130092][ T3061]  ? __kasan_check_read+0x15/0x20
[   92.130104][ T3061]  __x64_sys_read+0x7f/0x90
[   92.130116][ T3061]  x64_sys_call+0x2638/0x2ee0
[   92.130129][ T3061]  do_syscall_64+0x58/0xf0
[   92.130138][ T3061]  ? clear_bhb_loop+0x50/0xa0
[   92.130150][ T3061]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   92.130162][ T3061] RIP: 0033:0x7f6781f8e929
[   92.130172][ T3061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.130182][ T3061] RSP: 002b:00007f6782d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.130195][ T3061] RAX: ffffffffffffffda RBX: 00007f67821b5fa0 RCX: 00007f6781f8e929
[   92.130204][ T3061] RDX: 0000000000002020 RSI: 0000200000000f00 RDI: 0000000000000003
[   92.130211][ T3061] RBP: 00007f6782d26090 R08: 0000000000000000 R09: 0000000000000000
[   92.130218][ T3061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.130225][ T3061] R13: 0000000000000000 R14: 00007f67821b5fa0 R15: 00007fff79348348
[   92.130233][ T3061]  </TASK>
[   92.354577][   T36] kauditd_printk_skb: 82 callbacks suppressed
[   92.354593][   T36] audit: type=1326 audit(2000000273.428:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.384274][   T36] audit: type=1326 audit(2000000273.458:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.407516][   T36] audit: type=1326 audit(2000000273.468:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.430672][   T36] audit: type=1326 audit(2000000273.488:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.454175][   T36] audit: type=1326 audit(2000000273.528:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.477393][   T31] usb 1-1: device descriptor read/8, error -71
[   92.483591][   T36] audit: type=1326 audit(2000000273.548:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f123138e52b code=0x7ffc0000
[   92.562633][   T36] audit: type=1400 audit(2000000273.638:584): avc:  denied  { write } for  pid=3077 comm="syz.0.949" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   92.590718][   T31] usb usb1-port1: unable to enumerate USB device
[   92.592628][   T36] audit: type=1400 audit(2000000273.658:585): avc:  denied  { getopt } for  pid=3077 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.656017][ T3085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'.
[   92.706499][ T3090] FAULT_INJECTION: forcing a failure.
[   92.706499][ T3090] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   92.720026][ T3090] CPU: 0 UID: 0 PID: 3090 Comm: syz.1.954 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[   92.720060][ T3090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   92.720072][ T3090] Call Trace:
[   92.720079][ T3090]  <TASK>
[   92.720087][ T3090]  __dump_stack+0x21/0x30
[   92.720113][ T3090]  dump_stack_lvl+0x10c/0x190
[   92.720135][ T3090]  ? __cfi_dump_stack_lvl+0x10/0x10
[   92.720159][ T3090]  dump_stack+0x19/0x20
[   92.720179][ T3090]  should_fail_ex+0x3d9/0x530
[   92.720201][ T3090]  should_fail_alloc_page+0xeb/0x110
[   92.720235][ T3090]  __alloc_pages_noprof+0x19d/0x6c0
[   92.720259][ T3090]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   92.720278][ T3090]  ? unwind_get_return_address+0x51/0x90
[   92.720298][ T3090]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   92.720321][ T3090]  ? arch_stack_walk+0x10b/0x170
[   92.720348][ T3090]  __folio_alloc_noprof+0x14/0x80
[   92.720368][ T3090]  folio_prealloc+0x46/0x240
[   92.720395][ T3090]  do_wp_page+0x1c54/0x3270
[   92.720422][ T3090]  ? folio_put+0x90/0x90
[   92.720446][ T3090]  ? __cfi__raw_spin_lock+0x10/0x10
[   92.720474][ T3090]  ? __pte_offset_map+0x1b0/0x230
[   92.720495][ T3090]  ? pte_offset_map_rw_nolock+0xba/0x110
[   92.720517][ T3090]  handle_mm_fault+0xff7/0x1b90
[   92.720553][ T3090]  ? __cfi_handle_mm_fault+0x10/0x10
[   92.720581][ T3090]  ? find_vma+0xcd/0x110
[   92.720602][ T3090]  ? lock_mm_and_find_vma+0xb8/0x3a0
[   92.720625][ T3090]  do_user_addr_fault+0x4ca/0x1200
[   92.720647][ T3090]  exc_page_fault+0x59/0xc0
[   92.720667][ T3090]  asm_exc_page_fault+0x2b/0x30
[   92.720685][ T3090] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[   92.720719][ T3090] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 e9 0f 62 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[   92.720736][ T3090] RSP: 0018:ffffc90010f3fa58 EFLAGS: 00050206
[   92.720754][ T3090] RAX: ffffffff82a28101 RBX: ffff88813a712000 RCX: 0000000000000611
[   92.720770][ T3090] RDX: 0000000000000000 RSI: ffff88813a712100 RDI: 0000200000001000
[   92.720783][ T3090] RBP: ffffc90010f3fba8 R08: ffff88813a712710 R09: 1ffff110274e24e2
[   92.720798][ T3090] R10: dffffc0000000000 R11: ffffed10274e24e3 R12: 0000200000000f00
[   92.720813][ T3090] R13: 0000200000001611 R14: 1ffff920021e7faf R15: 0000000000000711
[   92.720829][ T3090]  ? _copy_to_iter+0x191/0x14b0
[   92.720856][ T3090]  ? _copy_to_iter+0x212/0x14b0
[   92.720880][ T3090]  ? __cfi_v9fs_show_options+0x10/0x10
[   92.720902][ T3090]  ? __cfi__copy_to_iter+0x10/0x10
[   92.720926][ T3090]  ? check_stack_object+0x82/0x140
[   92.720949][ T3090]  ? __virt_addr_valid+0x2a6/0x380
[   92.720975][ T3090]  ? __kasan_check_write+0x18/0x20
[   92.720997][ T3090]  seq_read_iter+0xd39/0xfe0
[   92.721027][ T3090]  vfs_read+0x53d/0xb60
[   92.721050][ T3090]  ? __cfi_vfs_read+0x10/0x10
[   92.721072][ T3090]  ? __cfi_mutex_lock+0x10/0x10
[   92.721096][ T3090]  ksys_read+0x141/0x250
[   92.721118][ T3090]  ? __cfi_ksys_read+0x10/0x10
[   92.721141][ T3090]  ? __kasan_check_read+0x15/0x20
[   92.721162][ T3090]  __x64_sys_read+0x7f/0x90
[   92.721185][ T3090]  x64_sys_call+0x2638/0x2ee0
[   92.721209][ T3090]  do_syscall_64+0x58/0xf0
[   92.721225][ T3090]  ? clear_bhb_loop+0x50/0xa0
[   92.721246][ T3090]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   92.721264][ T3090] RIP: 0033:0x7f077878e929
[   92.721279][ T3090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.721295][ T3090] RSP: 002b:00007f07796bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.721315][ T3090] RAX: ffffffffffffffda RBX: 00007f07789b5fa0 RCX: 00007f077878e929
[   92.721330][ T3090] RDX: 0000000000002020 RSI: 0000200000000f00 RDI: 0000000000000003
[   92.721343][ T3090] RBP: 00007f07796bc090 R08: 0000000000000000 R09: 0000000000000000
[   92.721355][ T3090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.721368][ T3090] R13: 0000000000000000 R14: 00007f07789b5fa0 R15: 00007ffd166f9228
[   92.721384][ T3090]  </TASK>
[   92.880639][   T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   92.970643][  T383] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[   93.147073][ T3094] SELinux:  policydb version -108398774 does not match my version range 15-33
[   93.156030][   T36] audit: type=1400 audit(2000000274.218:586): avc:  denied  { load_policy } for  pid=3093 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   93.177998][ T3094] SELinux: failed to load policy
[   93.191628][  T383] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.203012][  T383] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.210629][   T31] usb 1-1: Using ep0 maxpacket: 8
[   93.215507][  T383] usb 4-1: config 0 interface 0 has no altsetting 0
[   93.225774][  T383] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[   93.232261][   T31] usb 1-1: config 168 has an invalid interface number: 176 but max is 3
[   93.236873][  T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.243469][   T31] usb 1-1: config 168 has an invalid interface number: 123 but max is 3
[   93.253025][  T383] usb 4-1: config 0 descriptor??
[   93.265051][ T3101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[   93.273775][   T31] usb 1-1: config 168 has an invalid descriptor of length 1, skipping remainder of the config
[   93.303419][   T31] usb 1-1: config 168 has 2 interfaces, different from the descriptor's value: 4
[   93.312675][   T31] usb 1-1: config 168 has no interface number 0
[   93.318923][   T31] usb 1-1: config 168 has no interface number 1
[   93.328720][   T31] usb 1-1: config 168 interface 176 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64
[   93.340221][   T31] usb 1-1: config 168 interface 176 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   93.355999][   T31] usb 1-1: config 168 interface 176 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64
[   93.367271][   T31] usb 1-1: config 168 interface 176 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   93.378526][   T31] usb 1-1: config 168 interface 176 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 64
[   93.388980][   T31] usb 1-1: config 168 interface 176 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[   93.400188][ T3105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390
[   93.400265][   T31] usb 1-1: config 168 interface 176 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[   93.420387][   T31] usb 1-1: config 168 interface 176 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024
[   93.431370][   T31] usb 1-1: config 168 interface 123 altsetting 208 has a duplicate endpoint with address 0xA, skipping
[   93.442487][   T31] usb 1-1: config 168 interface 123 altsetting 208 has an invalid descriptor for endpoint zero, skipping
[   93.459174][   T31] usb 1-1: config 168 interface 123 altsetting 208 has a duplicate endpoint with address 0xB, skipping
[   93.470545][   T31] usb 1-1: config 168 interface 123 altsetting 208 has a duplicate endpoint with address 0x9, skipping
[   93.481793][   T31] usb 1-1: config 168 interface 123 altsetting 208 has an invalid descriptor for endpoint zero, skipping
[   93.493194][   T31] usb 1-1: config 168 interface 123 altsetting 208 has 6 endpoint descriptors, different from the interface descriptor's value: 14
[   93.506902][   T31] usb 1-1: config 168 interface 176 has no altsetting 0
[   93.519782][   T31] usb 1-1: config 168 interface 123 has no altsetting 0
[   93.528248][   T31] usb 1-1: Dual-Role OTG device on HNP port
[   93.534387][   T31] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=3b.bd
[   93.545295][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.554150][   T31] usb 1-1: Product: 汜苄抷쒞黧枩㥞ୀ๣ꁦ⸜罄ﳮ佔댺숕ꃉ볆貋፶भᘞ㯀哚ﶼ䱿إ썸犙曍ᩃਫ몝ظం﯈و茤￟今쟄兜淊勇袍짅◔〈ꦵ㶓①⊇往⣘먳굥詚凡ۈ쌁ડ귄ⷜꪈ䅟✘ꁹ
[   93.576688][   T31] usb 1-1: Manufacturer: 뢑⒍ך깄螮툵輌葜녅廟扙㍨彩⍴␳將ಓ譒๠㓫激讠嫋鏘巏㦃㡺馭쬜㈪㧘竔혒ㅱ踔錳㻑๯᠙ꇜꛦ喰ꄞ쯺࣍⎀쪲ḈՏ뵶멐噭ꎏ씒㌹ᵎ싕벞沮驐䷦㐇䪑鱟Ᏽﲧ制떊卉볥뢓쪵锰捯姣鷬秀㙸鄘倞哱舟乒쨙繜
[   93.604845][   T31] usb 1-1: SerialNumber: У
[   93.621339][ T3078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   93.628669][ T3078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   93.711009][ T3115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.963'.
[   93.766054][ T3079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.791667][ T3079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.871320][   T31] usb 1-1: USB disconnect, device number 32
[   93.889436][ T3118] FAULT_INJECTION: forcing a failure.
[   93.889436][ T3118] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   93.920680][ T3118] CPU: 0 UID: 0 PID: 3118 Comm: syz.2.964 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[   93.920713][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   93.920725][ T3118] Call Trace:
[   93.920731][ T3118]  <TASK>
[   93.920740][ T3118]  __dump_stack+0x21/0x30
[   93.920768][ T3118]  dump_stack_lvl+0x10c/0x190
[   93.920794][ T3118]  ? __cfi_dump_stack_lvl+0x10/0x10
[   93.920818][ T3118]  dump_stack+0x19/0x20
[   93.920838][ T3118]  should_fail_ex+0x3d9/0x530
[   93.920860][ T3118]  should_fail_alloc_page+0xeb/0x110
[   93.920887][ T3118]  __alloc_pages_noprof+0x19d/0x6c0
[   93.920908][ T3118]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   93.920926][ T3118]  ? post_alloc_hook+0x3b9/0x3f0
[   93.920943][ T3118]  ? sysvec_apic_timer_interrupt+0x50/0x90
[   93.920968][ T3118]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   93.920991][ T3118]  __folio_alloc_noprof+0x14/0x80
[   93.921011][ T3118]  folio_prealloc+0x46/0x240
[   93.921037][ T3118]  do_wp_page+0x1c54/0x3270
[   93.921064][ T3118]  ? folio_put+0x90/0x90
[   93.921088][ T3118]  ? __cfi__raw_spin_lock+0x10/0x10
[   93.921115][ T3118]  ? __pte_offset_map+0x1b0/0x230
[   93.921136][ T3118]  ? pte_offset_map_rw_nolock+0xba/0x110
[   93.921158][ T3118]  handle_mm_fault+0xff7/0x1b90
[   93.921186][ T3118]  ? __cfi_handle_mm_fault+0x10/0x10
[   93.921211][ T3118]  ? find_vma+0xcd/0x110
[   93.921234][ T3118]  ? lock_mm_and_find_vma+0xb8/0x3a0
[   93.921261][ T3118]  do_user_addr_fault+0x4ca/0x1200
[   93.921287][ T3118]  exc_page_fault+0x59/0xc0
[   93.921308][ T3118]  asm_exc_page_fault+0x2b/0x30
[   93.921327][ T3118] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[   93.921353][ T3118] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 e9 0f 62 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[   93.921369][ T3118] RSP: 0018:ffffc90010cefa58 EFLAGS: 00050202
[   93.921387][ T3118] RAX: ffffffff82a28101 RBX: ffff88813ae92000 RCX: 00000000000005d1
[   93.921402][ T3118] RDX: 0000000000000000 RSI: ffff88813ae92100 RDI: 0000200000001000
[   93.921416][ T3118] RBP: ffffc90010cefba8 R08: ffff88813ae926d0 R09: 1ffff110275d24da
[   93.921430][ T3118] R10: dffffc0000000000 R11: ffffed10275d24db R12: 0000200000000f00
[   93.921444][ T3118] R13: 00002000000015d1 R14: 1ffff9200219dfaf R15: 00000000000006d1
[   93.921460][ T3118]  ? _copy_to_iter+0x191/0x14b0
[   93.921486][ T3118]  ? _copy_to_iter+0x212/0x14b0
[   93.921509][ T3118]  ? __cfi_v9fs_show_options+0x10/0x10
[   93.921531][ T3118]  ? __cfi__copy_to_iter+0x10/0x10
[   93.921555][ T3118]  ? check_stack_object+0x82/0x140
[   93.921579][ T3118]  ? __virt_addr_valid+0x2a6/0x380
[   93.921607][ T3118]  ? __kasan_check_write+0x18/0x20
[   93.921628][ T3118]  seq_read_iter+0xd39/0xfe0
[   93.921657][ T3118]  vfs_read+0x53d/0xb60
[   93.921688][ T3118]  ? __cfi_vfs_read+0x10/0x10
[   93.921710][ T3118]  ? __cfi_mutex_lock+0x10/0x10
[   93.921734][ T3118]  ksys_read+0x141/0x250
[   93.921756][ T3118]  ? __cfi_ksys_read+0x10/0x10
[   93.921779][ T3118]  ? __kasan_check_read+0x15/0x20
[   93.921800][ T3118]  __x64_sys_read+0x7f/0x90
[   93.921823][ T3118]  x64_sys_call+0x2638/0x2ee0
[   93.921848][ T3118]  do_syscall_64+0x58/0xf0
[   93.921865][ T3118]  ? clear_bhb_loop+0x50/0xa0
[   93.921886][ T3118]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   93.921906][ T3118] RIP: 0033:0x7f84f0f8e929
[   93.921921][ T3118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.921936][ T3118] RSP: 002b:00007f84f1e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   93.921956][ T3118] RAX: ffffffffffffffda RBX: 00007f84f11b5fa0 RCX: 00007f84f0f8e929
[   93.921971][ T3118] RDX: 0000000000002020 RSI: 0000200000000f00 RDI: 0000000000000003
[   93.921983][ T3118] RBP: 00007f84f1e44090 R08: 0000000000000000 R09: 0000000000000000
[   93.921996][ T3118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.922008][ T3118] R13: 0000000000000000 R14: 00007f84f11b5fa0 R15: 00007ffd9dc55158
[   93.922024][ T3118]  </TASK>
[   94.334267][  T383] usbhid 4-1:0.0: can't add hid device: -71
[   94.340239][  T383] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   94.352810][  T383] usb 4-1: USB disconnect, device number 38
[   94.393532][ T3122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706
[   94.396172][ T3124] 9pnet_fd: Insufficient options for proto=fd
[   94.417980][ T3126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=3126 comm=syz.2.968
[   94.430604][ T3126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3126 comm=syz.2.968
[   94.577877][ T3140] fuse: Unknown parameter 'grou'
[   94.591517][ T3140] rust_binder: Read failure Err(EAGAIN) in pid:399
[   94.632953][ T3146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   94.639542][ T3146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:405
[   94.761554][ T3152] /dev/rnullb0: Can't open blockdev
[   94.787388][ T3154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   94.787421][ T3154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:551
[   94.797629][ T3155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.807092][   T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   94.901927][ T3162] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21)
[   94.901947][ T3162] rust_binder: Error while translating object.
[   94.923995][ T3162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   94.930845][ T3162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558
[   94.958626][ T3164] batadv_slave_1: entered promiscuous mode
[   94.976809][   T31] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.988156][   T31] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.998229][ T3164] batadv_slave_1: left promiscuous mode
[   95.009860][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   95.017133][   T31] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[   95.034015][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.043070][   T31] usb 3-1: config 0 descriptor??
[   95.062977][   T36] audit: type=1400 audit(2000000276.138:587): avc:  denied  { setattr } for  pid=3169 comm="syz.1.986" path="socket:[26650]" dev="sockfs" ino=26650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.458876][ T3138] random: crng reseeded on system resumption
[   95.557129][ T3183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   95.557163][ T3183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:747
[   95.663888][ T3181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.691693][ T3181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.736170][ T3192] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3137339392 (6274678784 ns) > initial count (1920 ns). Using initial count to start timer.
[   95.891664][ T3197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   95.964831][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   95.971475][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   95.983890][   T31] usb 3-1: USB disconnect, device number 29
[   95.992837][ T3202] binder: Unknown parameter 'context�'
[   96.021862][ T3206] syz.1.1000: attempt to access beyond end of device
[   96.021862][ T3206] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[   96.039714][ T3206] exFAT-fs (loop1): unable to read boot sector
[   96.040126][ T3209] rust_binder: Write failure EFAULT in pid:572
[   96.045949][ T3206] exFAT-fs (loop1): failed to read boot sector
[   96.060647][ T3206] exFAT-fs (loop1): failed to recognize exfat type
[   96.243450][ T3225] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0
[   96.243468][ T3225] rust_binder: Error while translating object.
[   96.252211][ T3225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   96.258394][ T3225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:435
[   96.430651][   T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   96.591756][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.601830][   T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   96.610990][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.611069][ T3244] rust_binder: Write failure EINVAL in pid:721
[   96.622780][   T31] usb 1-1: config 0 descriptor??
[   96.641841][ T3249] 9pnet_fd: Insufficient options for proto=fd
[   96.641991][   T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   96.760723][ T1842] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[   96.911799][ T1842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   96.922863][ T1842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   96.935734][ T1842] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[   96.944802][ T1842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.953479][ T1842] usb 4-1: config 0 descriptor??
[   96.958716][ T3240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   97.367506][ T1842] lenovo 0003:17EF:6067.0014: item fetching failed at offset 5/7
[   97.375540][ T1842] lenovo 0003:17EF:6067.0014: hid_parse failed
[   97.381972][ T1842] lenovo 0003:17EF:6067.0014: probe with driver lenovo failed with error -22
[   97.545218][  T383] usb 1-1: USB disconnect, device number 33
[   97.661147][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'.
[   97.924236][ T3286] rust_binder: 3286: no such ref 1
[   98.000711][  T383] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   98.073776][ T1268] usb 4-1: USB disconnect, device number 39
[   98.171525][  T383] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.182616][  T383] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.192841][  T383] usb 1-1: config 0 interface 0 has no altsetting 0
[   98.199463][  T383] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[   98.211618][  T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.221327][  T383] usb 1-1: config 0 descriptor??
[   98.440625][ T1266] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   98.590683][ T1266] usb 2-1: Using ep0 maxpacket: 32
[   98.597427][ T1266] usb 2-1: unable to get BOS descriptor or descriptor too short
[   98.605461][ T1266] usb 2-1: too many configurations: 182, using maximum allowed: 8
[   98.617939][ T1266] usb 2-1: unable to read config index 0 descriptor/start: -61
[   98.629919][ T1266] usb 2-1: can't read configurations, error -61
[   98.652469][ T3311] rust_binder: Write failure EFAULT in pid:746
[   98.716008][  T383] usbhid 1-1:0.0: can't add hid device: -71
[   98.732271][  T383] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   98.741009][  T383] usb 1-1: USB disconnect, device number 34
[   98.790684][ T1266] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   98.887273][ T3319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:602
[   98.890778][ T1268] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[   98.940726][ T1266] usb 2-1: Using ep0 maxpacket: 32
[   98.947273][ T1266] usb 2-1: unable to get BOS descriptor or descriptor too short
[   98.955144][ T1266] usb 2-1: too many configurations: 182, using maximum allowed: 8
[   98.964211][ T1266] usb 2-1: unable to read config index 0 descriptor/start: -61
[   98.972130][ T1266] usb 2-1: can't read configurations, error -61
[   98.973028][ T3321] binder: Unknown parameter ''
[   98.978509][ T1266] usb usb2-port1: attempt power cycle
[   99.011637][ T3324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.011662][ T3324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606
[   99.040657][ T1268] usb 3-1: device descriptor read/64, error -71
[   99.177459][ T3332] binder: Unknown parameter 'p^H�H �
[   99.177459][ T3332] ��yC'
[   99.280673][ T1268] usb 3-1: device descriptor read/64, error -71
[   99.290674][ T1842] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   99.320690][ T1266] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[   99.340968][ T1266] usb 2-1: Using ep0 maxpacket: 32
[   99.347370][ T1266] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.355239][ T1266] usb 2-1: too many configurations: 182, using maximum allowed: 8
[   99.364094][ T1266] usb 2-1: unable to read config index 0 descriptor/start: -61
[   99.371811][ T1266] usb 2-1: can't read configurations, error -61
[   99.440677][   T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[   99.452048][ T1842] usb 1-1: unable to get BOS descriptor or descriptor too short
[   99.460368][ T1842] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[   99.468732][ T1842] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[   99.476958][ T1842] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[   99.486106][ T1842] usb 1-1: config 129 has no interface number 0
[   99.492369][ T1842] usb 1-1: config 129 has no interface number 1
[   99.498616][ T1842] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   99.511936][ T1842] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[   99.520636][ T1266] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[   99.523112][ T1842] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[   99.530950][ T1268] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[   99.543986][ T1842] usb 1-1: config 129 interface 135 has no altsetting 0
[   99.558364][ T1842] usb 1-1: config 129 interface 5 has no altsetting 0
[   99.567096][ T1842] usb 1-1: string descriptor 0 read error: -22
[   99.571003][ T1266] usb 2-1: Using ep0 maxpacket: 32
[   99.573349][ T1842] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice= 0.06
[   99.579803][ T1266] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.587634][ T1842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   99.595617][ T1266] usb 2-1: too many configurations: 182, using maximum allowed: 8
[   99.606347][ T1842] usb 1-1: MIDIStreaming interface descriptor not found
[   99.614802][ T1266] usb 2-1: unable to read config index 0 descriptor/start: -61
[   99.625953][ T1266] usb 2-1: can't read configurations, error -61
[   99.632551][ T1266] usb usb2-port1: unable to enumerate USB device
[   99.632662][   T31] usb 4-1: config 0 has an invalid interface number: 25 but max is 0
[   99.647104][   T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.657285][   T31] usb 4-1: config 0 has no interface number 0
[   99.663402][   T31] usb 4-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.676580][   T31] usb 4-1: config 0 interface 25 has no altsetting 0
[   99.684625][   T31] usb 4-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee
[   99.690632][ T1268] usb 3-1: device descriptor read/64, error -71
[   99.693762][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.707922][   T31] usb 4-1: Product: syz
[   99.712084][   T31] usb 4-1: Manufacturer: syz
[   99.716666][   T31] usb 4-1: SerialNumber: syz
[   99.721808][   T31] usb 4-1: config 0 descriptor??
[   99.806666][ T3335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.815410][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.823916][ T3335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.831806][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.839915][ T3330] rust_binder: Error in use_page_slow: ESRCH
[   99.839930][ T3330] rust_binder: use_range failure ESRCH
[   99.845934][ T3330] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   99.851419][ T3330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   99.859497][ T3330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:613
[   99.869385][ T1266] usb 1-1: USB disconnect, device number 35
[   99.940671][ T1268] usb 3-1: device descriptor read/64, error -71
[   99.953425][   T31] usb 4-1: Found UVC 0.00 device syz (1b3b:2951)
[   99.961169][   T31] usb 4-1: No valid video chain found.
[   99.968507][   T31] usb 4-1: USB disconnect, device number 40
[  100.050734][ T1268] usb usb3-port1: attempt power cycle
[  100.400656][ T1268] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  100.421644][ T1268] usb 3-1: device descriptor read/8, error -71
[  100.551725][ T1268] usb 3-1: device descriptor read/8, error -71
[  100.620634][   T31] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[  100.642507][ T3344] syz.3.1043 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  100.750681][   T31] usb 1-1: device descriptor read/64, error -71
[  100.790687][ T1268] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  100.811684][ T1268] usb 3-1: device descriptor read/8, error -71
[  100.890641][ T1266] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  100.951771][ T1268] usb 3-1: device descriptor read/8, error -71
[  100.990681][   T31] usb 1-1: device descriptor read/64, error -71
[  101.040719][ T1266] usb 4-1: Using ep0 maxpacket: 32
[  101.046904][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.056721][ T1266] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  101.065918][ T1268] usb usb3-port1: unable to enumerate USB device
[  101.072282][ T1266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.082164][ T1266] usb 4-1: config 0 descriptor??
[  101.159042][ T3348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468
[  101.172673][ T3350] tmpfs: Unsupported parameter 'mpol'
[  101.187738][ T3350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25106 sclass=netlink_route_socket pid=3350 comm=syz.1.1046
[  101.212397][ T3352] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4
[  101.219954][ T3352] rust_binder: Write failure EINVAL in pid:472
[  101.230635][   T31] usb 1-1: new low-speed USB device number 37 using dummy_hcd
[  101.356648][ T3357] rust_binder: Failed copying remainder into alloc: EFAULT
[  101.356668][ T3357] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  101.364003][ T3357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  101.372328][ T3357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:475
[  101.380645][   T31] usb 1-1: device descriptor read/64, error -71
[  101.493557][ T1266] magicmouse 0003:05AC:0265.0015: hidraw1: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[  101.630632][   T31] usb 1-1: device descriptor read/64, error -71
[  101.655297][ T3360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  101.655331][ T3360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:748
[  101.740782][   T31] usb usb1-port1: attempt power cycle
[  101.756384][ T1842] usb 4-1: USB disconnect, device number 41
[  101.764687][ T3365] binder: Unknown parameter 'defcontext01777777777777777777777'
[  102.081878][ T3367] binder: Unknown parameter ''
[  102.087336][ T3367] binder: Unknown parameter ''
[  102.101709][   T31] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  102.121596][   T31] usb 1-1: device descriptor read/8, error -71
[  102.151380][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  102.151397][   T36] audit: type=1400 audit(2000000283.228:590): avc:  denied  { read } for  pid=3372 comm="syz.1.1054" name="/" dev="configfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.180178][   T36] audit: type=1400 audit(2000000283.228:591): avc:  denied  { open } for  pid=3372 comm="syz.1.1054" path="/" dev="configfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.261644][   T31] usb 1-1: device descriptor read/8, error -71
[  102.322815][   T36] audit: type=1400 audit(2000000283.398:592): avc:  denied  { create } for  pid=3380 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  102.374933][ T3389] af_packet: tpacket_rcv: packet too big, clamped from 630 to 4294967272. macoff=96
[  102.488480][ T3397] /dev/rnullb0: Can't open blockdev
[  102.510426][ T3400] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  102.530657][   T31] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  102.551644][   T31] usb 1-1: device descriptor read/8, error -71
[  102.598556][ T3409] rust_binder: 3409: no such ref 0
[  102.603939][ T3409] rust_binder: Write failure EINVAL in pid:760
[  102.607986][ T3409] rust_binder: Read failure Err(EAGAIN) in pid:760
[  102.650823][ T1842] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  102.681750][   T31] usb 1-1: device descriptor read/8, error -71
[  102.770629][   T63] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  102.790781][   T31] usb usb1-port1: unable to enumerate USB device
[  102.811809][ T1842] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.822895][ T1842] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.832835][ T1842] usb 2-1: config 0 interface 0 has no altsetting 0
[  102.839433][ T1842] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  102.848639][ T1842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.857317][ T1842] usb 2-1: config 0 descriptor??
[  102.884575][ T3420] tc_dump_action: action bad kind
[  102.931567][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.942557][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.956704][   T63] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  102.968730][   T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.977642][   T63] usb 4-1: config 0 descriptor??
[  102.986819][ T3431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  102.986845][ T3431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:782
[  103.250646][ T1268] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  103.265190][ T1842] wacom 0003:056A:002A.0016: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  103.278453][ T1842] wacom 0003:056A:002A.0016: hidraw1: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.1-1/input0
[  103.291189][ T1842] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:002A.0016/input/input14
[  103.386548][   T63] belkin 0003:1020:0006.0017: unknown main item tag 0x3
[  103.398670][   T63] belkin 0003:1020:0006.0017: hidraw2: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0
[  103.411245][ T1268] usb 3-1: Using ep0 maxpacket: 16
[  103.425534][ T1268] usb 3-1: too many configurations: 186, using maximum allowed: 8
[  103.434470][ T1268] usb 3-1: unable to read config index 0 descriptor/start: -61
[  103.442067][ T1268] usb 3-1: can't read configurations, error -61
[  103.473432][ T3437] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 134)
[  103.473458][ T3437] rust_binder: Error while translating object.
[  103.484048][ T3437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  103.490230][ T3437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618
[  103.506813][   T63] usb 2-1: USB disconnect, device number 40
[  103.543346][ T3443] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  103.570687][ T1268] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  103.730636][ T1268] usb 3-1: Using ep0 maxpacket: 16
[  103.736144][ T1268] usb 3-1: too many configurations: 186, using maximum allowed: 8
[  103.745042][ T1268] usb 3-1: unable to read config index 0 descriptor/start: -61
[  103.752670][ T1268] usb 3-1: can't read configurations, error -61
[  103.759010][ T1268] usb usb3-port1: attempt power cycle
[  104.064807][ T3449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  104.064840][ T3449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:626
[  104.103237][ T1268] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  104.130968][ T1268] usb 3-1: Using ep0 maxpacket: 16
[  104.139857][ T1268] usb 3-1: too many configurations: 186, using maximum allowed: 8
[  104.155261][ T1268] usb 3-1: unable to read config index 0 descriptor/start: -61
[  104.168707][ T1268] usb 3-1: can't read configurations, error -61
[  104.310624][ T1268] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  104.340982][ T1268] usb 3-1: Using ep0 maxpacket: 16
[  104.346608][ T1268] usb 3-1: too many configurations: 186, using maximum allowed: 8
[  104.355689][ T1268] usb 3-1: unable to read config index 0 descriptor/start: -61
[  104.363432][ T1268] usb 3-1: can't read configurations, error -61
[  104.369991][ T1268] usb usb3-port1: unable to enumerate USB device
[  104.810621][   T63] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  104.962899][ T3460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  104.962932][ T3460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:504
[  104.983543][   T63] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  105.003230][   T63] usb 1-1: too many endpoints for config 0 interface 0 altsetting 97: 97, using maximum allowed: 30
[  105.019347][   T63] usb 1-1: config 0 interface 0 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  105.032635][   T63] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.040615][   T63] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  105.049708][   T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.057730][   T63] usb 1-1: Product: syz
[  105.061951][   T63] usb 1-1: Manufacturer: syz
[  105.066538][   T63] usb 1-1: SerialNumber: syz
[  105.071782][   T63] usb 1-1: config 0 descriptor??
[  105.250651][ T1268] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  105.282879][   T63] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  105.292919][   T63] usb 1-1: USB disconnect, device number 40
[  105.298731][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  105.401706][ T1268] usb 2-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config
[  105.411951][ T1268] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  105.424939][ T1268] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  105.434078][ T1268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.442628][ T1268] usb 2-1: config 0 descriptor??
[  105.448350][ T1268] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  105.540058][ T1268] usb 4-1: USB disconnect, device number 42
[  105.880669][ T1268] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  106.031655][ T1268] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.041802][ T1268] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  106.050821][ T1268] usb 4-1: config 1 has no interface number 0
[  106.056958][ T1268] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.060626][   T63] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  106.067847][ T1268] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  106.084631][ T1268] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  106.098998][ T1268] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.114345][ T1268] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  106.124121][ T1268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.134945][ T1268] usb 4-1: Product: syz
[  106.139348][ T1268] usb 4-1: Manufacturer: syz
[  106.144184][ T1268] usb 4-1: SerialNumber: syz
[  106.198541][ T3474] 9pnet_fd: Insufficient options for proto=fd
[  106.213163][   T36] audit: type=1400 audit(2000000287.288:593): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  106.232172][   T63] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.244931][   T63] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.255249][   T63] usb 1-1: config 0 interface 0 has no altsetting 0
[  106.262018][   T63] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  106.271211][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.283689][   T63] usb 1-1: config 0 descriptor??
[  106.358978][ T3477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.367978][ T3477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.399489][   T36] audit: type=1400 audit(2000000287.468:594): avc:  denied  { mounton } for  pid=3478 comm="syz.2.1091" path="/syzcgroup/unified/syz2" dev="pstore" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1
[  106.399595][ T3479] /dev/rnullb0: Can't open blockdev
[  106.516195][ T3481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  106.516224][ T3481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:797
[  106.544676][ T3484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.686421][   T36] audit: type=1400 audit(2000000287.758:595): avc:  denied  { create } for  pid=3489 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  106.720158][ T3466] random: crng reseeded on system resumption
[  106.760042][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.778931][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.789544][ T1268] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[  106.800621][ T1268] cdc_ncm 4-1:1.1: bind() failure
[  106.807674][ T1268] usb 4-1: USB disconnect, device number 43
[  106.875762][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.885247][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.363432][ T3502] rust_binder: 3502: no such ref 0
[  107.368644][ T3502] rust_binder: 3502: no such ref 2
[  107.383522][ T3504] binder: Unknown parameter 'defcontext01777777777777777777777'
[  107.584072][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  107.607787][   T36] audit: type=1400 audit(2000000288.678:596): avc:  denied  { lock } for  pid=3514 comm="syz.2.1103" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  107.768939][ T3525] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  107.795825][ T3530] input: syz0 as /devices/virtual/input/input17
[  107.807522][ T3529] 9pnet_fd: Insufficient options for proto=fd
[  107.819980][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'.
[  107.838669][   T36] audit: type=1400 audit(2000000288.908:597): avc:  denied  { getattr } for  pid=3531 comm="syz.2.1109" path="cgroup:[4026532465]" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  107.883549][ T3537] rust_binder: Error while translating object.
[  107.883586][ T3537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  107.889907][ T3537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:823
[  107.899347][ T3535] veth1_to_bridge: entered allmulticast mode
[  107.984574][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.030708][ T1266] usb 2-1: USB disconnect, device number 41
[  108.047606][ T3542] incfs: Error accessing: ./file0.
[  108.052818][ T3542] incfs: mount failed -20
[  108.067714][ T3542] /dev/rnullb0: Can't open blockdev
[  108.142985][ T3556] 9pnet_fd: Insufficient options for proto=fd
[  108.185051][ T3565] rust_binder: Write failure EINVAL in pid:832
[  108.222565][ T3567] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  108.360692][ T1268] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  108.500649][ T1268] usb 3-1: device descriptor read/64, error -71
[  108.740675][ T1268] usb 3-1: device descriptor read/64, error -71
[  108.955415][ T3587] SELinux: security_context_str_to_sid () failed with errno=-22
[  108.980853][ T1268] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  109.092307][ T3591] lo: MTU too low for tipc bearer
[  109.097367][ T3591] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  109.110673][ T1268] usb 3-1: device descriptor read/64, error -71
[  109.271444][   T36] audit: type=1400 audit(2000000290.348:598): avc:  denied  { mounton } for  pid=3592 comm="syz.3.1131" path="/289/file0" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  109.328668][ T3595] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true
[  109.328694][ T3595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  109.336744][ T3595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:859
[  109.360672][ T1268] usb 3-1: device descriptor read/64, error -71
[  109.405097][ T3606] rust_binder: Error while translating object.
[  109.405124][ T3606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  109.411411][ T3606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870
[  109.480740][ T1268] usb usb3-port1: attempt power cycle
[  109.830667][ T1268] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  109.851750][ T1268] usb 3-1: device descriptor read/8, error -71
[  109.981806][ T1268] usb 3-1: device descriptor read/8, error -71
[  110.220725][ T1268] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  110.241644][ T1268] usb 3-1: device descriptor read/8, error -71
[  110.371667][ T1268] usb 3-1: device descriptor read/8, error -71
[  110.480797][ T1268] usb usb3-port1: unable to enumerate USB device
[  110.503592][ T3619] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  110.560413][   T36] audit: type=1400 audit(2000000291.628:599): avc:  denied  { execute } for  pid=3620 comm="syz.1.1142" name="file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  110.582879][ T3621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  110.582911][ T3621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:530
[  110.582999][   T36] audit: type=1400 audit(2000000291.628:600): avc:  denied  { execute_no_trans } for  pid=3620 comm="syz.1.1142" path="/187/file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  110.652550][ T3625] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  110.754398][   T36] audit: type=1400 audit(2000000291.828:601): avc:  denied  { setopt } for  pid=3631 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.154865][ T3638] tmpfs: Unknown parameter 'oswap'
[  111.154865][ T3637] tmpfs: Unknown parameter 'oswap'
[  111.235275][   T36] audit: type=1400 audit(2000000292.308:602): avc:  denied  { write } for  pid=3643 comm="syz.3.1150" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  111.256310][   T36] audit: type=1400 audit(2000000292.308:603): avc:  denied  { open } for  pid=3643 comm="syz.3.1150" path="/299/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  111.316985][ T3647] rust_binder: Write failure EINVAL in pid:886
[  111.333972][   T36] audit: type=1400 audit(2000000292.408:604): avc:  denied  { ioctl } for  pid=3648 comm="syz.3.1152" path="/" dev="configfs" ino=2562 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.471653][   T36] audit: type=1400 audit(2000000292.548:605): avc:  denied  { create } for  pid=3648 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  111.530716][ T1268] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  111.531374][   T63] usbhid 1-1:0.0: can't add hid device: -32
[  111.544377][   T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  111.622679][   T63] usb 1-1: USB disconnect, device number 41
[  111.680617][ T1268] usb 3-1: Using ep0 maxpacket: 16
[  111.692664][ T1268] usb 3-1: config 1 interface 0 has no altsetting 0
[  111.715224][ T1268] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  111.716025][ T3668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'.
[  111.740623][ T1268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.748642][ T1268] usb 3-1: Product: syz
[  111.754308][ T1268] usb 3-1: Manufacturer: syz
[  111.761464][ T1268] usb 3-1: SerialNumber: syz
[  111.799505][ T3678] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4
[  111.806897][ T3678] rust_binder: Write failure EINVAL in pid:641
[  111.950622][  T305] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  111.974862][ T1268] usbhid 3-1:1.0: can't add hid device: -71
[  111.982442][ T1268] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  111.992486][ T1268] usb 3-1: USB disconnect, device number 42
[  112.120648][  T305] usb 2-1: Using ep0 maxpacket: 32
[  112.127436][  T305] usb 2-1: config 3 has an invalid interface number: 24 but max is 2
[  112.135562][  T305] usb 2-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config
[  112.145684][  T305] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3
[  112.154552][  T305] usb 2-1: config 3 has no interface number 0
[  112.160664][  T305] usb 2-1: config 3 interface 24 altsetting 14 endpoint 0x2 has invalid maxpacket 51435, setting to 1024
[  112.172137][  T305] usb 2-1: config 3 interface 24 altsetting 14 bulk endpoint 0x2 has invalid maxpacket 1024
[  112.182233][  T305] usb 2-1: config 3 interface 24 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  112.195279][  T305] usb 2-1: config 3 interface 24 has no altsetting 0
[  112.203332][  T305] usb 2-1: New USB device found, idVendor=2304, idProduct=0225, bcdDevice=49.13
[  112.210654][ T1211] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  112.212519][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.228007][  T305] usb 2-1: Product: ఊ
[  112.232192][  T305] usb 2-1: Manufacturer: ခ
[  112.236795][  T305] usb 2-1: SerialNumber: syz
[  112.242273][ T3671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  112.370673][ T1211] usb 1-1: Using ep0 maxpacket: 16
[  112.376981][ T1211] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  112.385233][ T1211] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.395345][ T1211] usb 1-1: config 0 has no interface number 0
[  112.402948][ T1211] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  112.412211][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.420330][ T1211] usb 1-1: Product: syz
[  112.424520][ T1211] usb 1-1: Manufacturer: syz
[  112.429121][ T1211] usb 1-1: SerialNumber: syz
[  112.434445][ T1211] usb 1-1: config 0 descriptor??
[  112.450537][ T3671] rust_binder: Failed copying remainder into alloc: EFAULT
[  112.450552][ T3671] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  112.457895][ T3671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  112.466188][ T3671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:555
[  112.480349][  T305] usb 2-1: USB disconnect, device number 42
[  112.641731][ T1211] usb 1-1: USB disconnect, device number 42
[  112.770683][   T63] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  112.921801][   T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.931975][   T63] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  112.944860][   T63] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  112.953936][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.962580][   T63] usb 3-1: config 0 descriptor??
[  112.997970][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  112.997987][   T36] audit: type=1400 audit(2000000294.068:607): avc:  denied  { create } for  pid=3706 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  113.021453][ T3707] tmpfs: Bad value for 'uid'
[  113.024725][   T36] audit: type=1400 audit(2000000294.098:608): avc:  denied  { getopt } for  pid=3706 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  113.029179][ T3707] tmpfs: Bad value for 'uid'
[  113.030533][ T3707] fuse: Bad value for 'user_id'
[  113.050250][   T36] audit: type=1400 audit(2000000294.098:609): avc:  denied  { mounton } for  pid=3706 comm="syz.1.1170" path="/195/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  113.054856][ T3707] fuse: Bad value for 'user_id'
[  113.194273][ T3709] rust_binder: Error while translating object.
[  113.194300][ T3709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  113.200475][ T3709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559
[  113.299083][ T3724] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  113.308257][ T3724] rust_binder: Read failure Err(EFAULT) in pid:654
[  113.351323][ T3728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=3728 comm=syz.0.1179
[  113.510624][   T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  113.610645][  T305] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  113.662908][   T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  113.672040][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.680026][   T31] usb 2-1: Product: syz
[  113.684425][   T31] usb 2-1: Manufacturer: syz
[  113.689040][   T31] usb 2-1: SerialNumber: syz
[  113.761892][  T305] usb 1-1: not running at top speed; connect to a high speed hub
[  113.770356][  T305] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  113.783287][  T305] usb 1-1: config 1 interface 0 has no altsetting 0
[  113.791384][  T305] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40
[  113.800457][  T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.808497][  T305] usb 1-1: Product: 䰊
[  113.812698][  T305] usb 1-1: Manufacturer: ⠁
[  113.817291][  T305] usb 1-1: SerialNumber: ⠁
[  114.227247][  T305] usbhid 1-1:1.0: can't add hid device: -71
[  114.233256][  T305] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  114.242369][  T305] usb 1-1: USB disconnect, device number 43
[  114.847669][   T36] audit: type=1326 audit(2000000295.918:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.1184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f123138e929 code=0x0
[  115.018478][ T3746] netlink: 'syz.3.1186': attribute type 4 has an invalid length.
[  115.260651][  T305] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  115.410609][  T305] usb 4-1: Using ep0 maxpacket: 16
[  115.416853][  T305] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.427943][  T305] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.437823][  T305] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  115.450837][  T305] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.457456][  T305] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  115.466523][  T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.475125][  T305] usb 4-1: config 0 descriptor??
[  115.536148][   T63] usb 3-1: string descriptor 0 read error: -71
[  115.554413][   T63] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  115.563128][   T63] usb 3-1: USB disconnect, device number 43
[  115.688505][ T3752] wireguard: wg0: Could not create IPv4 socket
[  116.131218][  T305] usbhid 4-1:0.0: can't add hid device: -71
[  116.137194][  T305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  116.148290][  T305] usb 4-1: USB disconnect, device number 44
[  116.284670][ T1211] usb 2-1: USB disconnect, device number 43
[  116.535141][   T36] audit: type=1400 audit(2000000297.608:611): avc:  denied  { execute } for  pid=3781 comm="syz.1.1195" name="file0" dev="ramfs" ino=30713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  116.557264][   T36] audit: type=1400 audit(2000000297.608:612): avc:  denied  { execute_no_trans } for  pid=3781 comm="syz.1.1195" path="/file0" dev="ramfs" ino=30713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  116.611841][   T36] audit: type=1400 audit(2000000297.688:613): avc:  denied  { getopt } for  pid=3785 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.637529][   T36] audit: type=1400 audit(2000000297.708:614): avc:  denied  { setopt } for  pid=3785 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.953024][ T3815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.953058][ T3815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682
[  116.989497][   T36] audit: type=1400 audit(2000000298.058:615): avc:  denied  { execmod } for  pid=3816 comm="syz.0.1209" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  117.170649][   T63] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  117.263172][ T3830] /dev/rnullb0: Can't open blockdev
[  117.299415][ T3837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.321599][   T63] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  117.332927][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  117.343844][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  117.353613][   T63] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  117.368470][   T63] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  117.377548][   T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.385576][   T63] usb 4-1: Product: syz
[  117.389756][   T63] usb 4-1: Manufacturer: syz
[  117.394364][   T63] usb 4-1: SerialNumber: syz
[  117.399443][   T63] usb 4-1: config 0 descriptor??
[  117.605728][ T3813] binder: Bad value for 'defcontext'
[  117.606038][ T3841] binder: Bad value for 'defcontext'
[  117.616923][   T63] usb 4-1: USB disconnect, device number 45
[  117.670649][ T1266] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  117.822001][ T1266] usb 2-1: config 2 has an invalid interface number: 50 but max is 0
[  117.830164][ T1266] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[  117.838265][ T1266] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  117.847231][ T1266] usb 2-1: config 2 has no interface number 0
[  117.853389][ T1266] usb 2-1: config 2 has no interface number 1
[  117.859474][ T1266] usb 2-1: too many endpoints for config 2 interface 43 altsetting 7: 192, using maximum allowed: 30
[  117.871312][ T1266] usb 2-1: config 2 interface 43 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[  117.884495][ T1266] usb 2-1: config 2 interface 50 has no altsetting 0
[  117.891206][ T1266] usb 2-1: config 2 interface 43 has no altsetting 0
[  117.899307][ T1266] usb 2-1: New USB device found, idVendor=0af0, idProduct=6050, bcdDevice=b8.94
[  117.909116][ T1266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.917145][ T1266] usb 2-1: Product: syz
[  117.921314][ T1266] usb 2-1: Manufacturer: syz
[  117.925888][ T1266] usb 2-1: SerialNumber: syz
[  117.995595][ T3843] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  118.003886][ T3843] rust_binder: Write failure EINVAL in pid:694
[  118.140725][ T1266] usb 2-1: USB disconnect, device number 44
[  118.180659][   T36] audit: type=1400 audit(2000000299.248:616): avc:  denied  { setattr } for  pid=3846 comm="syz.3.1218" name="RAWv6" dev="sockfs" ino=32240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  118.430665][ T1211] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  118.560628][ T1211] usb 4-1: device descriptor read/64, error -71
[  118.711520][   T36] audit: type=1400 audit(2000000299.788:617): avc:  denied  { map } for  pid=3859 comm="syz.1.1223" path="socket:[31332]" dev="sockfs" ino=31332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  118.800663][ T1211] usb 4-1: device descriptor read/64, error -71
[  118.980652][  T305] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  119.040635][ T1211] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  119.131690][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.142697][  T305] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  119.151751][  T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.160265][  T305] usb 2-1: config 0 descriptor??
[  119.170637][ T1211] usb 4-1: device descriptor read/64, error -71
[  119.353930][ T3868] batadv_slave_0: entered promiscuous mode
[  119.367176][ T3867] batadv_slave_0: left promiscuous mode
[  119.374096][  T305] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor
[  119.389107][  T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input19
[  119.410690][ T1211] usb 4-1: device descriptor read/64, error -71
[  119.475791][  T305] keytouch 0003:0926:3333.0018: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  119.525814][ T1211] usb usb4-port1: attempt power cycle
[  119.602940][ T3877] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  119.634501][ T3882] binder: Bad value for 'max'
[  119.660833][ T3888] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  119.660858][ T3888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  119.669417][ T3888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:870
[  119.767111][ T3899] batadv_slave_1: entered promiscuous mode
[  119.862882][ T3898] batadv_slave_1: left promiscuous mode
[  119.870682][ T1211] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  119.894532][ T3903] binder: Unknown parameter 'smackfsdef'
[  119.901629][ T1211] usb 4-1: device descriptor read/8, error -71
[  119.923811][ T3905] rust_binder: 3905: no such ref 2
[  119.928968][ T3905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:723
[  119.940003][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'.
[  120.017625][   T36] audit: type=1400 audit(2000000301.088:618): avc:  denied  { map } for  pid=3906 comm="syz.0.1240" path="/proc/725/net/packet" dev="proc" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  120.041632][   T36] audit: type=1400 audit(2000000301.088:619): avc:  denied  { execute } for  pid=3906 comm="syz.0.1240" path="/proc/725/net/packet" dev="proc" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  120.066127][ T3908] rust_binder: 3908: no such ref 0
[  120.066725][ T1211] usb 4-1: device descriptor read/8, error -71
[  120.071615][ T3908] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  120.077506][ T3908] rust_binder: Read failure Err(EFAULT) in pid:725
[  120.087255][ T3908] rust_binder: Write failure EINVAL in pid:725
[  120.310636][ T1211] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  120.341661][ T1211] usb 4-1: device descriptor read/8, error -71
[  120.471676][ T1211] usb 4-1: device descriptor read/8, error -71
[  120.580708][ T1211] usb usb4-port1: unable to enumerate USB device
[  120.621072][ T3911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  120.640558][ T3910] rust_binder: Error while translating object.
[  120.640630][ T3910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.646843][ T3910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:879
[  120.752739][ T3921] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  120.771640][ T3921] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  120.804351][ T3927] /dev/rnullb0: Can't open blockdev
[  120.906785][ T3929] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1247'.
[  120.974613][ T3938] kvm: pic: single mode not supported
[  120.974846][ T3938] kvm: pic: single mode not supported
[  120.982047][ T3938] kvm: pic: single mode not supported
[  120.987625][ T3938] kvm: pic: single mode not supported
[  121.024668][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'.
[  121.039198][ T1211] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  121.160101][ T3947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  121.160125][ T3947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:947
[  121.193013][ T1211] usb 1-1: not running at top speed; connect to a high speed hub
[  121.211079][ T1211] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  121.222045][ T1211] usb 1-1: config 1 interface 0 has no altsetting 0
[  121.229978][ T1211] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.40
[  121.239136][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.247476][ T1211] usb 1-1: Product: 쫸숍뇾켐癳뢠늇뫝䪑૤∑╀氬培훤額쇋覙޿踸৭쇁垦࢛⟄澍躋୹︢먈ख़煎ᾟ瑸潡꒒㞲罌㽂垬襟⿕榍洴随㘴뺡⛊╀諽놢჌့ﰾ鑲綮睚ﰱ㿭ꈪལ检ﰅ〪඿怶☄䅔埏嗥描❩ាጾ样➟单付簴㺞Ɓ⩽敨쬌蹕朳땪흂ꗼᎎꅥ伐ᑮ䲗Ūצּ察
[  121.279021][ T1211] usb 1-1: Manufacturer: И
[  121.283767][ T1211] usb 1-1: SerialNumber: syz
[  121.292006][ T3925] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  121.317052][ T3950] rust_binder: Failed to allocate buffer. len:120, is_oneway:true
[  121.370645][  T305] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  121.510693][  T305] usb 3-1: device descriptor read/64, error -71
[  121.748168][   T31] usb 2-1: USB disconnect, device number 45
[  121.754636][  T305] usb 3-1: device descriptor read/64, error -71
[  121.762713][ T3958] batadv_slave_1: entered promiscuous mode
[  121.775413][ T3957] batadv_slave_1: left promiscuous mode
[  121.800109][ T3960] rust_binder: Failed copying into alloc: EFAULT
[  121.800133][ T3960] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  121.806602][ T3960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  121.815055][ T3960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:619
[  121.970386][ T3972] fuse: Bad value for 'user_id'
[  121.984535][ T3972] fuse: Bad value for 'user_id'
[  122.000628][  T305] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  122.039407][ T3978] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1264'.
[  122.079161][ T3983] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  122.086452][ T3983] rust_binder: Write failure EINVAL in pid:642
[  122.124349][   T36] audit: type=1400 audit(2000000303.198:620): avc:  denied  { connect } for  pid=3986 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.150652][  T305] usb 3-1: device descriptor read/64, error -71
[  122.390647][  T305] usb 3-1: device descriptor read/64, error -71
[  122.500769][  T305] usb usb3-port1: attempt power cycle
[  122.578434][ T4012] overlayfs: missing 'lowerdir'
[  122.580649][ T1268] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  122.591173][ T4012] binder: Unknown parameter 'defcontext01777777777777777777777'
[  122.599640][ T4013] binder: Unknown parameter 'defcontext01777777777777777777777'
[  122.701620][ T4019] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.740604][ T1268] usb 2-1: Using ep0 maxpacket: 32
[  122.753301][ T1268] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  122.763390][ T1268] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  122.772045][ T1268] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  122.781095][ T1268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  122.790787][ T1268] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  122.800641][ T1268] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  122.813773][ T1268] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  122.823130][ T1268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.832093][ T1268] usb 2-1: config 0 descriptor??
[  122.850646][  T305] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  122.871693][  T305] usb 3-1: device descriptor read/8, error -71
[  123.001661][  T305] usb 3-1: device descriptor read/8, error -71
[  123.044702][ T1268] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  123.084194][ T1842] usb 2-1: USB disconnect, device number 46
[  123.092262][ T1842] usblp0: removed
[  123.103466][ T1266] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  123.114138][ T4032] rust_binder: Error while translating object.
[  123.114169][ T4032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  123.120347][ T4032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659
[  123.250632][  T305] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  123.277643][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.281645][  T305] usb 3-1: device descriptor read/8, error -71
[  123.288672][ T1266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.304634][ T1266] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  123.313723][ T1266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.322350][ T1266] usb 4-1: config 0 descriptor??
[  123.421673][  T305] usb 3-1: device descriptor read/8, error -71
[  123.530599][ T1266] usb 4-1: string descriptor 0 read error: -22
[  123.532323][  T305] usb usb3-port1: unable to enumerate USB device
[  123.737925][ T1266] uclogic 0003:256C:006D.0019: interface is invalid, ignoring
[  123.747612][ T1266] usb 4-1: USB disconnect, device number 50
[  123.807964][ T1211] usbhid 1-1:1.0: can't add hid device: -71
[  123.814613][ T1211] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  123.823709][ T1211] usb 1-1: USB disconnect, device number 44
[  124.264760][ T4063] /dev/rnullb0: Can't open blockdev
[  124.289028][ T4070] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  124.300214][ T4070] rust_binder: Write failure EINVAL in pid:924
[  124.328031][ T4075] macsec0: entered allmulticast mode
[  124.385629][ T4086] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  124.600618][   T36] audit: type=1400 audit(2000000305.668:621): avc:  denied  { create } for  pid=4076 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  124.621197][ T4113] tipc: Started in network mode
[  124.626068][ T4113] tipc: Node identity 7, cluster identity 1
[  124.640940][ T4113] tipc: Node number set to 7
[  124.750858][   T36] audit: type=1400 audit(2000000305.828:622): avc:  denied  { unlink } for  pid=4112 comm="syz.2.1303" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  124.797989][   T36] audit: type=1326 audit(2000000305.868:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.2.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84f0f8e929 code=0x0
[  125.269106][ T4124] rust_binder: 4124: no such ref 0
[  125.642593][ T1266] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  125.709584][ T4165] netlink: 'syz.0.1319': attribute type 4 has an invalid length.
[  125.730630][ T1211] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  125.780628][ T1266] usb 2-1: device descriptor read/64, error -71
[  125.880642][ T1211] usb 4-1: Using ep0 maxpacket: 8
[  125.886835][ T1211] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  125.895972][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.900634][  T305] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  125.904971][ T1211] usb 4-1: config 0 descriptor??
[  126.040670][ T1266] usb 2-1: device descriptor read/64, error -71
[  126.060625][  T305] usb 3-1: Using ep0 maxpacket: 32
[  126.066894][  T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.077838][  T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.087601][  T305] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  126.096665][  T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.105350][  T305] usb 3-1: config 0 descriptor??
[  126.113853][  T305] hub 3-1:0.0: USB hub found
[  126.280625][ T1266] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  126.313871][  T305] hub 3-1:0.0: 2 ports detected
[  126.410631][ T1266] usb 2-1: device descriptor read/64, error -71
[  126.530963][ T1211] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  126.557077][ T1211] asix 4-1:0.0: probe with driver asix failed with error -61
[  126.680625][ T1266] usb 2-1: device descriptor read/64, error -71
[  126.790832][ T1266] usb usb2-port1: attempt power cycle
[  126.814827][  T305] usb 3-1: USB disconnect, device number 48
[  126.930656][ T1211] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  127.080709][ T1211] usb 1-1: Using ep0 maxpacket: 8
[  127.087857][ T1211] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.101112][ T1211] usb 1-1: config 1 interface 0 has no altsetting 0
[  127.109164][ T1211] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40
[  127.118544][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.126686][ T1211] usb 1-1: Product: Є
[  127.130981][ T1266] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  127.138591][ T1211] usb 1-1: Manufacturer: 轩陼皋ჲ㰺퇫᧡ಙ苄擁籩鮻옪숅
[  127.147521][ T1211] usb 1-1: SerialNumber: syz
[  127.161606][ T1266] usb 2-1: device descriptor read/8, error -71
[  127.176620][ T4180] rust_binder: 4180: no such ref 2
[  127.291652][ T1266] usb 2-1: device descriptor read/8, error -71
[  127.360198][ T4175] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1323'.
[  127.374202][ T1211] usbhid 1-1:1.0: can't add hid device: -71
[  127.380171][ T1211] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  127.389406][ T1211] usb 1-1: USB disconnect, device number 45
[  127.530667][ T1266] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  127.551663][ T1266] usb 2-1: device descriptor read/8, error -71
[  127.681667][ T1266] usb 2-1: device descriptor read/8, error -71
[  127.790727][ T1266] usb usb2-port1: unable to enumerate USB device
[  128.027330][ T4188] rust_binder: 4188: no such ref 3
[  128.055499][ T4191] binder: Binderfs stats mode cannot be changed during a remount
[  128.371093][ T4198] overlayfs: upper fs does not support tmpfile.
[  128.410628][ T1266] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  128.571630][ T1266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.590647][ T1266] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  128.599696][ T1266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.624220][ T1266] usb 3-1: config 0 descriptor??
[  128.710643][  T305] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  128.860635][  T305] usb 2-1: Using ep0 maxpacket: 32
[  128.873083][ T1842] usb 4-1: USB disconnect, device number 51
[  128.890755][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.903426][  T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  128.917260][  T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.938527][  T305] usb 2-1: config 0 descriptor??
[  128.944949][  T305] hub 2-1:0.0: bad descriptor, ignoring hub
[  128.950925][  T305] hub 2-1:0.0: probe with driver hub failed with error -5
[  128.958334][  T305] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  129.032469][ T1266] lenovo 0003:17EF:6047.001A: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[  129.230676][ T1842] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  129.260693][ T1211] usb 2-1: USB disconnect, device number 51
[  129.381727][ T1842] usb 4-1: config index 0 descriptor too short (expected 5668, got 36)
[  129.390077][ T1842] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32
[  129.398706][ T1842] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84
[  129.407697][ T1842] usb 4-1: config 3 has no interface number 0
[  129.413800][ T1842] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  129.424689][ T1842] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  129.435918][ T1842] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  129.445049][ T1842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.453313][ T1842] usb 4-1: Product: syz
[  129.457473][ T1842] usb 4-1: Manufacturer: syz
[  129.462083][ T1842] usb 4-1: SerialNumber: syz
[  129.467569][ T4214] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.676611][ T4214] 9pnet_fd: Insufficient options for proto=fd
[  129.691944][ T4214] binder: Unknown parameter 'fscontext?}'
[  129.700304][ T1842] usb-storage 4-1:3.20: USB Mass Storage device detected
[  129.710861][ T1842] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4
[  129.718868][ T1842] scsi host1: usb-storage 4-1:3.20
[  129.729220][ T1842] usb 4-1: USB disconnect, device number 52
[  129.763733][   T36] audit: type=1400 audit(2000000310.838:624): avc:  denied  { validate_trans } for  pid=4226 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  130.043694][ T1842] usb 3-1: USB disconnect, device number 49
[  130.212905][ T4231] binder: Bad value for 'max'
[  130.520636][ T1842] usb 4-1: new low-speed USB device number 53 using dummy_hcd
[  130.682792][ T1842] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.695788][ T1842] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  130.706692][ T1842] usb 4-1: config 0 interface 0 has no altsetting 0
[  130.713643][ T1842] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  130.722954][ T1842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.732790][ T1842] usb 4-1: config 0 descriptor??
[  130.741589][ T4234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.910648][  T305] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  130.950136][ T4278] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  130.990653][   T63] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  131.099854][  T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.110992][  T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.120772][  T305] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  131.129804][  T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.138399][  T305] usb 1-1: config 0 descriptor??
[  131.143403][   T63] usb 2-1: device descriptor read/64, error -71
[  131.340627][ T1266] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  131.380613][   T63] usb 2-1: device descriptor read/64, error -71
[  131.490619][ T1266] usb 3-1: Using ep0 maxpacket: 16
[  131.496837][ T1266] usb 3-1: config 4 has an invalid interface number: 15 but max is 0
[  131.505103][ T1266] usb 3-1: config 4 has no interface number 0
[  131.511285][ T1266] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  131.521129][ T1266] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  131.531041][ T1266] usb 3-1: config 4 interface 15 has no altsetting 0
[  131.539235][ T1266] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44
[  131.548315][ T1266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.552487][  T305] belkin 0003:1020:0006.001B: unknown main item tag 0x3
[  131.556324][ T1266] usb 3-1: Product: syz
[  131.568438][ T1266] usb 3-1: Manufacturer: syz
[  131.573187][ T1266] usb 3-1: SerialNumber: syz
[  131.573354][  T305] belkin 0003:1020:0006.001B: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0
[  131.578706][ T4285] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  131.599976][ T4285] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  131.620643][   T63] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  131.750627][   T63] usb 2-1: device descriptor read/64, error -71
[  131.808042][ T4287] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  131.815428][ T4287] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  131.827124][ T1266] ax88179_178a 3-1:4.15: probe with driver ax88179_178a failed with error -71
[  131.846091][ T1266] usb 3-1: USB disconnect, device number 50
[  131.990621][   T63] usb 2-1: device descriptor read/64, error -71
[  132.100705][   T63] usb usb2-port1: attempt power cycle
[  132.140631][ T1266] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  132.291871][ T1266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.303382][ T1266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.313228][ T1266] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  132.322442][ T1266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.331162][ T1266] usb 3-1: config 0 descriptor??
[  132.440636][   T63] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  132.461735][   T63] usb 2-1: device descriptor read/8, error -71
[  132.591617][   T63] usb 2-1: device descriptor read/8, error -71
[  132.745067][ T1266] belkin 0003:1020:0006.001C: unknown main item tag 0x3
[  132.752721][ T1266] belkin 0003:1020:0006.001C: hidraw2: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0
[  132.830630][   T63] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  132.851658][   T63] usb 2-1: device descriptor read/8, error -71
[  132.981549][   T63] usb 2-1: device descriptor read/8, error -71
[  133.090711][   T63] usb usb2-port1: unable to enumerate USB device
[  133.242795][ T1842] usbhid 4-1:0.0: can't add hid device: -71
[  133.249276][ T1842] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  133.259869][ T1842] usb 4-1: USB disconnect, device number 53
[  133.363031][   T36] audit: type=1400 audit(2000000314.438:625): avc:  denied  { compute_member } for  pid=4307 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  133.383725][ T4308] rust_binder: 4308: no such ref 0
[  133.388877][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.388891][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.388895][ T4309] rust_binder: Write failure EINVAL in pid:1040
[  133.388920][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.409908][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.417968][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.424622][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.432635][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.439224][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.447479][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.454084][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.462129][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.468932][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.477092][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.483835][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.491921][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.498561][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.506561][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.513304][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.521306][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.527890][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.536386][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.542988][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.551107][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.557692][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.565688][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.572283][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.580261][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.586853][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.594869][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.601473][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.609461][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.616063][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.624079][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.630676][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.638673][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.645270][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.653277][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.659843][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.667869][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.674485][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.682504][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.686246][ T1842] usb 1-1: USB disconnect, device number 46
[  133.689085][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.689124][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.715486][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.724210][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.733679][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.742358][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.749008][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.757213][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.764121][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.772168][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.778740][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.786746][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.793709][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.802040][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.808679][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.819567][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.826379][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.834574][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.842793][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.850828][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.857443][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.865528][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.872187][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.880193][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.887590][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.896039][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.902691][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.920631][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.927218][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.950915][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.966368][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.979194][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  133.991358][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  133.999417][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.006038][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.014167][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.020812][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.028931][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.035585][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.043714][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.050354][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.058444][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.065188][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.073336][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.079986][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.088057][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.094785][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.102863][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.106390][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'.
[  134.109552][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.126516][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.133216][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.141369][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.147997][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.156162][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.163026][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.163974][ T4330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  134.171135][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.187157][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.192511][ T4330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:798
[  134.195217][ T4308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  134.211844][ T4308] rust_binder: Read failure Err(EFAULT) in pid:1040
[  134.630632][ T1211] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  134.811053][ T1211] usb 4-1: no configurations
[  134.815824][ T1211] usb 4-1: can't read configurations, error -22
[  134.839674][  T383] usb 3-1: USB disconnect, device number 51
[  134.856507][   T36] audit: type=1400 audit(2000000315.928:626): avc:  denied  { create } for  pid=4345 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  134.856725][ T4346] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  134.887952][ T4346] binder: Unknown parameter 'euid>00000000000000000000'
[  134.950693][ T1211] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  135.100997][ T1211] usb 4-1: no configurations
[  135.105602][ T1211] usb 4-1: can't read configurations, error -22
[  135.112122][ T1211] usb usb4-port1: attempt power cycle
[  135.450650][ T1211] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  135.471385][ T1211] usb 4-1: no configurations
[  135.476044][ T1211] usb 4-1: can't read configurations, error -22
[  135.621420][ T1211] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  135.652275][ T1211] usb 4-1: no configurations
[  135.656981][ T1211] usb 4-1: can't read configurations, error -22
[  135.663615][ T1211] usb usb4-port1: unable to enumerate USB device
[  135.732711][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1381'.
[  135.742166][   T36] audit: type=1400 audit(2000000316.818:627): avc:  denied  { ioctl } for  pid=4355 comm="syz.2.1381" path="socket:[35271]" dev="sockfs" ino=35271 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  136.730279][ T4380] loop7: detected capacity change from 0 to 16384
[  136.881347][ T4385] rust_binder: 4385: no such ref 2
[  136.911657][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'.
[  136.922436][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.931272][ T4387] bridge_slave_1 (unregistering): left allmulticast mode
[  136.938302][ T4387] bridge_slave_1 (unregistering): left promiscuous mode
[  136.945368][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.990634][  T383] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  137.025821][ T4394] random: crng reseeded on system resumption
[  137.141738][  T383] usb 3-1: Using ep0 maxpacket: 32
[  137.148354][  T383] usb 3-1: unable to read config index 0 descriptor/start: -61
[  137.156287][  T383] usb 3-1: can't read configurations, error -61
[  137.163304][ T1211] usb 1-1: new low-speed USB device number 47 using dummy_hcd
[  137.300641][  T383] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  137.435600][ T1211] usb 1-1: unable to get BOS descriptor or descriptor too short
[  137.446603][ T1211] usb 1-1: unable to read config index 0 descriptor/start: -71
[  137.454544][ T1211] usb 1-1: can't read configurations, error -71
[  137.460947][  T383] usb 3-1: Using ep0 maxpacket: 32
[  137.474857][  T383] usb 3-1: unable to read config index 0 descriptor/start: -61
[  137.486758][  T383] usb 3-1: can't read configurations, error -61
[  137.493584][  T383] usb usb3-port1: attempt power cycle
[  137.840656][  T383] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  137.867291][  T383] usb 3-1: Using ep0 maxpacket: 32
[  137.879336][  T383] usb 3-1: unable to read config index 0 descriptor/start: -61
[  137.887823][  T383] usb 3-1: can't read configurations, error -61
[  137.984023][ T4436] fuse: Unknown parameter '00000000000000000000'
[  138.030673][  T383] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  138.056539][ T4460] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1415'.
[  138.061012][  T383] usb 3-1: Using ep0 maxpacket: 32
[  138.065662][ T4460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1415'.
[  138.073702][  T383] usb 3-1: unable to read config index 0 descriptor/start: -61
[  138.089207][  T383] usb 3-1: can't read configurations, error -61
[  138.100851][  T383] usb usb3-port1: unable to enumerate USB device
[  138.109709][   T36] audit: type=1400 audit(2000000319.178:628): avc:  denied  { append } for  pid=4457 comm="syz.1.1414" name="pfkey" dev="proc" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  138.138192][   T36] audit: type=1400 audit(2000000319.208:629): avc:  denied  { create } for  pid=4461 comm="syz.0.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  138.620642][ T1211] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  138.771654][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.782604][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.792361][ T1211] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  138.801408][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.809887][ T1211] usb 1-1: config 0 descriptor??
[  138.886513][  T310] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.947237][   T36] audit: type=1400 audit(2000000320.018:630): avc:  denied  { create } for  pid=4475 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  138.986090][ T4480] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  139.220131][ T1211] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x4
[  139.235286][ T1211] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0
[  139.242509][ T1211] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0
[  139.249727][ T1211] hid-steam 0003:28DE:1142.001D: item fetching failed at offset 3/5
[  139.257859][ T1211] hid-steam 0003:28DE:1142.001D: steam_probe:parse of hid interface failed
[  139.266476][ T1211] hid-steam 0003:28DE:1142.001D: probe with driver hid-steam failed with error -22
[  139.421564][   T63] usb 1-1: USB disconnect, device number 49
[  139.750667][ T1211] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  139.772567][ T4489] rust_binder: 4489: no such ref 0
[  139.777701][ T4489] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  139.777712][ T4489] rust_binder: Read failure Err(EFAULT) in pid:1047
[  139.803900][   T36] audit: type=1400 audit(2000000320.878:631): avc:  denied  { map } for  pid=4490 comm="syz.2.1426" path="net:[4026532484]" dev="nsfs" ino=4026532484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  139.922414][ T1211] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0
[  139.932247][ T1211] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0
[  139.941981][ T1211] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  139.954880][ T1211] usb 4-1: config 1 interface 0 has no altsetting 0
[  140.100653][   T63] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  140.251337][   T63] usb 3-1: not running at top speed; connect to a high speed hub
[  140.259787][   T63] usb 3-1: config 95 has an invalid interface number: 1 but max is 0
[  140.267914][   T63] usb 3-1: config 95 has no interface number 0
[  140.274109][   T63] usb 3-1: config 95 interface 1 has no altsetting 0
[  140.282256][   T63] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  140.291319][   T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.299304][   T63] usb 3-1: Product: syz
[  140.303476][   T63] usb 3-1: Manufacturer: syz
[  140.308070][   T63] usb 3-1: SerialNumber: syz
[  140.530620][   T63] usb 3-1: USB disconnect, device number 56
[  140.546542][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  140.890629][ T1019] Bluetooth: hci0: command 0x1003 tx timeout
[  140.890621][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  140.932030][   T36] audit: type=1400 audit(2000000322.008:632): avc:  denied  { append } for  pid=4510 comm="syz.0.1432" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.042001][ T4520] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1436'.
[  141.170666][   T63] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  141.186056][  T310] tipc: Subscription rejected, illegal request
[  141.320979][   T63] usb 1-1: Using ep0 maxpacket: 16
[  141.327203][   T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.338172][   T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.347936][   T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  141.360751][   T63] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  141.369781][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.378495][   T63] usb 1-1: config 0 descriptor??
[  141.450644][ T1842] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  141.595025][ T4511] syzkaller0: entered promiscuous mode
[  141.600526][ T4511] syzkaller0: entered allmulticast mode
[  141.809329][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.817926][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.944200][   T63] usbhid 1-1:0.0: can't add hid device: -71
[  141.951711][   T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  141.960557][   T63] usb 1-1: USB disconnect, device number 50
[  141.962787][ T4555] overlayfs: overlapping lowerdir path
[  142.043588][   T36] audit: type=1400 audit(2000000323.118:633): avc:  denied  { rename } for  pid=4571 comm="syz.1.1449" name="file0" dev="tmpfs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  142.187446][ T4583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:805
[  142.323270][   T63] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  142.342970][ T4602] tmpfs: Unknown parameter 'hugeWdvise'
[  142.415123][ T4612] /dev/rnullb0: Can't open blockdev
[  142.420421][ T4613] /dev/rnullb0: Can't open blockdev
[  142.491748][   T63] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  142.503145][   T63] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  142.513976][   T63] usb 1-1: config 0 interface 0 has no altsetting 0
[  142.524616][   T63] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  142.534331][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.536782][ T1211] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.548687][   T63] usb 1-1: config 0 descriptor??
[  142.551917][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.564586][ T4568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  142.573148][ T1211] usb 4-1: Product: 묅㞜㜣䌵둩뷓㿐錿㙻퉷㣧鵄㰗혝駧궘靎輦鎃ㄱ吣蠝⍩釸
[  142.585738][ T1211] usb 4-1: can't set config #1, error -71
[  142.592924][ T1211] usb 4-1: USB disconnect, device number 58
[  142.605415][ T4617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  142.605436][ T4617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1101
[  142.680635][ T1268] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  142.700610][ T1842] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  142.777791][   T63] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x6
[  142.791875][   T63] holtek_mouse 0003:04D9:A067.001E: hidraw1: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0
[  142.807309][   T63] usb 1-1: USB disconnect, device number 51
[  142.827457][ T4625] fido_id[4625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  142.830646][ T1842] usb 2-1: device descriptor read/64, error -71
[  142.846920][ T1268] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  142.859178][ T1268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.863763][ T4634] input: syz1 as /devices/virtual/input/input21
[  142.867561][ T1268] usb 3-1: Product: syz
[  142.877932][ T1268] usb 3-1: Manufacturer: syz
[  142.882696][ T1268] usb 3-1: SerialNumber: syz
[  143.000633][ T1211] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  143.080641][ T1842] usb 2-1: device descriptor read/64, error -71
[  143.151695][ T1211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.162797][ T1211] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  143.171857][ T1211] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9
[  143.179946][ T1211] usb 4-1: Manufacturer: syz
[  143.184582][ T1211] usb 4-1: SerialNumber: syz
[  143.189745][ T1211] usb 4-1: config 0 descriptor??
[  143.220639][   T63] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  143.330664][ T1842] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  143.350623][   T63] usb 1-1: device descriptor read/64, error -71
[  143.397447][ T4623] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  143.414942][ T1211] usb 4-1: USB disconnect, device number 59
[  143.461150][ T1842] usb 2-1: device descriptor read/64, error -71
[  143.600630][   T63] usb 1-1: device descriptor read/64, error -71
[  143.700648][ T1842] usb 2-1: device descriptor read/64, error -71
[  143.810716][ T1842] usb usb2-port1: attempt power cycle
[  143.840717][   T63] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  143.976863][   T63] usb 1-1: device descriptor read/64, error -71
[  144.150646][ T1842] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  144.171612][ T1842] usb 2-1: device descriptor read/8, error -71
[  144.220630][   T63] usb 1-1: device descriptor read/64, error -71
[  144.301626][ T1842] usb 2-1: device descriptor read/8, error -71
[  144.310639][ T1211] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  144.330712][   T63] usb usb1-port1: attempt power cycle
[  144.461633][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.472576][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.482330][ T1211] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  144.491434][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.500187][ T1211] usb 4-1: config 0 descriptor??
[  144.540677][ T1842] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  144.561656][ T1842] usb 2-1: device descriptor read/8, error -71
[  144.670671][   T63] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  144.691719][   T63] usb 1-1: device descriptor read/8, error -71
[  144.697895][ T1842] usb 2-1: device descriptor read/8, error -71
[  144.810709][ T1842] usb usb2-port1: unable to enumerate USB device
[  144.821817][   T63] usb 1-1: device descriptor read/8, error -71
[  144.908994][ T1211] belkin 0003:1020:0006.001F: unknown main item tag 0x3
[  144.916738][ T1211] belkin 0003:1020:0006.001F: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0
[  145.060645][   T63] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  145.081690][   T63] usb 1-1: device descriptor read/8, error -71
[  145.211620][   T63] usb 1-1: device descriptor read/8, error -71
[  145.320737][   T63] usb usb1-port1: unable to enumerate USB device
[  145.422542][ T4656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:828
[  145.443079][  T305] usb 3-1: USB disconnect, device number 58
[  145.488418][ T4665] fuse: Unknown parameter 'gK)t;&C�>�Hd>0x0000000000000007'
[  145.497490][ T4667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1096
[  146.394204][ T4691] /dev/rnullb0: Can't open blockdev
[  146.475717][ T4696] rust_binder: Error while translating object.
[  146.475750][ T4696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  146.482168][ T4696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:882
[  146.500008][ T4693] rust_binder: Error while translating object.
[  146.509330][ T4693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  146.520206][ T4693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1105
[  146.616429][   T36] audit: type=1400 audit(2000000327.688:634): avc:  denied  { listen } for  pid=4707 comm="syz.1.1495" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.654018][ T4718] /dev/rnullb0: Can't open blockdev
[  146.668087][   T36] audit: type=1400 audit(2000000327.738:635): avc:  denied  { create } for  pid=4719 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  146.689827][   T36] audit: type=1400 audit(2000000327.758:636): avc:  denied  { execute } for  pid=4719 comm="syz.2.1498" path="pipe:[38055]" dev="pipefs" ino=38055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  146.715352][ T4728] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  146.738732][ T4733] SELinux: security_context_str_to_sid () failed with errno=-22
[  146.805384][ T4750] 9pnet_fd: Insufficient options for proto=fd
[  146.821034][ T4754] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1510'.
[  146.891450][  T305] ==================================================================
[  146.899537][  T305] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[  146.906289][  T305] Write of size 8 at addr 0000000000000098 by task kworker/1:3/305
[  146.914158][  T305] 
[  146.916470][  T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/1:3 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[  146.916492][  T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.916501][  T305] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  146.916538][  T305] Call Trace:
[  146.916543][  T305]  <TASK>
[  146.916548][  T305]  __dump_stack+0x21/0x30
[  146.916563][  T305]  dump_stack_lvl+0x10c/0x190
[  146.916574][  T305]  ? __cfi_dump_stack_lvl+0x10/0x10
[  146.916587][  T305]  print_report+0x3d/0x70
[  146.916597][  T305]  kasan_report+0x163/0x1a0
[  146.916613][  T305]  ? down_write+0x83/0x2a0
[  146.916635][  T305]  ? down_write+0x83/0x2a0
[  146.916657][  T305]  kasan_check_range+0x299/0x2a0
[  146.916680][  T305]  __kasan_check_write+0x18/0x20
[  146.916692][  T305]  down_write+0x83/0x2a0
[  146.916704][  T305]  ? __cfi_down_write+0x10/0x10
[  146.916716][  T305]  ? _raw_spin_lock+0x8c/0x120
[  146.916730][  T305]  ? __cfi__raw_spin_lock+0x10/0x10
[  146.916745][  T305]  ? mutex_unlock+0x8b/0x240
[  146.916756][  T305]  ? __cfi_mutex_unlock+0x10/0x10
[  146.916767][  T305]  rust_binderfs_remove_file+0x6c/0x110
[  146.916782][  T305]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  146.916802][  T305]  ? unwind_next_frame+0x3c2/0x750
[  146.916813][  T305]  ? __kernel_text_address+0x11/0x40
[  146.916824][  T305]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  146.916838][  T305]  ? arch_stack_walk+0x139/0x170
[  146.916851][  T305]  ? ret_from_fork_asm+0x1a/0x30
[  146.916865][  T305]  ? stack_trace_save+0x9d/0xe0
[  146.916876][  T305]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  146.916894][  T305]  ? stack_depot_save_flags+0x38/0x800
[  146.916908][  T305]  ? kasan_save_stack+0x4d/0x60
[  146.916921][  T305]  ? kasan_save_stack+0x3e/0x60
[  146.916934][  T305]  ? __kasan_record_aux_stack+0xb2/0xd0
[  146.916945][  T305]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[  146.916956][  T305]  ? __call_rcu_common+0xcc/0x6f0
[  146.916970][  T305]  ? call_rcu+0x14/0x20
[  146.916982][  T305]  ? __kasan_check_write+0x18/0x20
[  146.916993][  T305]  ? _raw_spin_trylock+0xaf/0x130
[  146.917007][  T305]  ? __cfi__raw_spin_trylock+0x10/0x10
[  146.917022][  T305]  ? _raw_spin_unlock+0x45/0x60
[  146.917036][  T305]  ? call_rcu_nocb+0x6bd/0xc10
[  146.917049][  T305]  ? swake_up_one_online_ipi+0x30/0x30
[  146.917060][  T305]  ? __cfi_delayed_put_task_struct+0x10/0x10
[  146.917071][  T305]  ? __call_rcu_common+0x40b/0x6f0
[  146.917085][  T305]  ? call_rcu_hurry+0x30/0x30
[  146.917097][  T305]  ? task_dead_fair+0x110/0x190
[  146.917111][  T305]  ? __cfi_task_dead_fair+0x10/0x10
[  146.917124][  T305]  ? call_rcu+0x14/0x20
[  146.917136][  T305]  ? put_task_struct_rcu_user+0x66/0xb0
[  146.917147][  T305]  ? __switch_to_asm+0x3d/0x70
[  146.917160][  T305]  ? __schedule+0x1463/0x1f10
[  146.917170][  T305]  ? kick_pool+0xb9/0x550
[  146.917180][  T305]  process_scheduled_works+0x7d2/0x1020
[  146.917196][  T305]  worker_thread+0xc58/0x1250
[  146.917209][  T305]  ? try_to_wake_up+0xdd2/0x1aa0
[  146.917226][  T305]  kthread+0x2ca/0x370
[  146.917240][  T305]  ? __cfi_worker_thread+0x10/0x10
[  146.917253][  T305]  ? __cfi_kthread+0x10/0x10
[  146.917267][  T305]  ret_from_fork+0x64/0xa0
[  146.917281][  T305]  ? __cfi_kthread+0x10/0x10
[  146.917295][  T305]  ret_from_fork_asm+0x1a/0x30
[  146.917310][  T305]  </TASK>
[  146.917315][  T305] ==================================================================
[  147.264385][  T305] Disabling lock debugging due to kernel taint
[  147.270546][  T305] BUG: kernel NULL pointer dereference, address: 0000000000000098
[  147.278339][  T305] #PF: supervisor write access in kernel mode
[  147.284382][  T305] #PF: error_code(0x0002) - not-present page
[  147.290424][  T305] PGD 800000010ef97067 P4D 800000010ef97067 PUD 0 
[  147.296915][  T305] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  147.302965][  T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/1:3 Tainted: G    B              6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e
[  147.317880][  T305] Tainted: [B]=BAD_PAGE
[  147.322015][  T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  147.332049][  T305] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  147.348807][  T305] RIP: 0010:down_write+0x9a/0x2a0
[  147.353820][  T305] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  147.373408][  T305] RSP: 0018:ffffc9000b77f500 EFLAGS: 00010256
[  147.379460][  T305] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  147.387415][  T305] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b77f520
[  147.395368][  T305] RBP: ffffc9000b77f598 R08: ffffc9000b77f527 R09: 1ffff920016efea4
[  147.403320][  T305] R10: dffffc0000000000 R11: fffff520016efea5 R12: dffffc0000000000
[  147.411274][  T305] R13: 1ffff920016efea0 R14: ffffc9000b77f520 R15: 0000000000000000
[  147.419228][  T305] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  147.428141][  T305] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.434707][  T305] CR2: 0000000000000098 CR3: 0000000127062000 CR4: 00000000003526b0
[  147.442670][  T305] DR0: 0000000000000001 DR1: 0000000000000003 DR2: 0000000000000007
[  147.450633][  T305] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  147.458595][  T305] Call Trace:
[  147.461862][  T305]  <TASK>
[  147.464780][  T305]  ? __cfi_down_write+0x10/0x10
[  147.469624][  T305]  ? _raw_spin_lock+0x8c/0x120
[  147.474381][  T305]  ? __cfi__raw_spin_lock+0x10/0x10
[  147.479572][  T305]  ? mutex_unlock+0x8b/0x240
[  147.484144][  T305]  ? __cfi_mutex_unlock+0x10/0x10
[  147.489151][  T305]  rust_binderfs_remove_file+0x6c/0x110
[  147.494693][  T305]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  147.507463][  T305]  ? unwind_next_frame+0x3c2/0x750
[  147.512580][  T305]  ? __kernel_text_address+0x11/0x40
[  147.517855][  T305]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  147.524002][  T305]  ? arch_stack_walk+0x139/0x170
[  147.528933][  T305]  ? ret_from_fork_asm+0x1a/0x30
[  147.533858][  T305]  ? stack_trace_save+0x9d/0xe0
[  147.538696][  T305]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  147.551879][  T305]  ? stack_depot_save_flags+0x38/0x800
[  147.557336][  T305]  ? kasan_save_stack+0x4d/0x60
[  147.562194][  T305]  ? kasan_save_stack+0x3e/0x60
[  147.567045][  T305]  ? __kasan_record_aux_stack+0xb2/0xd0
[  147.572576][  T305]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[  147.578542][  T305]  ? __call_rcu_common+0xcc/0x6f0
[  147.583560][  T305]  ? call_rcu+0x14/0x20
[  147.587707][  T305]  ? __kasan_check_write+0x18/0x20
[  147.592804][  T305]  ? _raw_spin_trylock+0xaf/0x130
[  147.597827][  T305]  ? __cfi__raw_spin_trylock+0x10/0x10
[  147.603279][  T305]  ? _raw_spin_unlock+0x45/0x60
[  147.608114][  T305]  ? call_rcu_nocb+0x6bd/0xc10
[  147.612864][  T305]  ? swake_up_one_online_ipi+0x30/0x30
[  147.618313][  T305]  ? __cfi_delayed_put_task_struct+0x10/0x10
[  147.624286][  T305]  ? __call_rcu_common+0x40b/0x6f0
[  147.629389][  T305]  ? call_rcu_hurry+0x30/0x30
[  147.634053][  T305]  ? task_dead_fair+0x110/0x190
[  147.638895][  T305]  ? __cfi_task_dead_fair+0x10/0x10
[  147.644080][  T305]  ? call_rcu+0x14/0x20
[  147.648222][  T305]  ? put_task_struct_rcu_user+0x66/0xb0
[  147.653820][  T305]  ? __switch_to_asm+0x3d/0x70
[  147.658574][  T305]  ? __schedule+0x1463/0x1f10
[  147.663236][  T305]  ? kick_pool+0xb9/0x550
[  147.667550][  T305]  process_scheduled_works+0x7d2/0x1020
[  147.673087][  T305]  worker_thread+0xc58/0x1250
[  147.677751][  T305]  ? try_to_wake_up+0xdd2/0x1aa0
[  147.682681][  T305]  kthread+0x2ca/0x370
[  147.686738][  T305]  ? __cfi_worker_thread+0x10/0x10
[  147.691833][  T305]  ? __cfi_kthread+0x10/0x10
[  147.696411][  T305]  ret_from_fork+0x64/0xa0
[  147.700809][  T305]  ? __cfi_kthread+0x10/0x10
[  147.705389][  T305]  ret_from_fork_asm+0x1a/0x30
[  147.710138][  T305]  </TASK>
[  147.713144][  T305] Modules linked in:
[  147.717021][  T305] CR2: 0000000000000098
[  147.721163][  T305] ---[ end trace 0000000000000000 ]---
[  147.726612][  T305] RIP: 0010:down_write+0x9a/0x2a0
[  147.731626][  T305] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  147.751225][  T305] RSP: 0018:ffffc9000b77f500 EFLAGS: 00010256
[  147.757290][  T305] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  147.765260][  T305] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b77f520
[  147.773230][  T305] RBP: ffffc9000b77f598 R08: ffffc9000b77f527 R09: 1ffff920016efea4
[  147.781200][  T305] R10: dffffc0000000000 R11: fffff520016efea5 R12: dffffc0000000000
[  147.789164][  T305] R13: 1ffff920016efea0 R14: ffffc9000b77f520 R15: 0000000000000000
[  147.797126][  T305] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  147.806046][  T305] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.812618][  T305] CR2: 0000000000000098 CR3: 0000000127062000 CR4: 00000000003526b0
[  147.820580][  T305] DR0: 0000000000000001 DR1: 0000000000000003 DR2: 0000000000000007
[  147.828538][  T305] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  147.836493][  T305] Kernel panic - not syncing: Fatal exception
[  147.842770][  T305] Kernel Offset: disabled
[  147.847074][  T305] Rebooting in 86400 seconds..