last executing test programs:

11.178141201s ago: executing program 2 (id=594):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80070002000300000000000000040037"], 0x34}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0})

11.07223052s ago: executing program 2 (id=595):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xffffffffffffffa4)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x94b72000)
mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

11.06731s ago: executing program 2 (id=596):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
r2 = socket$inet6(0xa, 0x2, 0xfffffffc)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c01, 0x0)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000180))
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x5)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff)
timer_create(0xb, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
dup(r7)

8.975481738s ago: executing program 2 (id=621):
unshare(0x4040400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r0 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x2824, &(0x7f0000000240)=ANY=[])

8.803929033s ago: executing program 2 (id=623):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0xeeef0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fae890d00f02020baa10066b80008000066ef65660f512e73a866b9c802000066b832902a2166ba000000000f30640f934200ba4100ec660fc7370f06e0a2", 0x3f}], 0x1, 0x92, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20)
ftruncate(r1, 0xf09) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000002800)='syz1\x00') (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00')
read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000900)={0x9c, 0x0, &(0x7f00000007c0)=[@enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/44, 0x2c, 0x0, 0x14}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x101, 0x2}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x5, 0x1, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/114, 0x72, 0x1, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/164, 0xa4, 0x1, 0x2c}}, &(0x7f0000000780)={0x0, 0x20, 0x48}}}, @register_looper, @decrefs={0x40046307, 0x1}], 0x5b, 0x0, &(0x7f0000000880)="2e39a73bdc02e77ad250f9a860a044f82c05bada1af2f7931b1fc0de3a2cfee39d67e9011180c4a5911f71cfa731765ca4e108a8907227bd600bd30700762a11bbb0e2022b237ee429e19d419719358d30d550483022f0a8f261e6"})
ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, 0x2})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002680)={[0xfff, 0x7, 0x401, 0x2b, 0x8, 0x9, 0x1, 0x4, 0x9, 0x1, 0x7, 0x9, 0x6, 0x1, 0x8462, 0xffffffff80000000], 0x10000})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000740)=0xc00) (async)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0)
r10 = dup(r9) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff01"], 0x2c}}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000400)={0xa8, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002980)={@fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x8, 0x2000000000000002, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f00000028c0)=""/145, 0x91, 0x1, 0xe}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/76, 0x4c, 0x0, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f00000027c0)=""/28, 0x1c, 0x1, 0x38}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @increfs_done={0x40106308, 0x1}], 0x6b, 0x0, &(0x7f0000002740)="6f52ceedb2012025d15e991dc71833f8c2513d5cc793a4cec9d0f66eda1502ff03000000000000bb8a24c52001e9927e015075c51edcfb80e624272e9956877fffb322d661746b34451f2206000000000000002a7d3df956a12b00e5ff07125948eff91ba5ea0d52329258"}) (async)
clock_adjtime(0x3, &(0x7f0000000080)={0x10001, 0x3, 0x3, 0x4, 0x6, 0x7, 0x5205, 0x55, 0x7, 0xf, 0x2, 0x200, 0x3, 0x10001, 0x8000000000000001, 0x7, 0x4, 0x0, 0x9, 0x96a7, 0x62, 0x80000001, 0x7, 0x0, 0xc8, 0x3})

8.759228116s ago: executing program 2 (id=624):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = userfaultfd(0x80801) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x0) (async)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400000107ffff000, 0x0) (async)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f00000023c0)) (async)
r4 = socket$inet(0x2, 0x4, 0x1)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000100)={0xff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x190) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xdd9a000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8.629218056s ago: executing program 32 (id=624):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = userfaultfd(0x80801) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x0) (async)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400000107ffff000, 0x0) (async)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f00000023c0)) (async)
r4 = socket$inet(0x2, 0x4, 0x1)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000100)={0xff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x190) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xdd9a000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.553835675s ago: executing program 3 (id=706):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4c9dc0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0xd4a, 0x19, [{0x4, 0x1}, {0x4, 0x1}, {0x8}, {0x8}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0xc}, {0xa}, {0xe}, {0xa}, {0xc, 0x1}, {0x3}, {0xc, 0x1}, {}, {0x9}, {0x3}, {0x6, 0x1}, {0xe}, {0x2}]})
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)
sendfile(r0, r0, 0x0, 0x7ffff000)

1.532058507s ago: executing program 3 (id=707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0xb)
r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x180}}], 0x400000000000181, 0x9200000000000000)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.462598973s ago: executing program 3 (id=708):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = getpgrp(0xffffffffffffffff)
tkill(r1, 0x7)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
read(r4, &(0x7f00000007c0)=""/231, 0xe7)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0xb}]})
mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents'])
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.462247422s ago: executing program 3 (id=709):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001c000100100000000200000007000000321396d31b134979cf74b79ecba92fdc57f8a9c1a996975caf3267b1fa209821d18b98b0edf0ac85d77ab0699822b9bac38fbee856960ca135a98ba5e65825520739b6c2fa2fc38fcd9c087edd2685c66872728edf1cf3c11b2a31a537bde467e09205ed88d5f4a866cd19f2e2f136ccbf5a1c415f8a18e7684ea2e2e6811e9f7037cf7e9dcd49dee41eef978c6f0a65adea1ccde2c895cdf02a552a9d4c8ef67e7f7023ef73b4020ddd63f217c74ae629c16f7d924c4671f914eda1d7f33aae072a0a54961d0eae3c4942784817af5cf0f9f0e67bdef597f7"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800)
recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001040)=""/133, 0x85}], 0x2}}], 0x1, 0x40000000, 0x0)
recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(r3, 0x40047705, 0x2)
tee(r3, r4, 0x36, 0x8)

1.411624467s ago: executing program 3 (id=710):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)
syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4c, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'CD'}, {0x5, 0x24, 0x0, 0x7b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x1000, 0x2}, {0x6, 0x24, 0x1a, 0x81, 0x1c}, [@obex={0x5, 0x24, 0x15, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9b, 0x6, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x82, 0x2e, 0x8, 0x20}, 0x20, &(0x7f0000000240)={0x5, 0xf, 0x20, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x6, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x0, 0x4}]}, 0x1, [{0xb8, &(0x7f0000000300)=@string={0xb8, 0x3, "6a4f11165ab6f9653958c403364e8a51413b55889f7b0b77ef20382caa29a59dfab4b56d917b69cd913c1d1b26e991a843d2314629e79232f596cbb55b7f4f7e6df3d2918df83382a15934b89c9e0b9323938faadf85b6b0db71620d2de5ac624e3c149cbfbd3956a7a012694b5c444b90367c469e7a36ba5d106b5af5fa75e9bd85f53d20b63c412c63101031a93e60583a648591a8464ff3553e14ae3431109b547c89b0a1661784f66039cf1d62c1636574a96c41"}}]})

1.082940673s ago: executing program 4 (id=711):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0'])
dup2(r0, r0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) (async)
dup2(r0, r0) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) (async)

1.028030728s ago: executing program 4 (id=712):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000300))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x0, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf8, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000087e000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2d, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4)
setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000080)=0xffffffff, 0x35) (async)
sendmmsg$inet6(r8, &(0x7f00000002c0), 0x0, 0x40488d0) (async)
recvmmsg(r8, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002042, 0x0) (async)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32)

844.981612ms ago: executing program 4 (id=713):
r0 = socket$inet(0x2, 0x1, 0x3)
setsockopt$inet_mreqn(r0, 0x0, 0x25, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socket$inet(0x2, 0x4, 0x1)
fcntl$dupfd(r1, 0x406, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xdd9a000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0xa, 0x7, 0x101, 0x142f, 0x8, 0x3, 0xff, 0xa, [0x3ffffff, 0xfd]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@local, 0x6b, r5})
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

822.790744ms ago: executing program 3 (id=714):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="21fbffff5e0001012cbd70000000000008004100", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, &(0x7f0000001840)=0x1c) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, &(0x7f0000001840)=0x1c)
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msync(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpgrp(0x0) (async)
r4 = getpgrp(0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0xc0)
recvmmsg(r5, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x17f887e6}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40012020, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
r6 = syz_pidfd_open(r4, 0x0)
r7 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) (async)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000280)={0x40000002})
syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r8 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r8, 0x7, r3, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x3})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r10 = syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="63f0", 0x2, 0x20008801, 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r10, 0x80084504, &(0x7f00000000c0)=""/39)
ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000180))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

720.148012ms ago: executing program 4 (id=715):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x3c, @local, 0x4e23, 0x1, 'sed\x00', 0x3d, 0x8, 0x43}, 0x2c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800c078eef6f6a315569213a5035d0000", @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800c078eef6f6a315569213a5035d0000", @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
close_range(r0, 0xffffffffffffffff, 0x0)

622.73387ms ago: executing program 4 (id=720):
r0 = add_key$keyring(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x1}, 0x0, 0x0, r0)
r2 = add_key$fscrypt_v1(&(0x7f0000002800), &(0x7f0000002840)={'fscrypt:', @desc4}, &(0x7f0000002880)={0x0, "54ef38ea48969d0ef5457a05f60a508a65ac31e97fdbbdae1dcc968f77c05d53941f92ea926f720963a63d034d706e4d2e825bab167915ea0ebc17244afcb3a7", 0x37}, 0x48, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000000)=@keyring={'key_or_keyring:', r0})
r3 = add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="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", 0x1000, r3)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001140)=<r5=>0x0)
r6 = syz_open_procfs(r5, &(0x7f0000001180)='projid_map\x00')
ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000000c0)={0xd, 0x3})
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000046d000/0x3000)=nil)
write$P9_RREAD(r6, &(0x7f0000001200)={0x8a, 0x75, 0x2, {0x7f, "6b71ce411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459643a647d6768d82ef16f91a221576ed89a4a48e3e7cfc2b9146f75ff1c459ea2145c2632c9cc52c82af4f6ffde5b5a5aa88a0277da629d80e7a303bcdcbdccf1a078b5db30e727f8f3d6994ef0a73c792c16eeecf45eb8fbf3e873a92e04e44444"}}, 0x8a)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0)

607.259152ms ago: executing program 4 (id=722):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
sendfile(r0, r1, &(0x7f0000000080)=0x7163, 0x7) (async)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x408800)
read(r1, &(0x7f0000000100)=""/53, 0x35) (async)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x8000000000000001, 0x10000}) (async)
r2 = syz_usb_connect(0x1, 0xccc, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0xa0, 0x7b, 0xd9, 0x10, 0x2020, 0x4000, 0x7763, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcba, 0x3, 0xfa, 0x2, 0x0, 0xf7, [{{0x9, 0x4, 0x6f, 0x6, 0xd, 0xff, 0xad, 0x10, 0x1, [@generic={0xa4, 0x31, "a82c167f192071809574ca3de4ed24b92e51467bef237d9fefbe90cb9adbd0ac11692d5292aac0356abd9b7736fc843560a129bd95f4b8f1a9de7afdd93a177a302fc7084ec516ed252a0bb1d02085a378d2a3632cb56adfbb70dde114b89fe3b31a6a983c4058496afb3e55741a62e10e816c99a68071cebff740b934dfa0f53bd3c24831ec84d6b1dcc0149b09ddae1691eaf5d518ad3a340badbd730ada889307"}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x42, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xd}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x6, 0xef, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x50, 0x3, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x3, 0x2, 0x40, [@generic={0x9a, 0xe, "ed49e46c24df920c0c32b9d81d627791263e6e8369c9057d7612ab4f67af3acdf0b5f0d428a3b6198a897d8a821e5415ed91af0ae2b837a31c80befb25e195c9a064422fb658af4a3153b713f65d5ddc179cf8b644f577c32f5f342e0aa266e32d9ca89267fc7ca408806a9c99a943e36dd3b09350d1f1f99dc4a3d41143878bca3ad3d1171d91fbab5422f1d7d4d4e0579f6e41e9e64fa4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa8, 0x8}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x9a, 0x6, 0xee, [@generic={0xc0, 0x30, "98f0c6dd198d6915818690c841b1af158ce4faa426fd0f8bb8aada2af0e8cf65b26912ce24bb330616ab94fdabae79ecee8923ff7b1f1d79ab7573a4a8f9315dc48aee82fd349e1112e6967e705d318288307c68d9b0a4d05a6c64e30e63f484bcdff639b6f6fb131ca38938a971dc77ffb559c035bedc380478e8443321e22f782792673b8b2d2de3ab190e25fe646ae1ec7ead406bc0a43c9cfec3b31c8436d1526e14e740e19d879db2ec7be72e113c25666dd203cf035f34734c35e5"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x1, 0x7, 0x9, [@generic={0x10, 0x5e4a2aea705e6ba9, "f04791701977a7843e5ab9c0e7b2"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x10, 0xaf, 0x7, [@generic={0x7c, 0x30, "67ef6e5a61d8b20917c179efd71dac2a4b81f4d5b8a66fda063c6f5795580871ff0e202d2b9e947b7ccee53ec7e43fb57fc2bec06faab2b7aaa73ec7594be25186cd66fc3bfb18da9c1747b67be7608f7f7d0b1ae4e91125964709b6e568c1c419fead7fa2495de40af45166dabb4dda9f238d79f9b097acb197"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x6d, 0x4, 0x2, [@generic={0x24, 0xb, "1dba2f0e3645ffb9b7e3be7d899dc11918183a496acd7b372be62704f2caf8992c57"}]}}, {{0x9, 0x5, 0xa, 0x6fec97b706a64468, 0x400, 0x3b, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3d, 0x8, 0x3, [@generic={0x44, 0x30, "88242e356c717226d09694ecbbf8bd9dda3f6bcac0db475004ba02eb7a0badb7e90c4d9fc96af5abbc495fd40692994f27d6f1314280eb59eddde52fdcf5adca7688"}, @generic={0x9d, 0x24, "2d50725ea4393f20fa94a52242f582a3d4f2e4c3941ecbf84ebed088b3ed83c39e453c5d9c582c8b0c972d2b21f5b6ba31e34ef900fc42c6b60131c3627b42c156eeaf295d7afd8d0c8f0a797ec7e674a4df8fdef0edeb6f4a77a2fc17df60b816e9ab7f53c67698b127513a0c25685cabe417d997506ecd104cb55948ad0bda2ffac2c4de5ba0c0400f8ba9b3cc3ef9d0410921730641c2716044"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0x2, 0x1, [@generic={0x65, 0x7, "4f07f1087e7eaf100f7321df95636d6206ad63637cfcf893ff537d270a9aec10000f2c4ec54e8ee127c0e64f87882fd9e6bd93c30fc9b4bdaf53d803b0a2757ffa5996cc63072b4e3bfdbdb47e7cd734c7589cf45279f1e590d49ae292998bdbac46f1"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x88, 0x4, [@generic={0xe, 0x21, "df909d480b18f72921e56d2c"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xfd, 0xc5, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x7fa}]}}]}}, {{0x9, 0x4, 0xd7, 0x4, 0xf, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xb6}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x1, 0xa, 0x9, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x5, 0x5, [0x8, 0x5, 0x2, 0x1, 0x7], 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x80}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x1f}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x1, 0x4, ']NC3'}]}], [{{0x9, 0x5, 0x6, 0x4, 0x20, 0x3, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xae, 0x3, 0x81, [@generic={0xb, 0xc, "1648bfcded271a1996"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x6, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x29, 0x8, 0xf9, [@generic={0x1d, 0x21, "b8b02e77ba7c20a6559ef37417ee39aff557efa6bcb9790521d2ce"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x9, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0xfe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0x7, 0x6, [@generic={0x9b, 0x10, "6cbd6abd615ed234475392dea8322e70512003bec730257b53c78b36b3f4a3f81556270f4496a6b6c9480a6cb8577ba9c9abb0b3f07df58821b1fabb0ad4ef169b75d91da09e4f66bd0e4e330a7129104428450aafcb8e3bd03781a8c16de60779ac768189d2b7d367ebbb0a64ae25967d5ab1488d999a6f8f42ed364de1721ed9c28df4cb1aa29ca1d0279cc6fa14994d948957bb6e117215"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x6, 0x9, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x51, 0x9}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x2, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x9, 0xfd, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x0, 0x4, 0x4, [@generic={0x69, 0x8, "2958d108e433ce9ef81aac7ecd5bd0d5308756a2f20f7b1daf16d36bf21e052a0d6c3528d44d6ad3a1179d26f7403d2c1c5e2ec388384fef9d64a816d1a4fd659cc7a485fd663af199757a24acff9b202fc0f28c15e5baf49a1800578321411d89aa91ae9ab4f9"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x800}]}}, {{0x9, 0x5, 0x0, 0xb, 0x400, 0x4, 0x4, 0x6, [@generic={0xe4, 0xd, "d80ce36dac016ce8aed744c8a7fc9f97508b6e1153a78eda21b4dc1428756c144a4f440027dd9b6fdd9e2456f5384f54d4812dd2697994cd229312eeb2b0f5fa739d703b708dc187d1d78be453ddaf32b3b1a3e8c33b9e076810b9961128838efd794fac0a2974567d81cfec922a9108abf1f6cdb772ba58dc14794077a752e5919219abc768b4331175adc41f9caa90b2fb651fee7bcea40ce921a62c53ab93e395a3e20214bf1b8fdd0e660dd3ff33bf7c828ee31bfa1fc2124525718bc333028e241fba7434de02433b9deffa3ab7894eeb022c06b1c8b1169f2158e35bb28637"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xe3, 0x1, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}, @generic={0x8f, 0x30, "ef832ad00386f1b08ddcbfb8ef91bb89891c1a61d5f5f7013230c22a8fb23b1d0d8ecad8e43876475e20bde7ee1ec6085e40d6c5294c235fdb0060ed9e242bb0641c1e1a038a1f80df1c60381d5e230508514212d6a55274d559129255cbc1fa118f4f4cfad9ec1ff70701c9ce520f3b7647d2e6c432bf1496d0583a050d8a7a09173f1a95533541f3af118779"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x6b, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1ff}, @generic={0xc7, 0x5, "de44a6554995a31facc567af16a4c2e6ef2e265566f601b8e8464c7de532cebbd79a4aedaf3123f921dabe611570c3b6edf4ff3c029df62419e3fd04f435ed0c49db870fc863583ca624517ac82c864212a2fe9a002aaf3453fd077eb90b4fe4945451a1201d010286e564e5afa0cc3ad393a386bac0fb0134b45facbe740090eb06d8a0f73e29933d040babf93cb86733a8548874836ca2242de5edb2ef74caa9690da96766d7f894638b241c6e8eecdad2a7fdfb3d6bc34bac030859b79bbea468747f8b"}]}}]}}, {{0x9, 0x4, 0x89, 0x5, 0x8, 0x2, 0x6, 0x0, 0x2d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ba79d426"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x4, 0x6}, [@mdlm_detail={0x39, 0x24, 0x13, 0xf7, "c5e7b8e3c1070b09e5850c46a00fe7a3b6974ff40b9751e92d2b4702afd926cba581d04cfd01258826738347cc62479da74413e049"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xdc5, 0x9, 0xd, 0x3, 0xfc}, @obex={0x5, 0x24, 0x15, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x7ff}]}], [{{0x9, 0x5, 0xb, 0xfc2258eba42bea00, 0x3ff, 0x80, 0x5, 0x6, [@generic={0x41, 0x4, "c6ef156daaaec8c227fd096d389883c12edcae7f2e68f410680c78063ff62c404747c2a7e676fcda2c383819a1f505222e630955e5d54bfb8f8eec19037321"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0xa, 0x3, [@generic={0x7a, 0x9, "aacb3f8595050a20efd4516758cc9915af070334ba17f7eb6e7d7afc97963f11be1885fc4fb31a4111167000155ee0297cf6ecd942a31c1fcb1c0ada96627f48b5bc65e73454fde5a0d99506d941a19c47e777c38e2f8efe3b2855660b5d8e03654a365669b55523c49ab29f754043945dfbf32bd2d4f808"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0xf7, 0xb0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xff24}, @generic={0x3a, 0xd, "ba24037af4894fd2f06161aadebdd43bf60935c1410bf3aa6836283b92f433bf0153128b7aca4d7b4d563a1c27db6a08de04d58fb869ee81"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x3, 0xe, 0x2, [@generic={0x39, 0x3, "256fc8af7a1f95e9efa3af7187c6cce5cae4f1b6843df4dd066115f228da41c6a89a9e99c859d62a65c332a52ec9c7e43e5a1427ac2102"}, @generic={0xd1, 0x23, "93941036a534c67c12dec3ee06750d20d150a2f6d0b35bab87b9b0cfba69fb49a4d4365774c94d021a1771c15e094aa7f9408428e74bf54ae7366a25e235a3ad71f7410e24f780afb149f12731b0a42b1faf9fbe694e7012875918d9f7b17b96623dff501c3b88129ab516e2f0344dc98cc43171c1607191a7964832943ffc042b88f92f577565f79d942f2e5287311e65e0b52cf0ec8c6a0c621ad7a59e9610bba3e9ce576def0838790fb2738ab44be028ee704eafe8dffe88296f4f2dd8e0c5189afde9d4cada2de5364ce82e17"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xb, 0x40, 0x6, [@generic={0x9d, 0x30, "a35370cf2d2550554731dc739ab9cef94e47eea0deb326ba4cb6276e919be171744c1217e8e4dddbc675789eeab7a5d8b78f659eb09c3e38e4f7e03a1447158c4f4951ce32b2d3757a4bbd5820aea4dd37ce8d8a5389f0fe407d44d37689c4e05d67e30647d7c80a45aa0560513b0551c533a1b6e817141f07e2a1c0cc02b66672de7c500b3aa78be6ed3fcd08c5cebd549c647b8e50aaf9ae446c"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xff, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x4, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x37}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3e}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0xf3, 0xb6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x4}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x6, 0x4, 0xa, 0xff, 0x2}, 0x98, &(0x7f0000000ec0)={0x5, 0xf, 0x98, 0x5, [@generic={0x63, 0x10, 0xb, "ef60fc4ced5186a2801069abb7d71840cc04698df6ed126943f232e02dc4f6ef10c3073bd3cea171864da71f3bad210642aee58dfad8c76d6a04257ec3fb9a15aac7011bf675b02fca0e894c35bf699d492c7d4f7e45c366ec61247cf7c414df"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xf7, 0x5c, 0x8001, 0xfb}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "800b68453cd8d39b8be0ce6af334078d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5f, 0xee, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x5, 0x8}]}, 0x4, [{0xe0, &(0x7f0000000f80)=@string={0xe0, 0x3, "a9ecb4c3d448dc3b512c28cd19d124d13a41a90ece91d89f87ca7a64c442a4efeb8d33d770862f8bd229134ba3b6e65ffbf9a6f061eb9dedc4db64084ae6cb1f2ecd1b4eba5b28a0e5debd3df0384d729acc489195c62758926fc6cbebf3b237e5e69f16c99341af9078b0af2bde15369f666ffba2d2df8cc54fd1f02b0c01c22003bb0bfaa0897f6bf2d34e634aff8ae39c5ea3474d01022be80812221621e1f7e1e21dfdd4dccfafdd85c98baa37ba84acef3465c575954ad7f0bff27a748eafd3f90407b31143f3295926c7abab0deb2a47664bc14c982415f45616f7"}}, {0x36, &(0x7f0000001080)=@string={0x36, 0x3, "5b2a01829aeafe0b9d4d3f27f4b85a5f7850f97a60c0c3d08ce4f7b7c410f15a47c6713ac80bf79ed757dcc2863a82aa611d18b7"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4f, &(0x7f0000001100)=@string={0x4f, 0x3, "14267b74cd23fca2de2b6a2593405b79e505ec959012264d89f776d1bf8b0045879adfc63b86289f40b2dd540fa8c6bf79309d3194fdcf5c0081811b1bc707a595cd61ac398b81273785400b9a"}}]})
syz_usb_control_io(r2, &(0x7f0000001440)={0x2c, &(0x7f0000001200)={0x40, 0x1, 0x4b, {0x4b, 0x5, "3536260063bce8f458820dd5b97da70325418e246c4901e7b2f3c35d25b37b2740ee9ba6a49a7615ee7288798f284dd0382723a5c66f17d59c4a3ab403048d86454d644bad0a2bda75"}}, &(0x7f0000001280)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "f5b1e411d7db5148824d77782f544ed61d8bbf8a17f20d19d9fc423af2f2cbf896acc0b5d06ece90ca17d27d10b43b6cd89d53b114f167668e753144c78b02eed978c22c552d331a61fd1a9676ead3dfe440175f580c8cd40f970bc2e6a061217da21219d94696d5d76f779c13ce014cba8aaa3b7c7b842fb16ab8fc6e8bd64b73c4a5d0343fd5d2a9b3e055f0a443320b75a66866e46105ddd90bad2ca94e34edecd8e0d7776f7bca6420ae02ffa5cfdc822fe85c2948b5958cfc5bb90fb1467e92323130ccf1c4a886e11c5d72dd03637322540ea97227a4298797d1809b15ecc99adbbae338"}}, &(0x7f0000001380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x95, 0x4, "a2bde4b4", "dc0b673a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x9, 0x4, 0x0, 0x3, 0x8}}}, &(0x7f0000001900)={0x84, &(0x7f0000001480)={0x20, 0x3, 0xaf, "65a7e6825a967ec6171058d75d0326cd2b030a7c1cb84bf4694d0672004e323ace73400ebfcf119a8a8f4e0389a073d8965b2f2fd8daf67719876b14d135719858725976a7b11c4073ae43049bf5cc7da9112a7bccfa70cd0237d4972a7b05460d71bfd8f3c7fb20f491b02913c70179bd3ba40c96f171b94b6e00ff5b4c4592776c434c192793e62b556734d4f1ba5bdbe215f3d18acf3d47c419cd10f70877ed48c794f9b28186c923ed53f2403d"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x8, {0x1, 0x2, [0x0]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0xc}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "cb0f"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "23a2"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x65}}) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
readv(r3, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/246, 0xf6}], 0x1) (async)
r4 = open$dir(&(0x7f0000001b00)='./file0\x00', 0x10000, 0x30) (async)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001b40))
r5 = signalfd4(r4, &(0x7f0000001b80), 0x8, 0x800) (async)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000001bc0)={[0x3f4, 0x5, 0x700, 0x4, 0x6eb34e6, 0x6, 0x81, 0x6, 0x80000000, 0x3, 0x9, 0x9, 0x8, 0x4, 0xffffff1c, 0x9, 0x0, 0x7e, 0xd, 0x5, 0x1, 0x4, 0x7c, 0x400, 0x1, 0xfff, 0x80, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0xec6e, 0x4, 0x0, 0x87d, 0x1ff, 0xffffffff, 0x8001, 0x7, 0xfffffffe, 0x3, 0x1, 0x1000, 0xa, 0x7f, 0x4, 0x4, 0x1, 0x9, 0x5c, 0x3, 0x85d, 0x259a, 0x7, 0x5, 0x10000, 0x5, 0xf, 0xc1af, 0x0, 0x3, 0xffffffc0, 0x1, 0x54, 0xfffffffb, 0x2, 0x4, 0xffffff37, 0x4, 0x5, 0x6, 0x2, 0xc, 0x101, 0x2, 0x2, 0x3, 0x400, 0x3, 0x4, 0x9, 0x7f, 0x2, 0x9, 0x2db, 0x8, 0x80, 0x3, 0x20002000, 0x6, 0x6, 0xffff, 0x81, 0x7, 0x1, 0x400, 0x0, 0x5, 0x5, 0x3, 0x5d7, 0x0, 0x8, 0x0, 0x97, 0x80000001, 0xc000000, 0x81, 0x1c196173, 0xf, 0x81, 0x4, 0xd, 0x4c0c1ecd, 0x8, 0xffffffff, 0x6, 0x5bfc, 0x4, 0xd9a, 0x810, 0x0, 0x100, 0x2, 0x5, 0x6, 0x400, 0x2, 0x8, 0x4, 0xe51, 0x6, 0x3, 0x5557, 0x8, 0x1, 0x87820326, 0x8, 0xa63, 0xfff, 0x800, 0x4f, 0x2, 0x0, 0x2be, 0x3, 0x3, 0xffff5942, 0x10000, 0x0, 0x3, 0x1, 0x6, 0x1, 0x6e4, 0x40, 0xffffff00, 0xfffff124, 0x9, 0x85c, 0x484, 0x401, 0x7, 0x6, 0xff, 0xf0000000, 0x1, 0x4, 0x2, 0xba51, 0x280, 0xad700000, 0x9, 0x10, 0x80000001, 0x9, 0x7, 0x8, 0xfffffc01, 0x5, 0x9, 0x92, 0x80, 0xd, 0x2, 0x101, 0xa58, 0x2, 0x5, 0x800, 0x0, 0xfff, 0x4, 0x78, 0x8, 0x0, 0x1, 0x800, 0x5, 0x7, 0x6, 0xff, 0x7, 0x5, 0x6, 0x3, 0x1, 0x4, 0xd3, 0x6, 0x2, 0x180, 0x1, 0xd, 0xfff, 0x5, 0x7ff, 0x9, 0x0, 0x1, 0x3, 0x1, 0x8001, 0x5, 0x6, 0xbf, 0xf1f7, 0x8, 0xd7, 0x11d8, 0x7fffffff, 0x9e, 0xa, 0x0, 0xfffff684, 0x9, 0x1, 0x4, 0xd0, 0x1, 0x4466, 0x0, 0xcc69a407, 0x5, 0xb, 0x8, 0x0, 0x3a6f, 0x43, 0x40, 0x8000, 0x5, 0x81, 0x2, 0x4e1, 0xffffffff, 0x7ff, 0x7, 0xfffffffd, 0x96fe, 0x80, 0x2, 0x3, 0x8d08, 0x2, 0x7, 0x80000000, 0xb, 0x7, 0x2, 0x0, 0x2, 0x1ff, 0x2, 0x400, 0x5, 0x5, 0x4, 0x1000, 0xb92d, 0x7, 0xff, 0xcf20, 0x9, 0x3, 0x401, 0xe30, 0x5, 0x9, 0x64, 0x1, 0x2, 0x101, 0x0, 0x1, 0x4, 0x8, 0x100, 0x5, 0x7, 0x0, 0x766, 0x6, 0x4, 0x400, 0x9, 0x7, 0x800, 0x99ed, 0x1, 0x2, 0x5, 0xffffffff, 0x1, 0x6, 0x229, 0x10001, 0xa, 0x7, 0x6, 0x5, 0x5, 0x80000000, 0x401, 0x4, 0xb, 0x2512d502, 0x8, 0x4, 0x5, 0xffffffff, 0x6, 0xc, 0x2, 0x0, 0x4, 0xfffffe00, 0x1, 0x8, 0x83, 0x100, 0xa, 0xff, 0x4, 0x7f, 0x8000, 0xf73, 0x5, 0x80, 0x2, 0x5, 0x7d, 0x6, 0x9, 0x7f, 0x57, 0x2, 0x3, 0x9a27, 0xc7, 0x276, 0x6, 0x3, 0xf0, 0x28, 0x6, 0xfffff602, 0x2, 0x0, 0x8, 0xf, 0x0, 0x2, 0x5, 0x8000, 0x2, 0x9, 0x3, 0x80, 0x1, 0x3, 0xffffff20, 0x9, 0xfffffffe, 0x3, 0x783, 0x5, 0x927, 0xe, 0x4, 0xe00, 0x40, 0x8, 0x7, 0x7, 0xfffffffa, 0x3ff, 0x4, 0x3, 0x5, 0x6a4, 0x3cc, 0x9, 0x2, 0xfff, 0x10000, 0x5, 0x6, 0x5, 0x6, 0x8, 0x7, 0x2, 0x0, 0x5, 0x573, 0x1, 0x400000, 0x2ea, 0x4d8, 0x200, 0x8, 0x52d, 0x4, 0x3, 0x0, 0x401, 0x10, 0x8, 0xfff, 0x80, 0xffffffff, 0x400, 0x6, 0x1, 0x3, 0x35ca, 0x2, 0x9, 0xd7, 0xd1, 0x6, 0x4, 0x101, 0x7, 0x7fff, 0x2, 0x7, 0x8, 0x8, 0x101, 0x7, 0x0, 0x7d0a, 0x8000, 0x0, 0x608, 0xca, 0x8, 0x6, 0x4, 0x6bad, 0x400, 0xf, 0x7ff, 0x7, 0x8, 0x8, 0x1, 0x2, 0xab, 0x0, 0x80, 0x4, 0x5, 0xf9, 0x9, 0xabe6, 0x9, 0x0, 0x46e, 0x86, 0xffffffff, 0x5, 0x10, 0x6, 0x8, 0x6, 0x3, 0x80000001, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x8000, 0x9, 0x15, 0x4, 0x5, 0xa, 0xbf, 0xffffffac, 0x9, 0xfffffff6, 0xfffffff8, 0x1c06, 0xa2, 0x6, 0x8, 0xff, 0xfffff9ef, 0x4, 0x9, 0x1, 0x5, 0x7, 0x2, 0x0, 0x4, 0x8, 0x8001, 0x3, 0xffffffff, 0x90a, 0x6b, 0x5, 0x1000, 0x0, 0x6, 0x0, 0xd, 0x7f, 0x7, 0x6, 0x5ed, 0xe, 0xe, 0x5, 0xa, 0xc, 0x1c2, 0x5, 0x8, 0x0, 0x4000, 0x4, 0x6, 0x8000, 0xf, 0x7, 0x1, 0xbba, 0xb93, 0x1, 0x2, 0x4, 0x3, 0x0, 0xd, 0x4, 0x7, 0x7, 0x9, 0xff, 0x1, 0x2, 0x0, 0x7, 0x80000000, 0xfffffffe, 0xfffffe00, 0x80000000, 0x2, 0x7f, 0x8, 0x0, 0xfa, 0x28000000, 0x0, 0xf, 0xc, 0xcd, 0x0, 0x4c, 0x88f, 0x7, 0x0, 0x3, 0x7, 0x9d1, 0x3, 0x81, 0x0, 0x9, 0x98af, 0x4, 0x5c8a, 0x960, 0x46, 0xbe35, 0x3, 0x5, 0x6, 0xfffffff5, 0x0, 0x4, 0x6, 0xfffffffb, 0x8, 0x8, 0x3, 0x7, 0x101, 0x5, 0x7ff, 0x1, 0x8, 0x40, 0x1, 0x4, 0x0, 0x9, 0x6, 0x9, 0x7, 0x3, 0x9, 0xd0, 0x0, 0x0, 0x6, 0x145, 0x2, 0xffff536c, 0xf23, 0x7, 0x10000, 0x8, 0xd4, 0x2, 0x4, 0x101, 0x0, 0x4, 0x80000000, 0x8000, 0x1, 0x834f, 0xd, 0x3, 0x3, 0x1f42, 0x0, 0x1, 0x4, 0x8, 0x7, 0x10, 0x8, 0x6, 0x4, 0x5, 0x7fffffff, 0x401, 0x1, 0x40, 0x2, 0x4, 0x6, 0x2, 0x136, 0x3, 0x8, 0x800, 0x80000000, 0x2, 0x7, 0x28, 0x5, 0x1, 0x2, 0x1, 0x5, 0xea, 0x4, 0x8000, 0x4, 0x7, 0xffffffff, 0x6, 0x6, 0xa, 0xffffff00, 0x3, 0x0, 0x5, 0x8, 0x1, 0x0, 0x5, 0xa2102e2, 0x9, 0x7, 0x5, 0x7, 0x0, 0x9, 0x5, 0xcea, 0x1, 0x9, 0x0, 0x5, 0x3, 0x8, 0x5d, 0x81, 0x0, 0x9, 0x17, 0x2, 0x9, 0x4, 0x7, 0xfffffff9, 0x10, 0xdf, 0x8000, 0x800, 0x6, 0x0, 0x1, 0xc0, 0xffffcd8c, 0x51, 0x3, 0x4, 0x1, 0x5, 0x7ff, 0x8, 0x1ff, 0x8, 0x1000, 0x8000, 0x8, 0xd1df, 0x8, 0x9, 0x4, 0x6, 0x2, 0x3, 0x9, 0xe082, 0x1, 0x3, 0x59d, 0x10000, 0x1c2, 0x2, 0x2, 0xffff73ec, 0x101, 0x80000001, 0x6, 0x8, 0x0, 0x6, 0x10, 0x3ff, 0x8, 0x80, 0x3, 0x2, 0x2, 0x18, 0x6, 0x0, 0x1, 0x10, 0x1d4, 0x1, 0x6f26, 0x7, 0x200, 0x60, 0x8001, 0x2, 0x7, 0x6, 0x4, 0xffff, 0x89, 0x1, 0x4, 0x2, 0x6, 0x5, 0x28, 0x6, 0x6, 0x5, 0x9, 0x5, 0xbf56, 0x401, 0xf, 0x3, 0x4, 0x7463, 0x3b2, 0x7, 0x5, 0x1, 0x7, 0xac0, 0x247, 0x0, 0x5, 0x5, 0x3c, 0x8, 0xa, 0x1, 0xcb00, 0x0, 0x1000, 0x9, 0x1, 0xfffffff7, 0x200, 0x1, 0xb, 0x10, 0x10000000, 0xf9, 0x0, 0x3f0, 0x9, 0x6, 0x1, 0xcd, 0xfffffffb, 0x0, 0x7, 0xfff, 0x800, 0x4, 0x5a8c, 0xfffffff1, 0x7, 0x8000800, 0x11, 0x2, 0x401, 0x2, 0x40, 0xad3, 0xfffffff9, 0x757, 0x1, 0x8, 0x4, 0x0, 0x10001, 0x0, 0xe, 0x4, 0x3, 0x7, 0x4, 0x3, 0x5, 0x7, 0x3, 0x3, 0x80, 0x6, 0x80000001, 0x3, 0x7, 0x6, 0x7, 0x8d0, 0x6, 0x4, 0x7ff, 0x3, 0xe, 0x4, 0x9, 0x1, 0x9, 0x2, 0x35, 0x4, 0x9, 0xfffff000, 0x2, 0xf, 0x9, 0xffff, 0xa5, 0x40, 0x0, 0x80000000, 0x5, 0x3ff, 0x7, 0x1, 0x770094f0, 0xb57, 0xf, 0xffffffff, 0x6, 0x6, 0x2, 0x6, 0x8, 0x626d, 0x5, 0x3, 0x4, 0xdb, 0x9, 0x3, 0x8, 0x401, 0x0, 0xffffffff, 0x6, 0xb, 0x9, 0x3, 0x1, 0x5, 0x1ff, 0x1, 0x6, 0x5, 0x1000, 0x1, 0x2, 0x3, 0x4, 0x200, 0x3, 0x429, 0x41, 0x4, 0x9, 0x1, 0x9, 0x1, 0x6, 0xfffff5ce, 0x9, 0x3, 0x9f11, 0x2, 0x9, 0x5, 0x8000, 0x401, 0xd, 0xff, 0x4, 0x8, 0x5, 0x0, 0x99, 0x6, 0x10000, 0x3, 0x3e0, 0x805, 0x1, 0x8, 0x5b1, 0xc, 0x80, 0xfffffff8, 0x9, 0x10000, 0x401, 0xd, 0x1, 0x401, 0xc09a, 0x559, 0x11, 0xa5a8, 0x7, 0x80, 0x3, 0x7, 0xc556, 0x0, 0x1, 0x7, 0x81, 0xd2, 0x1, 0x9943, 0x8, 0xc36, 0x1b, 0xe3, 0x7, 0x10, 0x66, 0xefa6, 0x400, 0x4, 0x9, 0x2, 0x4153, 0x4, 0x8]}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x5c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x48080) (async)
sendto$inet_nvme_icreq_pdu(r0, &(0x7f0000002d40)={{0x0, 0xd, 0x80, 0x10}, 0x0, 0x0, 0x0, 0x8000000}, 0x80, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x40, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x39}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002f00)={'team0\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002f40)={'team0\x00', <r8=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000003000)={'gre0\x00', &(0x7f0000002f80)={'ip_vti0\x00', <r9=>0x0, 0x700, 0x20, 0x5, 0x80000000, {{0xf, 0x4, 0x1, 0x2, 0x3c, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x24, 0x38, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x439}, {@empty}, {@rand_addr=0x64010101, 0x100}]}, @noop]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003040)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000003380)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003080)={0x29c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0x1, 0x9, 0x7}, {0x2, 0xb, 0x2d, 0x7}, {0xb, 0xbe, 0x6, 0x7}, {0x4, 0x3, 0x48, 0x6398}, {0x40, 0x1c, 0x25, 0x6}, {0x9, 0x4, 0x6}, {0x82, 0x0, 0xfd, 0x10001}, {0x3, 0x4, 0x8, 0x6}, {0x5, 0xff, 0xd, 0x10001}, {0x3523, 0x81, 0x7, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x6, 0x3, 0x8000}, {0x5, 0x5, 0x4, 0x8}, {0xff, 0x3, 0x5, 0x2}]}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x0, 0x6}, {0x3ff, 0x6, 0x72, 0xad}, {0x1, 0x0, 0x7d, 0xa66}, {0x2, 0xf, 0x0, 0x10000}, {0x8, 0x4, 0x40, 0x4}]}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) (async)
r11 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
sync_file_range(r11, 0xffffffffffffffff, 0x8001, 0x4) (async)
r12 = syz_open_procfs(0x0, &(0x7f00000033c0)='syscall\x00')
ioctl$FS_IOC_SETFSLABEL(r12, 0x41009432, &(0x7f0000003400)="23a107fb8ce50dcf2f417a75ac2e005387c0fbc5352da4919b10967405014c6d88fd2e6892f9b3e5f5907e399c7dac2c79019f172c2b474896f335ca27bf5273b6db8d49d3f2ee30c328f629fbc3c72039ea4466b0b517ec5aa66dd994c05ae910e75e32c998220236f5eb7eaa117ee9fbac3aff51bd7664eb0835f603f6d0e519765aa80e0f4faba24e7ad0089e84cc0467f74fe1827564862acacb7909492b9919599e11678500037bec8b6cc3ddae9c2161ad9e981a1a2cde5a11575b984a96daa6e46954197022f521d84780bea60a90bd19d5524523a9a618bf0e44524fac963df5d005d53130b99d0742e6e181dd38a8d2a9f36b8662540e2f6150969f") (async)
r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000003500), 0x0, 0x0)
ioctl$BLKSSZGET(r13, 0x1268, &(0x7f0000003540)) (async)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)

280.462538ms ago: executing program 1 (id=733):
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
prctl$PR_GET_SECUREBITS(0x1b) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
syz_clone3(0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

224.155822ms ago: executing program 0 (id=734):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x5, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000001010400000000000000000a000000300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

223.110603ms ago: executing program 1 (id=735):
add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ccf68539b31e7c58965698", 0xb, 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x10})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f0000001e40)=[{r3, 0x7183}, {r3, 0x1008}], 0x2, 0xfffffffc)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'erspan0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)

217.815983ms ago: executing program 1 (id=736):
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000b6", @ANYRES16, @ANYBLOB="000825bd7000ffdbdf252e00000008000200", @ANYRES32, @ANYBLOB="0c002d0000000000000000000a0001007770616e340000000c002d000200aaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x200480d4}, 0x20000802)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000000c0)="1080", 0x2, 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) (async)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r3, 0x400, 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0x80) (async)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde)
socket$unix(0x1, 0x3, 0x0) (async)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000380)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x12, 0xc, "00f9737227af149989fc8dbe43ea6affffffffdc25f5ab60c9e6d680f985881a4c516bdd010f35000000b0000006000800000000000000005c9f00", "32d0cc26f7061a74df2cfc06c89f3d9e234b30c50997cebef409ff2176ff7bfe55cd4a5d83cd4a524b00ffffff7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffcea, 0xa]}}) (async)
ioctl$LOOP_CLR_FD(r5, 0x4c01) (async)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0)
ioctl$BLKPBSZGET(r7, 0x127b, 0x0) (async)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) (async)
io_setup(0x0, &(0x7f00000001c0))
prctl$PR_SET_THP_DISABLE(0x41, 0x0) (async)
r8 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)

217.422253ms ago: executing program 0 (id=737):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
unshare(0x22020400)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f)
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x80, 0x8000000000000001, 0x80000001, 0x39b, 0x200, 0x4, 0x1, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"])
mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff)
close(r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

214.236843ms ago: executing program 1 (id=738):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

207.309064ms ago: executing program 1 (id=739):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x9d881000)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x80, 0x6, @broadcast}, 0x14)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
process_vm_readv(0x0, 0x0, 0x44, 0x0, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000087000/0x3000)=nil, 0x3000)

189.894315ms ago: executing program 1 (id=740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002300090028bd7000ffd35f2501000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4080)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000102e10400000000000000000a0000003c0001802c00018019ff0300fe8000000000000000000000000000a214000400fc0100000000000000000000000000010c000280050000"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4000000000000, 0xfffffffffffffffe}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="e4f3efa6e66fc0f2889d55e5bf36ba389e4ee243191333f070fa941d1805146625c8659ccda4a2d5498afcd9d578157aed8e93fe5760b22114ce558d35b6caa466ba67a1d56e768fe81b3995f51ca261bf816fba60e9b9d16d881ded10efa5d3fe8fd0f9bb2d0dbcf170799a0cc6fa2453c1971d8c2e4e37ddd1dbf43c0a6c03e23de2fe2b3726bd2a033c350107faec9ae2eb2074e5528133989f8698ed5ce0ec0e97e170884ab64930e25e8a334c689f5bcefe46a1dfbb2d6ae47393ef9a6bd896edf2dda33069ca551822136559f776f219604779847c8957d10efa586ac690cea9d3708523", 0xe7}, {&(0x7f0000000280)="7a372a75e9f991bb7b6bef5dc9ca249850026059bdfea56aadbbffdd24179dd6b8edb23cae42e8b9fc65cde773a0c825623cdfb3c0be9d4705b8e24698715fee912ec42ae111c680bf2c7339b484a6d144041fd8c92ce2becd04e87dafb808a08ea005320266553f80d9ccdde13a3d77c9cde8fa19f5231c1e36ec8a9c3eb1219a0c533758dae846e19879526f1aed6847ee09219c1816137485c6973fd7e9402163d7e650cd50f0a6adbaa100cdca", 0xaf}, {&(0x7f0000000640)="9bef9d39ae5808c5c4b0bd03fad7b9cde9c57098de3f07de7698875e8e6acb473fa70531970a295b9f5572387ee1fa680c1fa42369af2a2e85cefb7720b57d8c5d94e627e0dd3b51d42244758c6c410b48e1e27f85e15c92efe4b6acd082b8c4abd429d18d2cd443a31cad01423593ac20b8c81f47785d99ff00d141851c2a19bbfe41b7c5b9993ce51f6ace88e0434a63174a2dc5a11dcb4a5c47128a57296c4c3a08b291d745cd54d2b1caaf27111f45a0ec269224075034727894356d14cf16af1ae65a44e566498dcf6ad7935c8904a332b844065f384a1f7a", 0xdb}, {&(0x7f0000000180)="3eb311679d7da24ee2ae3c1b27b9a4ea421c661f9c89a6aa12cce679b954a53fce561aa18ab787b8917b1c3130e9e904314ff73e515cba1e1368ae7d822a8b17c5cabc8e996f", 0x46}, {&(0x7f0000000740)="c20b835579ce0805d80e39cc59f32f28b689ee8d4f095ad53672782386614bad5665ab8b267b5dea7f935781800accfeb03626a3770e2cf2d9f9a4c2cf8e1cc2cd1a3a9affdcb3e143f8f83cc82c5c2a1be582d7da6c26a9279cba24a1b5356a3b3d2f6a9c979e3f3d7f15f6b7a9de19e0b56a9bf4255aef3ea2cedddafb6e758e516ea914c2048f54e135339a6e0c43342b1e9dd66200297179039f919040df062e588a166bed5ac70bc5f103a056aab34ebd2d98903acf3c3cc561d00049be417fe290dafbca7403def37964fd627b56e7f19fcd8ae9ee62f5304b7e4874aefb499531c1f433e0d3891c08e0f608925d58fd6b6d60b3d21a4910347479d854fff24bbb334c26241901156882b50948b2147a9d43e216f70ef9aa51e26d67b4ef4ec9c576902bbdad1cc345747608f867f7667956c2d538866e31902fd81391c260f42a9e4fc7fadb9f693da10f95fb3966a298296aa8fb20eafe2ad4d356b7ca7157bb56bb668fb54640de8d50e063f00939a78b51152a9cd2663dd695e530ee03fadf286067663720854d63bc58016472071a7a967ac93a280a07c1c74250e751d81fe00cf5ac49294222e60aeedade07009a0f33950716c64c7cb6bc399390d2b98bb678d484335386f226711d15089dc6f41a322536c13de7a60a3c432fcf2899bb4ff49b093402e156dea24fc5e26dc22a672f0903f783a4036225db6edbeb27684200bd3cd6bd7cc8787bd8109f1e6d58f47a8bda36809f920bd097b884cd3c34422d25325d2d9634f88c7f349a68071e6bb65f81d74fa77acd2d07831499274f625bf42430c4bf8e4b4dec7b4040e21fb6b51492b76a38d96551485806bdbb1b67327080095ab6581d03fc0d41b8fea6c5b0919c022e6ac640d8fe36c89b955f22e83c94bef453e648a393956615a772ed5553405fdbe254db807f251c9f0d07f72d78bdc23365d3341df15e356a28b38b06b51c48044ee3d81c7429170d729c31ae72d2872bbc042695d61a48fa6eadb111671227013161ee95e6ab667747dab61fc17a18f7718214167f775aeec5701e4f1e0c8237a173e71f8256f43bf7d8955589d00ebc74a8a3b9cf8fbd9818c0f97dd0f9789b1f4cc9c1391a8f81af4853bfef8eb82af903906d4bed9f766d09be2b1b87288e79157d6c3b7a7d3099c9129f96330bf3578771d5bf65db120495b0152d0e6d41f8340723a2ec6e8bfb166bddda2d94ccd3ba8e6f99fa6d815bfefd7d297e7ab4ab99c585b7eb5b0b7e7537f06e3fb9c574de3d48d0662d2e15eb21f721c303ef8583bf5b3556f65a3f45c1b54f2fdfc9198463717bb98bbe3736729f2899a7c15d3aa78ad5bccf8d257e6ff1966b6389e3db34b97f643250b4fdee47d80fa4ed6993990bc5c51e43da970e18779f32ac4e941d47974b1e6e91c17130e9fca323fe3249576766c8330da57c14fc6736c45a887dd6f9605ef4d5070b2b5d9f965a382b64dd4c60617624ce39cd01034dff8e46bde6d742b75676c97a79f6b0cca0d0043fd39d1b163932bdfe5a35508a09e557b7cd321ee83f5b00f81ca28db6aff7b9ad4d449b51037b47966e5203cce90a71afe034410adce3f090f6b710ae335ede8b25271ec8a9b59e2b22b087ab10e9a42645b952546329e92b9671458e6040420b45cbe5ff557e7746151c5288c37ed0d1acd67596d87af6fbd648069a18a27ed6acca817647d99f68e21f31f35e197a3da4971775ce33ea2f018e999acd5023b433ef4800c7b0d7e62bdc9603f8d4b1362da12cdac5b5c8ec6259d77b15002a159d6db3ea2b7688eeeaedab2f08f732503bb59cd0f1e798ac3230456c84a832a4f200116ed09107b57efde4cb535e5fc03bf8955bcf24d6dfa1e028047f607cdba4923eb9ff302ce83bf30ea73d22e51abf4bf809dca9500c1d66b7872c7ccc7639232659df18f15682ecb04a2a579a737ddc013469c474c46768ca9feb35d333e9fac4c3b92437b07f85703aa837ef4cd713c79535b373ca47aad8152525661062bf3683ee2c3b88c2c97d39e5e7b217cbaba7f703eb2e8d7424899381f786f47398450192efe5d3d503dcd26dd330ee70a63703d246d71d91619ae69ff7de00f590f322f3436bda9d40475e0fac8d6b85991d7615b3d2cf07eee086897b940d6b8497871a0b777d3b9239a0949a649c9056f8712262e9281683956d8d429ebd26f78529f570568a439d94ce4f60ddeb2457326223cd804f8e8da1d234e6f86a860017d8356633ee574012d553147ec372f0b0ac4bc0a15dd2389632a5706b3d8225142c1782266409849d7ce2b4faa3709a821b2fe6241cb322830b8255bc78bfdd3d785838fd41c66bb5ca2d31f3b90a2bb21a39839eb1a63051100bac77c2e9f32a00c7f2b2cdff9734e2fa7cdd334380a876dfef25582b4f7f2d309f94ff5c66fcab724b819cdf77f1739df2a76628b5a321e58380dc8be5b210314b5e56158e6ee0b87072face190cabcf431d23b948e4564bdd6f014ce3cfa79f51b7d2376a9873f48dfae8eb5976a305594c40e3e11a6f0110064dc6422c51421370106612cc404bc2cbcb484877f386088043553d6c535de09f5818dc38621f731410db6c57fa12fab3ab2b259199a7e51c250bb2dadc8efd5395482ebb28d67e291b3026dbdc23d3ae8b4b7e689f29d8c1a6f31ef60613af2f58954ff122251559eca3810853ac379ba21998edd769e116f87055380d9c2e179e21ef6f352baa0d984c48e4b14b666cdaa5b4d78f32f0c7360ee2fd07aa18ffcf34b61f605ec7f3175769da878fd045a744db99a985cb1311dc5d9a656fe60fe904aa16dca970259061ed795c451d330061fc205a482098356adc24a4932c3abaa4a72e32d036547fe3f0cbd283876531cac91cb48f5168827ddf629c5e231b6e0c74edf79a8b4dc0d829e3ad5fe6e4dc51a21499247301e0b79e159e8623e05c2ce22f16ea650875d3485f6097c9ba3d995f3b470eacde99aaf9e36daee4c9bb990bab1a153bf288aaa23af5e8067b8e2781ce50c33a1aba712997fe3e0cfcc50fe0ebf5e2c895e79e7848ec766a3973f6291e418302017e43d6e42b202c862a30bb6a21bd624c9cf8882e6d74cf1d6fde34c4c349a96e7f88fdf42f72edc33e123be67cff9e2e495c230e1489d07c0954d2330115586b64b2d9840a6eb3ecf8c9c8e71cff4144d2ef1ad5f39d6c28d654ba74440e9c2a2fbb1408b2e0e3ced930b30c2b07bfe3812994ddeb9745fa3952d98929aeae6997008c66aac1a8df91814af74d542451c5e97a8ad4e7e0bffae6fde88aea42f176767b4ac830dfc26fc203b346e582ca176f257ece0ff91dae75398dfe5a0889c1bdb79faa3d06ca07206806da98c57f1604426cd8fba8ccb5150faeb074627cd669c4123b05ee5341d154d21163334b81cc3e6ae3c009d8440e86d471fd620bea250bcca6cc16c2524f2e8c3db49813dceb9bd0f726d4d7b24fc2551207da88584fd364bd6bc765669d9a5d9a4172c59fa664d9180321790fbc7adb1055c1442168532921c3b929125845f558176f450ee6ba2c31410a550690b7a051fe163ab42827277222b50a4ac5c4ef9fee1b357677a0c654184cbd748e07423f1ccef6f163269c870396142ff07139e8f1a2c6c101da13f57b0650246c1bf47c1967352d2283dffabbf7cac4a4fdda91fa0fd25364efd88fe663df246be25dfb667db835f493ca12fa49b3c255a46b5e35ae886cb1898a2231a33895d13d1c962c0148fdf566dfcbfb1617d9290207493bc22254004c717122eacaa4e4e5eef6856514021fe2ddf107a06605273d9dbfd606d8de32846b636f87545cb18b759ae99231bdd5ce097fdbf09070bdfadc6a4efa6232fb8ac84dc3e6568de76ceb20d55c2c36c83e62182400e688f0a770bdd8eaa9e399b13fa08cfd2c203c7686785b18ee88e4cae64d5dc83486c1fbd85db34bb2323c56959c423f25e97e898739495c9bbe746cd03841dc8bd0b0758442dd4a185314723a255880a0680124734f415c06789a85e582a967ff1aec5438f3be5d3a2547f8767d66e4ce1e7f1941e82e253f8e686da2b873b53c0fd7780d65bb49ffe2cad17f6158f483059bdfcd1a0d9e4688f818344bcb1134b9dfc88b71ba7dc631777f3bc7abbb11fdd7128cf18b2d3999d04a15a251e5598ca8972cd379507c83289eb1ecea254fdc3eb43cf7c75fc79596d22fa86a3a8e74c4b8660e6068a8360042a70428a8a5a5806cab51cdcad1ccf70dc6ce3c162827e1b97e4e5420def97533212322fc44f50ec4196e20e3d4ceee65570bb74f507c4fc8b33a106ff4d924b5c10c22357a8348170de0383ba30206a1130164a7a5c284dc24c9ab0efb41224e85d459baeb474b8b85d903226b80a63e94fede8293f8aef77d8abf866aed33c7b7268cfe6d8fd28ca53709f812624d6f6b9833712e93e26fb82f04639cb72e2ec1bb053129cb1619b82a33b23b6308665982f86c247377d5c7bfbdd36048630c0eaf521c35a1d5d345a4d8f0aae9b55779f7bf757fb6fab1a387015e819d89a8dafb05300ac56f0693925132857017f3b0ab369de7a481aa1371a64fcc791f21f4614ba2cf60b2e14f920fa9669e9cdf0da21b3f82cea888b6e713ef1fd119697fe9b806bb0c0dcfb003b36823fedc522428c489016b33ac83ef74f8c2075359c9c7930bab0107c4629dcd422ccaa82d349dfcb3a6387e25825cda9b6e9e8dcfefd7e7ba348d2e6ffcf926d844c47f8467a9d44043dbefbb495dc3ac050531e5de20fc0ba2cf6f3470d8a3ad0f4fb7191514eec0842f8babea5882bc2a4fb9e20badd8585bad1d6aa8018c9f221024ff6702979002d9409b5b96754c0550d5428bb10398d52698eb25081bc44cface488eb717513722f50dc703011315f2e22cd5e0db8d94ffcf3c9ad2ad41ece90a2b614eb14240e13e7d6b4edc51154f41965408a0b9a283834fc52010edd8c592546dc072805baf293d52090fd6dadd1dd7a7b95d2c3d59e1357a42154c89ef1c2f0bd0cf129363a339a32a5330ec4c9c8d3f0e4e136540206fa34b4f3c8e59d98202330122806fba6dd3c30676782d0d4f315c46a15926a42a764f26ab6765ac539d2bed10e21647acbd511a05d1baf7a1a789a6193552a0092a6a41987af46b89f195704c87f197226f804897863304792637496944cd46998b229426bf31f1cde46f547e1bdf8a4234530f87e1445ea9d3c1bd83d84d65c5745fb9e0ccab8e69416a349691841d1576e48f86b17fc2856f1bb684e109af9a44d0fb137662614dc508520a21766e876b9e3549f81b18cbe66780da0e57fbf6a79e0018b41db59b194d75c42d1a584b0e83f470353bd2a003bfdca82131826ee12bf9babf903597ce662fdde2380a84bc7ba096ea1298f62b1101d9d8036937ccf55dd9a0033f4d3975ab35b8e6eb33e14a9b1cb6ae7acee44ed6d18232500900e26c6c14150d1af24d9cc87001af5a118a3f457d81ce2c3c5632a91cf0e6f7b071ba3d03ae0c1bca6b12a88568fe24f99f6204a0ce4d345084a11b4e8fb6fac03cc375622f60381623eaefa1c2f2c8f566be02c54c00e0a4cc2a890b4a4e873b5a2b544c61c8c653a802005ec809af23380cbfe6fe916d8a3d76d66601b98dee19919ed56999d7995edb3bb46db499f3c78d266230456cfa9e61adb83fe11789f73e585a1d1a7fce7df882b44ef2578d1cea06688a60414d1ce54beac5057e532948416b038361581b1114ca163e4a71e33f0faca1bc0a78", 0x1000}, {&(0x7f0000001740)="ddb274a55669bd8c80f43dfa45dc5442bb1680d486a9467228e2999356da2f4eb83c35b154f23773e14802e78e56ce3280ab6fa31210b9474932ecb4d4507ad9215136299c27d6c83599b0d9fc0b68c60dc02a8a2204a1a68aa03c4b2a187f78e9a5d8a17048dbf15d7a504f6852a6218b08fd89bec6b33ca2707e92945cc4441645ec68171c112567719f9d0b92dc0da052f60cd85560fd0e4302704ffac13752ffd1341964d186b351878203fb89fec8fe24280e36b117d1d9e2bf0fe3c71f08fa06", 0xc3}], 0x6, 0x5, 0xf0000000, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES16=<r4=>0xffffffffffffffff], 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000008, 0x30, 0xffffffffffffffff, 0x66962000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3cd842, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
unshare(0x62040200)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2})
pidfd_getfd(r7, r5, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r9, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x10004, 0x7, 0x9ff})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3"])
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYRESOCT=r6, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x44}}, 0x40800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@weak_binder={0x77622a85, 0x2001, 0x3}}, 0x0}, 0x1000}], 0xfffffe62, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)

128.22722ms ago: executing program 0 (id=741):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x800000000000, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x6, 0x0, 0xf85}) (async)
close(r2)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x4a04})

127.84308ms ago: executing program 0 (id=742):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x7, 0x94, &(0x7f0000000440)})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

100.439642ms ago: executing program 0 (id=743):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000800"], 0x130}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x0, [{0xce, 0x0, 0x200}, {0xc0011022}, {0x8f5, 0x0, 0x9}, {0x284, 0x0, 0x8}, {0x4000009f, 0x0, 0x79c}, {0x400000b0, 0x0, 0x2064}]})
chdir(&(0x7f00000001c0)='./file0\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000400)={[0x0, 0xeeee8000, 0x0, 0x5000], 0xc1a, 0x8, 0x9})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f0000000280)='./file0\x00')
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000cd", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf251200000005002d0001000000050035003f000000"], 0x24}}, 0x4000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

0s ago: executing program 0 (id=744):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r0, &(0x7f0000000480)="534287ac770767f7429748b7bad1a664a6cc00", 0x13)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

LY { source: EINVAL } my_pid:191
[   47.062696][ T1016] binder: Bad value for 'max'
[   47.169758][  T353] usb 4-1: device descriptor read/64, error -71
[   47.280157][  T353] usb 4-1: device reset changed ep0 maxpacket size!
[   47.286973][  T496] usb 4-1: USB disconnect, device number 7
[   47.379737][   T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   47.419737][  T496] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   47.530895][   T31] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   47.540119][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.548780][   T31] usb 2-1: config 0 descriptor??
[   47.569712][  T496] usb 4-1: Using ep0 maxpacket: 16
[   47.575934][  T496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.587074][  T496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.596916][  T496] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   47.606042][  T496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.615627][  T496] usb 4-1: config 0 descriptor??
[   47.974042][   T31] hid-multitouch 0003:0EEF:72C4.0009: unknown main item tag 0x0
[   47.981824][   T31] hid-multitouch 0003:0EEF:72C4.0009: item fetching failed at offset 3/5
[   47.990608][   T31] hid-multitouch 0003:0EEF:72C4.0009: probe with driver hid-multitouch failed with error -22
[   48.069796][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   48.174564][ T1020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[   48.220871][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   48.237746][  T353] usb 2-1: USB disconnect, device number 13
[   48.237912][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   48.244943][ T1023] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   48.268011][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   48.278049][   T10] usb 3-1: Product: syz
[   48.282422][   T10] usb 3-1: Manufacturer: syz
[   48.287093][   T10] usb 3-1: SerialNumber: syz
[   48.325306][  T496] usbhid 4-1:0.0: can't add hid device: -71
[   48.331381][  T496] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   48.340352][  T496] usb 4-1: USB disconnect, device number 8
[   48.494897][   T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   48.747513][    C1] usblp0: nonzero write bulk status received: -71
[   48.754833][  T496] usb 3-1: USB disconnect, device number 14
[   48.762383][  T496] usblp0: removed
[   48.793157][ T1032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   48.793197][ T1032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163
[   48.859348][ T1044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   48.917925][   T36] audit: type=1400 audit(1756356008.830:286): avc:  denied  { bind } for  pid=1052 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   48.945255][   T36] audit: type=1400 audit(1756356008.860:287): avc:  denied  { write } for  pid=353 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8664 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.019722][   T36] audit: type=1400 audit(1756356008.930:288): avc:  denied  { create } for  pid=1057 comm="syz.0.228" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.042663][   T36] audit: type=1400 audit(1756356008.930:289): avc:  denied  { link } for  pid=1057 comm="syz.0.228" name="file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.130687][ T1063] overlayfs: missing 'lowerdir'
[   49.209754][  T496] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   49.299222][   T36] audit: type=1400 audit(1756356009.210:290): avc:  denied  { unlink } for  pid=1081 comm="syz.2.235" name="#3" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.359743][  T496] usb 4-1: Using ep0 maxpacket: 16
[   49.366101][  T496] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[   49.374497][  T496] usb 4-1: config 0 has no interface number 0
[   49.381405][  T496] usb 4-1: config 0 interface 41 has no altsetting 0
[   49.389602][  T496] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   49.399420][  T496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.413626][  T496] usb 4-1: Product: syz
[   49.418228][  T496] usb 4-1: Manufacturer: syz
[   49.425149][  T496] usb 4-1: SerialNumber: syz
[   49.435707][  T496] usb 4-1: config 0 descriptor??
[   49.444541][  T496] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22
[   49.498156][ T1094] /dev/rnullb0: Can't open blockdev
[   49.544736][   T36] audit: type=1400 audit(1756356009.460:291): avc:  denied  { append } for  pid=1102 comm="syz.0.243" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   49.635738][   T36] audit: type=1400 audit(1756356009.550:292): avc:  denied  { write } for  pid=1111 comm="syz.0.246" name="file2" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.649654][ T1112] block device autoloading is deprecated and will be removed.
[   49.666320][   T36] audit: type=1400 audit(1756356009.550:293): avc:  denied  { open } for  pid=1111 comm="syz.0.246" path="/67/file2" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.691969][   T36] audit: type=1400 audit(1756356009.610:294): avc:  denied  { ioctl } for  pid=1111 comm="syz.0.246" path="/67/file2" dev="tmpfs" ino=375 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.770613][   T36] audit: type=1400 audit(1756356009.690:295): avc:  denied  { mounton } for  pid=1121 comm="syz.2.250" path="/67/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   49.850947][ T1126] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   49.991053][ T1134] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   49.998542][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221
[   50.101608][ T1141] binder: Unknown parameter '00000000000000000000005'
[   50.117627][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   50.132157][ T1143] rust_binder: Error while translating object.
[   50.132198][ T1143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.138385][ T1143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[   50.229774][  T353] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   50.269749][   T10] usb 1-1: Using ep0 maxpacket: 16
[   50.275941][   T10] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   50.285974][   T10] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   50.295847][   T10] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.308870][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[   50.316986][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   50.326081][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.334346][   T10] usb 1-1: Product: syz
[   50.338541][   T10] usb 1-1: Manufacturer: syz
[   50.343168][   T10] usb 1-1: SerialNumber: syz
[   50.399737][  T353] usb 2-1: Using ep0 maxpacket: 16
[   50.406025][  T353] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   50.414335][  T353] usb 2-1: config 0 has no interface number 0
[   50.420485][  T353] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   50.430360][  T353] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   50.440441][  T353] usb 2-1: config 0 interface 41 has no altsetting 0
[   50.448633][  T353] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   50.457794][  T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.466038][  T353] usb 2-1: Product: syz
[   50.470263][  T353] usb 2-1: Manufacturer: syz
[   50.474879][  T353] usb 2-1: SerialNumber: syz
[   50.480358][  T353] usb 2-1: config 0 descriptor??
[   50.485798][ T1132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   50.493097][ T1132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   50.550646][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   50.700941][ T1132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   50.708230][ T1132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   51.102632][ T1153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.111223][ T1153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.319588][  T353] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   51.982410][   T31] usb 4-1: USB disconnect, device number 9
[   52.771176][  T353] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[   52.784211][  T353] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   52.794333][  T353] usb 2-1: USB disconnect, device number 14
[   52.861609][   T31] usb 1-1: USB disconnect, device number 15
[   52.868430][   T31] usblp0: removed
[   53.192350][ T1172] binder: Unknown parameter '�sc
[   53.192350][ T1172] '
[   53.392206][  T492] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[   53.481439][ T1200] rust_binder: inc_ref_done called when no active inc_refs
[   53.491903][ T1202] netlink: 'syz.2.277': attribute type 28 has an invalid length.
[   53.539784][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   53.561952][  T492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   53.573625][  T492] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   53.582957][  T492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.593838][  T492] usb 1-1: config 0 descriptor??
[   53.599294][ T1170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   53.602118][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.606452][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260
[   53.700733][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.720939][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.730735][   T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   53.739849][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.741250][ T1223] syzkaller0: entered promiscuous mode
[   53.750068][   T10] usb 2-1: config 0 descriptor??
[   53.753731][ T1223] syzkaller0: entered allmulticast mode
[   54.013547][  T492] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[   54.079759][  T991] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[   54.166332][   T10] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[   54.174543][   T10] cp2112 0003:10C4:EA90.000B: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   54.209739][  T991] usb 3-1: device descriptor read/64, error -71
[   54.371998][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   54.372018][   T36] audit: type=1400 audit(1756356014.290:300): avc:  denied  { getattr } for  pid=1182 comm="syz.1.271" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   54.372098][ T1183] overlayfs: statfs failed on './file0'
[   54.425360][   T10] cp2112 0003:10C4:EA90.000B: error requesting version
[   54.433022][   T10] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71
[   54.444476][   T10] usb 2-1: USB disconnect, device number 15
[   54.461315][  T991] usb 3-1: device descriptor read/64, error -71
[   54.579509][   T31] usb 1-1: USB disconnect, device number 16
[   54.585981][   T36] audit: type=1400 audit(1756356014.490:301): avc:  denied  { append } for  pid=1239 comm="syz.3.288" name="pfkey" dev="proc" ino=4026532537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   54.614216][ T1243] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.692948][ T1247] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.699913][  T991] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[   54.839793][  T991] usb 3-1: device descriptor read/64, error -71
[   54.919789][   T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   54.939758][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   54.969448][ T1249] 9pnet_fd: Insufficient options for proto=fd
[   54.990668][   T36] audit: type=1400 audit(1756356014.910:302): avc:  denied  { mounton } for  pid=1250 comm="syz.1.293" path="/61/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   54.997426][ T1251] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   55.033295][ T1256] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   55.069754][   T31] usb 1-1: Using ep0 maxpacket: 16
[   55.076214][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.087414][  T991] usb 3-1: device descriptor read/64, error -71
[   55.089725][   T10] usb 4-1: Using ep0 maxpacket: 16
[   55.093759][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.100453][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[   55.108679][   T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   55.117425][   T10] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping
[   55.125312][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.134577][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.143836][   T31] usb 1-1: config 0 descriptor??
[   55.156326][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   55.166390][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   55.180873][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   55.190018][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.198022][   T10] usb 4-1: Product: syz
[   55.202246][   T10] usb 4-1: Manufacturer: syz
[   55.206869][   T10] usb 4-1: SerialNumber: syz
[   55.219822][  T991] usb usb3-port1: attempt power cycle
[   55.299724][  T492] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   55.417731][   T10] usb 4-1: 0:2 : does not exist
[   55.425214][   T10] usb 4-1: USB disconnect, device number 10
[   55.462998][  T492] usb 2-1: unable to get BOS descriptor or descriptor too short
[   55.471956][  T492] usb 2-1: unable to read config index 0 descriptor/start: -71
[   55.479558][  T492] usb 2-1: can't read configurations, error -71
[   55.562872][   T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000C/input/input13
[   55.574390][  T991] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[   55.583332][   T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000C/input/input14
[   55.600222][   T31] kye 0003:0458:5012.000C: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[   55.615793][  T991] usb 3-1: device descriptor read/8, error -71
[   55.750666][  T991] usb 3-1: device descriptor read/8, error -71
[   55.826503][ T1260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1260 comm=syz.0.290
[   55.838952][ T1260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=1260 comm=syz.0.290
[   55.851429][ T1260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=1260 comm=syz.0.290
[   55.904771][ T1245] SELinux: security_context_str_to_sid () failed with errno=-22
[   55.940682][   T36] audit: type=1400 audit(1756356015.860:303): avc:  denied  { write } for  pid=1261 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   55.942928][ T1262] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   55.971021][   T31] usb 1-1: USB disconnect, device number 17
[   56.000114][  T991] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[   56.035997][  T991] usb 3-1: device descriptor read/8, error -71
[   56.103228][ T1283] rust_binder: 1277 RLIMIT_NICE not set
[   56.108097][   T10] rust_binder: 1276: removing orphan mapping 0:24
[   56.126572][ T1285] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   56.133856][ T1285] rust_binder: Write failure EINVAL in pid:205
[   56.181352][  T991] usb 3-1: device descriptor read/8, error -71
[   56.240915][   T36] audit: type=1400 audit(1756356016.160:304): avc:  denied  { read } for  pid=1288 comm="syz.1.304" path="socket:[9821]" dev="sockfs" ino=9821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.302155][  T991] usb usb3-port1: unable to enumerate USB device
[   56.326855][ T1296] syzkaller0: entered promiscuous mode
[   56.332532][ T1296] syzkaller0: entered allmulticast mode
[   56.591716][ T1302] __vm_enough_memory: pid: 1302, comm: syz.3.310, bytes: 18014402804453376 not enough memory for the allocation
[   56.631392][ T1306] SELinux:  Context system_u:object_r:var_spool_t:s0 is not valid (left unmapped).
[   56.640954][   T36] audit: type=1400 audit(1756356016.560:305): avc:  denied  { relabelto } for  pid=1305 comm="syz.0.312" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:var_spool_t:s0"
[   56.667969][   T36] audit: type=1400 audit(1756356016.560:306): avc:  denied  { associate } for  pid=1305 comm="syz.0.312" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_spool_t:s0"
[   56.689740][  T991] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   56.849714][  T991] usb 2-1: Using ep0 maxpacket: 16
[   56.860522][  T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.860981][  T492] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   56.871565][  T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.889048][  T991] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   56.898368][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.907221][  T991] usb 2-1: config 0 descriptor??
[   56.949958][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   57.030870][  T492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.041830][  T492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.051649][  T492] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   57.060752][  T492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.069582][  T492] usb 4-1: config 0 descriptor??
[   57.100896][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.115397][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   57.124579][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   57.132734][   T10] usb 1-1: Product: syz
[   57.136945][   T10] usb 1-1: Manufacturer: syz
[   57.141606][   T10] usb 1-1: SerialNumber: syz
[   57.402335][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   57.477408][  T492] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[   57.485470][  T492] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   57.516656][ T1298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.525306][ T1298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.543694][  T991] usbhid 2-1:0.0: can't add hid device: -71
[   57.549939][  T991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   57.558921][  T991] usb 2-1: USB disconnect, device number 18
[   57.683698][ T1304] overlayfs: statfs failed on './file0'
[   57.692519][  T492] cp2112 0003:10C4:EA90.000D: error requesting version
[   57.701819][  T492] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71
[   57.712652][  T492] usb 4-1: USB disconnect, device number 11
[   57.754620][ T1316] netlink: 'syz.2.315': attribute type 4 has an invalid length.
[   57.764685][ T1319] netlink: 'syz.2.315': attribute type 17 has an invalid length.
[   57.774482][ T1319] rust_binder: Error while translating object.
[   57.774538][ T1319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   57.780982][ T1319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273
[   58.039739][  T991] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   58.083298][ T1326] rust_binder: 222: no such ref 3
[   58.140196][ T1327] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   58.154840][   T36] audit: type=1400 audit(1756356018.070:307): avc:  denied  { read } for  pid=1330 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.209869][  T991] usb 3-1: Using ep0 maxpacket: 32
[   58.223224][  T991] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.236273][  T991] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   58.246451][  T991] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   58.260923][  T991] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   58.270286][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.279036][  T991] usb 3-1: Product: syz
[   58.284435][  T991] usb 3-1: Manufacturer: syz
[   58.289101][  T991] usb 3-1: SerialNumber: syz
[   58.291529][ T1336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:232
[   58.318922][   T36] audit: type=1400 audit(1756356018.230:308): avc:  denied  { read } for  pid=1339 comm="syz.3.321" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   58.351647][   T36] audit: type=1400 audit(1756356018.230:309): avc:  denied  { open } for  pid=1339 comm="syz.3.321" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   58.394621][ T1342] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   58.431860][ T1349] rust_binder: Write failure EFAULT in pid:238
[   58.451924][ T1352] 9pnet: bogus RWRITE count (2 > 1)
[   58.739726][  T496] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[   58.890788][  T496] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   58.900025][  T496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.909077][  T496] usb 4-1: config 0 descriptor??
[   59.229742][   T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   59.379726][   T31] usb 2-1: Using ep0 maxpacket: 16
[   59.385324][   T31] usb 2-1: no configurations
[   59.390043][   T31] usb 2-1: can't read configurations, error -22
[   59.516062][  T496] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   59.526216][   T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   59.534000][  T496] asix 4-1:0.0: probe with driver asix failed with error -61
[   59.689715][   T31] usb 2-1: Using ep0 maxpacket: 16
[   59.695282][   T31] usb 2-1: no configurations
[   59.700000][   T31] usb 2-1: can't read configurations, error -22
[   59.706378][   T31] usb usb2-port1: attempt power cycle
[   59.713485][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   59.713502][   T36] audit: type=1326 audit(1756356019.630:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ab58ebe9 code=0x7fc00000
[   60.013506][  T991] cdc_ncm 3-1:1.0: bind() failure
[   60.021674][  T991] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[   60.030244][  T991] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[   60.043530][  T991] usb 3-1: USB disconnect, device number 19
[   60.049735][   T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   60.070140][   T31] usb 2-1: Using ep0 maxpacket: 16
[   60.075749][   T31] usb 2-1: no configurations
[   60.080415][   T31] usb 2-1: can't read configurations, error -22
[   60.209784][   T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   60.230112][   T31] usb 2-1: Using ep0 maxpacket: 16
[   60.235790][   T31] usb 2-1: no configurations
[   60.240435][   T31] usb 2-1: can't read configurations, error -22
[   60.246822][   T31] usb usb2-port1: unable to enumerate USB device
[   60.339738][  T991] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   60.490793][  T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.501806][  T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.511610][  T991] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   60.520690][  T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.529464][  T991] usb 3-1: config 0 descriptor??
[   60.938138][  T991] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   60.945941][  T991] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[   61.142583][ T1360] overlayfs: statfs failed on './file0'
[   61.149558][  T991] cp2112 0003:10C4:EA90.000E: error requesting version
[   61.157059][  T991] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71
[   61.167780][  T991] usb 3-1: USB disconnect, device number 20
[   61.479435][   T10] usb 4-1: USB disconnect, device number 12
[   61.564861][  T492] rust_binder: 1365: removing orphan mapping 0:8
[   61.575660][   T36] audit: type=1400 audit(1756356021.490:314): avc:  denied  { append } for  pid=1368 comm="syz.3.333" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   61.969738][   T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   62.134299][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.145453][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   62.152902][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.155501][   T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   62.163130][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.173943][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   62.187684][   T31] usb 3-1: SerialNumber: syz
[   62.379838][  T492] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   62.394661][ T1372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   62.407097][   T31] usb 3-1: invalid UAC_HEADER (v1)
[   62.414682][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   62.425313][   T31] usb 3-1: USB disconnect, device number 21
[   62.442687][  T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.442688][ T1381] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.509737][  T492] usb 2-1: device descriptor read/64, error -71
[   62.510898][ T1382] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   62.522596][ T1382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   62.530666][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:248
[   62.749753][  T492] usb 2-1: device descriptor read/64, error -71
[   62.976460][ T1385] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   62.999737][  T492] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   63.026776][ T1384] rust_binder: Write failure EINVAL in pid:285
[   63.129739][  T492] usb 2-1: device descriptor read/64, error -71
[   63.379771][  T492] usb 2-1: device descriptor read/64, error -71
[   63.489859][  T492] usb usb2-port1: attempt power cycle
[   63.529743][  T496] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   63.659735][  T496] usb 4-1: device descriptor read/64, error -71
[   63.829719][  T492] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   63.850732][  T492] usb 2-1: device descriptor read/8, error -71
[   63.899848][  T496] usb 4-1: device descriptor read/64, error -71
[   63.980711][  T492] usb 2-1: device descriptor read/8, error -71
[   64.139740][  T496] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   64.176069][   T10] usb 1-1: USB disconnect, device number 18
[   64.186521][   T10] usblp0: removed
[   64.219747][  T492] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   64.240746][  T492] usb 2-1: device descriptor read/8, error -71
[   64.269746][  T496] usb 4-1: device descriptor read/64, error -71
[   64.337584][ T1396] binder: Unknown parameter 'qec�la3��'
[   64.370772][  T492] usb 2-1: device descriptor read/8, error -71
[   64.479734][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   64.487577][  T492] usb usb2-port1: unable to enumerate USB device
[   64.509731][  T496] usb 4-1: device descriptor read/64, error -71
[   64.599728][  T330] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   64.619835][  T496] usb usb4-port1: attempt power cycle
[   64.639718][   T10] usb 1-1: Using ep0 maxpacket: 16
[   64.646072][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.657032][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.666841][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   64.675989][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.684779][   T10] usb 1-1: config 0 descriptor??
[   64.760800][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.771793][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.781607][  T330] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   64.790727][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.799491][  T330] usb 3-1: config 0 descriptor??
[   64.969748][  T496] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   64.990838][  T496] usb 4-1: device descriptor read/8, error -71
[   65.096807][   T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000F/input/input16
[   65.109838][   T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000F/input/input17
[   65.127279][   T10] kye 0003:0458:5012.000F: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[   65.140967][  T496] usb 4-1: device descriptor read/8, error -71
[   65.169044][ T1403] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   65.206937][  T330] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[   65.219868][  T330] cp2112 0003:10C4:EA90.0010: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[   65.295135][   T10] usb 1-1: USB disconnect, device number 19
[   65.312618][ T1411] syz.1.348 (1411): /proc/1410/oom_adj is deprecated, please use /proc/1410/oom_score_adj instead.
[   65.379741][  T496] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   65.400740][  T496] usb 4-1: device descriptor read/8, error -71
[   65.411434][ T1400] overlayfs: statfs failed on './file0'
[   65.417845][  T330] cp2112 0003:10C4:EA90.0010: error requesting version
[   65.425389][  T330] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71
[   65.435605][  T330] usb 3-1: USB disconnect, device number 22
[   65.530779][  T496] usb 4-1: device descriptor read/8, error -71
[   65.639852][  T496] usb usb4-port1: unable to enumerate USB device
[   65.980005][   T36] audit: type=1400 audit(1756356025.900:315): avc:  denied  { getopt } for  pid=1417 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   66.011049][   T36] audit: type=1400 audit(1756356025.930:316): avc:  denied  { watch } for  pid=1419 comm="syz.2.352" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   66.046430][ T1422] rust_binder: Error while translating object.
[   66.046497][ T1422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   66.052743][ T1422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305
[   66.062987][ T1424] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.171248][ T1438] FAT-fs (rnullb0): bogus number of reserved sectors
[   66.184598][ T1438] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   66.249497][ T1453] kvm: user requested TSC rate below hardware speed
[   66.269735][ T1451] kvm: MWAIT instruction emulated as NOP!
[   66.293845][ T1453] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[   66.302523][ T1453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[   66.384854][   T36] audit: type=1400 audit(1756356026.300:317): avc:  denied  { write } for  pid=1460 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   66.385175][ T1461] rust_binder: Write failure EFAULT in pid:325
[   66.509731][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   66.614555][ T1483] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.614925][ T1483] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   66.621419][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   66.629440][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:268
[   66.669708][   T10] usb 2-1: Using ep0 maxpacket: 32
[   66.685215][   T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   66.693484][   T10] usb 2-1: config 0 has no interface number 0
[   66.699726][   T10] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.712967][   T10] usb 2-1: config 0 interface 184 has no altsetting 0
[   66.721298][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   66.729792][   T65] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   66.730482][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.745999][   T10] usb 2-1: Product: syz
[   66.750257][   T10] usb 2-1: Manufacturer: syz
[   66.754881][   T10] usb 2-1: SerialNumber: syz
[   66.760927][   T10] usb 2-1: config 0 descriptor??
[   66.766876][   T10] smsc75xx v1.0.0
[   66.774406][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   66.784642][   T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[   66.889757][   T65] usb 3-1: Using ep0 maxpacket: 8
[   66.895970][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.906935][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.916792][   T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.929925][   T65] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[   66.938994][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.948003][   T65] usb 3-1: config 0 descriptor??
[   66.989770][  T330] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[   67.119767][  T330] usb 1-1: device descriptor read/64, error -71
[   67.358750][   T65] sony 0003:1345:3008.0011: hiddev96,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0
[   67.359758][  T330] usb 1-1: device descriptor read/64, error -71
[   67.380066][   T65] sony 0003:1345:3008.0011: failed to claim input
[   67.462980][ T1505] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.528345][ T1510] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.573563][   T65] usb 3-1: USB disconnect, device number 23
[   67.586486][ T1511] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   67.593679][ T1511] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   67.609751][  T330] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[   67.749752][  T330] usb 1-1: device descriptor read/64, error -71
[   67.989740][  T330] usb 1-1: device descriptor read/64, error -71
[   68.099877][  T330] usb usb1-port1: attempt power cycle
[   68.123647][ T1519] tipc: Started in network mode
[   68.128618][ T1519] tipc: Node identity 4ea4ecd165c1, cluster identity 4711
[   68.135882][ T1519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.155374][ T1519] syzkaller0: entered promiscuous mode
[   68.160920][ T1519] syzkaller0: entered allmulticast mode
[   68.166665][ T1519] tipc: Resetting bearer <eth:syzkaller0>
[   68.174508][ T1519] tipc: Resetting bearer <eth:syzkaller0>
[   68.186294][ T1519] tipc: Disabling bearer <eth:syzkaller0>
[   68.260689][   T36] audit: type=1400 audit(1756356028.180:318): avc:  denied  { map } for  pid=1522 comm="syz.2.383" path="socket:[11657]" dev="sockfs" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.285576][   T36] audit: type=1400 audit(1756356028.180:319): avc:  denied  { read } for  pid=1522 comm="syz.2.383" path="socket:[11657]" dev="sockfs" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.446099][  T330] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[   68.470802][  T330] usb 1-1: device descriptor read/8, error -71
[   68.535765][ T1529] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.536565][ T1529] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   68.543237][ T1529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   68.551380][ T1529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:298
[   68.600839][  T330] usb 1-1: device descriptor read/8, error -71
[   68.849559][ T1541] Dead loop on virtual device ip6_vti0, fix it urgently!
[   68.858280][ T1541] capability: warning: `syz.3.390' uses deprecated v2 capabilities in a way that may be insecure
[   68.869707][  T330] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[   68.877877][ T1541] /dev/rnullb0: Can't open blockdev
[   68.894198][  T330] usb 1-1: device descriptor read/8, error -71
[   69.030805][  T330] usb 1-1: device descriptor read/8, error -71
[   69.139836][  T330] usb usb1-port1: unable to enumerate USB device
[   69.258629][  T330] usb 2-1: USB disconnect, device number 27
[   69.330121][ T1543] rust_binder: validate_parent_fixup: fixup_min_offset=30, parent_offset=4
[   69.330147][ T1543] rust_binder: Error while translating object.
[   69.338903][ T1543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   69.345250][ T1543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345
[   69.355334][ T1543] rust_binder: Write failure EINVAL in pid:345
[   69.446748][   T36] audit: type=1400 audit(1756356029.360:320): avc:  denied  { accept } for  pid=1546 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.619706][   T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   69.704066][ T1564] fuse: Bad value for 'group_id'
[   69.709054][ T1564] fuse: Bad value for 'group_id'
[   69.719718][  T330] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   69.731463][   T36] audit: type=1400 audit(1756356029.650:321): avc:  denied  { mount } for  pid=1568 comm="syz.1.399" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   69.754709][   T36] audit: type=1400 audit(1756356029.670:322): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   69.770482][ T1572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1572 comm=syz.1.400
[   69.786893][   T65] usb 3-1: Using ep0 maxpacket: 32
[   69.793299][ T1572] FAT-fs (rnullb0): bogus number of reserved sectors
[   69.800282][ T1572] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   69.808443][   T65] usb 3-1: unable to get BOS descriptor or descriptor too short
[   69.816910][   T65] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   69.829018][   T65] usb 3-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config
[   69.839215][   T65] usb 3-1: config 1 interface 0 altsetting 106 has an invalid endpoint descriptor of length 2, skipping
[   69.839859][ T1575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.850591][   T65] usb 3-1: config 1 interface 0 has no altsetting 0
[   69.865788][   T65] usb 3-1: string descriptor 0 read error: -22
[   69.872036][   T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   69.880957][  T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.881110][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.892386][  T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.909897][  T493] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   69.917527][  T330] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   69.926727][  T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.935616][  T330] usb 4-1: config 0 descriptor??
[   70.069708][  T493] usb 1-1: Using ep0 maxpacket: 16
[   70.075985][  T493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.086964][  T493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.096774][  T493] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   70.105853][  T493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.116284][  T493] usb 1-1: config 0 descriptor??
[   70.125191][   T10] usb 3-1: USB disconnect, device number 24
[   70.343000][  T330] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[   70.350753][  T330] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   70.537408][  T493] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0013/input/input18
[   70.551188][ T1549] overlayfs: statfs failed on './file0'
[   70.556105][  T493] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0013/input/input19
[   70.569605][  T330] cp2112 0003:10C4:EA90.0012: error requesting version
[   70.578062][  T493] kye 0003:0458:5012.0013: input,hiddev96,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[   70.596975][  T330] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71
[   70.609186][ T1574] tipc: Disabling bearer <eth:syzkaller0>
[   70.616643][  T330] usb 4-1: USB disconnect, device number 17
[   70.712771][   T36] audit: type=1326 audit(1756356030.630:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f232678ebe9 code=0x0
[   70.852383][  T330] usb 1-1: USB disconnect, device number 24
[   71.043002][   T36] audit: type=1400 audit(1756356030.960:324): avc:  denied  { ioctl } for  pid=1591 comm="syz.2.405" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   71.068194][   T36] audit: type=1400 audit(1756356030.960:325): avc:  denied  { setopt } for  pid=1591 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.109307][   T36] audit: type=1400 audit(1756356031.020:326): avc:  denied  { listen } for  pid=1595 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.160825][ T1596] rust_binder: Error while translating object.
[   71.160859][ T1596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   71.167071][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358
[   71.269353][ T1598] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer.
[   71.416651][   T36] audit: type=1400 audit(1756356031.330:327): avc:  denied  { map } for  pid=1621 comm="syz.0.415" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   71.445019][   T36] audit: type=1400 audit(1756356031.360:328): avc:  denied  { mounton } for  pid=1612 comm="syz.3.412" path="/proc/324/task" dev="proc" ino=12900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   71.489740][   T65] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   71.630000][   T65] usb 3-1: device descriptor read/64, error -71
[   71.711985][ T1639] binder: Bad value for 'defcontext'
[   71.736232][ T1641] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[   71.748594][   T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   71.756288][  T496] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   71.765173][ T1641] rust_binder: Error while translating object.
[   71.765233][ T1641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   71.771703][ T1641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:320
[   71.821947][ T1646] 9pnet_fd: Insufficient options for proto=fd
[   71.909797][   T65] usb 3-1: device descriptor read/64, error -71
[   71.920885][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.932037][  T496] usb 4-1: Using ep0 maxpacket: 16
[   71.937312][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.958042][   T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   71.967616][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.976366][  T496] usb 4-1: config 0 has no interfaces?
[   71.981976][  T496] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   71.990876][   T36] audit: type=1400 audit(1756356031.910:329): avc:  denied  { relabelto } for  pid=1659 comm="syz.1.427" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0"
[   71.994672][   T31] usb 1-1: config 0 descriptor??
[   72.025324][  T496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.034709][  T496] usb 4-1: config 0 descriptor??
[   72.169856][   T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   72.241591][  T330] usb 4-1: USB disconnect, device number 18
[   72.299735][   T65] usb 3-1: device descriptor read/64, error -71
[   72.444654][   T31] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[   72.452296][   T31] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   72.539727][   T65] usb 3-1: device descriptor read/64, error -71
[   72.612993][   T36] audit: type=1400 audit(1756356032.530:330): avc:  denied  { setopt } for  pid=1668 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   72.649926][   T65] usb usb3-port1: attempt power cycle
[   72.660274][ T1676] fuse: Unknown parameter ''
[   72.662558][ T1628] overlayfs: statfs failed on './file0'
[   72.667134][ T1676] Invalid ELF header magic: != ELF
[   72.670825][   T36] audit: type=1400 audit(1756356032.580:331): avc:  denied  { module_load } for  pid=1675 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   72.699232][   T31] cp2112 0003:10C4:EA90.0014: error requesting version
[   72.708216][   T31] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71
[   72.722527][   T31] usb 1-1: USB disconnect, device number 25
[   72.999746][   T65] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   73.019726][  T330] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   73.020810][   T65] usb 3-1: device descriptor read/8, error -71
[   73.160779][   T65] usb 3-1: device descriptor read/8, error -71
[   73.169741][  T330] usb 2-1: Using ep0 maxpacket: 16
[   73.176044][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.187002][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.196780][  T330] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   73.205883][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.214727][  T330] usb 2-1: config 0 descriptor??
[   73.256614][   T36] audit: type=1400 audit(1756356033.170:332): avc:  denied  { read } for  pid=1681 comm="syz.0.433" dev="sockfs" ino=12982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.258283][ T1682] 9pnet_fd: Insufficient options for proto=fd
[   73.399759][   T65] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   73.420820][   T65] usb 3-1: device descriptor read/8, error -71
[   73.549741][  T493] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[   73.550929][   T65] usb 3-1: device descriptor read/8, error -71
[   73.629583][  T330] usbhid 2-1:0.0: can't add hid device: -71
[   73.635686][  T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   73.644543][  T330] usb 2-1: USB disconnect, device number 28
[   73.669843][   T65] usb usb3-port1: unable to enumerate USB device
[   73.711016][  T493] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   73.721948][  T493] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[   73.732229][  T493] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[   73.744223][  T493] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.753381][  T493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.761507][  T493] usb 1-1: Product: ⎐㞖娯㰣셺驀홣Ѯ칾௝잺Ე쐸倿ᳳ禡垅샬磟׺ᄢ飽⦛輣컒쩺揬뗽ᝰ窲虧វ丝ꟑ殥雏桞꾮᡿媑⑎挄谡婠苕ക呝꿗僊᰷⅊墵պ锝澪⓰꧛潖욜ᓍ廙䰽霨媚㯄ﴴໞ땂觪訡梉궵鏃괥迣檺質ᾕᓘ朦셶鿚䇇异箳ൾΙ㏾翮虣唊杸么垼쥫ࣝ
[   73.792122][  T493] usb 1-1: Manufacturer: 鮴귒㼴䗡吵盬江╒鄄턂腞粼벶䚀䱈ဥꚶČ춄䤖⼳큻㜄鱊嚦纊쌲堞釂⍝⦠赆튝⁆﯈잤里찑痱蔿ꮽ룦睟劮첞쑂窧ኝ홋㥢ꋯ꧵☴≙粷뭤
[   73.812665][  T493] usb 1-1: SerialNumber: 䠊
[   73.818307][ T1684] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   74.227374][  T493] cdc_ncm 1-1:1.0: bind() failure
[   74.233449][  T493] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   74.240274][  T493] cdc_ncm 1-1:1.1: bind() failure
[   74.247935][  T493] usb 1-1: USB disconnect, device number 26
[   74.536458][   T36] audit: type=1326 audit(1756356034.450:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.3.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f4e7858ebe9 code=0x0
[   74.537179][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.567419][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.575329][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.583273][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.591124][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.599030][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.606870][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.614850][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.622715][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.630639][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.638525][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.646440][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.654354][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.662392][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.670320][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.678224][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.686072][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.694018][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.701884][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.709805][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.717732][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.725691][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.733576][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.753445][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.762823][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.770854][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.779020][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.787037][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.795378][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.808378][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.816650][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.824699][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.835804][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.843902][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.853443][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.862343][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.870418][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.885008][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.893025][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.900893][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.908710][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.918541][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.927227][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.935395][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.943371][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.951258][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.959335][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.967370][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.975347][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.983381][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.991462][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   74.999337][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.007412][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.017098][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.025912][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.033858][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.041600][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   75.050384][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.050996][ T1703] rust_binder: Error while translating object.
[   75.058235][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.065218][ T1703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   75.072486][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.079619][ T1703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:368
[   75.082184][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.106781][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.114688][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.140115][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.159127][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.178441][ T1694] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.200886][   T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.205546][ T1705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   75.212056][   T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 244, changing to 11
[   75.217969][ T1705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370
[   75.222012][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   75.248881][   T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[   75.258383][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.268754][   T10] usb 1-1: config 0 descriptor??
[   75.325619][ T1710] rust_binder: Write failure EFAULT in pid:375
[   75.629701][  T330] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   75.659704][  T493] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   75.680719][ T1697] 9pnet_fd: Insufficient options for proto=fd
[   75.709733][   T65] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   75.723194][   T10] usbhid 1-1:0.0: can't add hid device: -71
[   75.730547][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   75.739584][   T10] usb 1-1: USB disconnect, device number 27
[   75.790954][  T330] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   75.801844][  T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.812776][  T493] usb 3-1: Using ep0 maxpacket: 16
[   75.817939][  T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.828046][  T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   75.841817][  T493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.852803][  T330] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   75.861905][  T493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.871752][  T330] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   75.879732][   T65] usb 2-1: Using ep0 maxpacket: 32
[   75.879903][  T493] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   75.886411][   T65] usb 2-1: config 0 has an invalid interface number: 148 but max is 0
[   75.894131][  T330] usb 4-1: Manufacturer: syz
[   75.903238][   T65] usb 2-1: config 0 has no interface number 0
[   75.907384][  T493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.913854][   T65] usb 2-1: config 0 interface 148 has no altsetting 0
[   75.929032][  T330] usb 4-1: config 0 descriptor??
[   75.931000][   T65] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8
[   75.934559][  T493] usb 3-1: config 0 descriptor??
[   75.945171][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.956185][   T65] usb 2-1: Product: syz
[   75.960476][   T65] usb 2-1: Manufacturer: syz
[   75.965095][   T65] usb 2-1: SerialNumber: syz
[   75.970525][   T65] usb 2-1: config 0 descriptor??
[   75.976818][   T65] pl2303 2-1:0.148: required interrupt-in endpoint missing
[   76.155207][  T330] appleir 0003:05AC:8243.0015: unknown main item tag 0x0
[   76.162625][  T330] appleir 0003:05AC:8243.0015: No inputs registered, leaving
[   76.171411][  T330] appleir 0003:05AC:8243.0015: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   76.183152][   T65] usb 2-1: USB disconnect, device number 30
[   76.411358][   T65] usb 4-1: USB disconnect, device number 19
[   76.432318][  T493] usbhid 3-1:0.0: can't add hid device: -71
[   76.438386][  T493] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   76.447549][  T493] usb 3-1: USB disconnect, device number 29
[   76.579767][  T330] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[   76.733906][  T330] usb 1-1: unable to get BOS descriptor or descriptor too short
[   76.742721][  T330] usb 1-1: unable to read config index 0 descriptor/start: -71
[   76.750364][  T330] usb 1-1: can't read configurations, error -71
[   76.935096][ T1740] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.980690][ T1749] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.981085][ T1749] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   76.987541][ T1749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   76.995764][ T1749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:342
[   77.005937][ T1750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31774 sclass=netlink_route_socket pid=1750 comm=syz.2.456
[   77.009752][  T991] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   77.033924][ T1752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.459'.
[   77.179717][  T991] usb 2-1: Using ep0 maxpacket: 16
[   77.186079][  T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.197204][  T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.207014][  T991] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   77.216433][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.225175][  T991] usb 2-1: config 0 descriptor??
[   77.248184][ T1755] exFAT-fs (rnullb0): invalid boot record signature
[   77.254983][ T1755] exFAT-fs (rnullb0): failed to read boot sector
[   77.261499][ T1755] exFAT-fs (rnullb0): failed to recognize exfat type
[   77.284811][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   77.284832][   T36] audit: type=1400 audit(1756356037.200:339): avc:  denied  { write } for  pid=1756 comm="syz.0.461" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   77.641180][  T991] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0016/input/input21
[   77.663665][  T991] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0016/input/input22
[   77.681629][  T991] kye 0003:0458:5012.0016: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[   77.799209][   T36] audit: type=1400 audit(1756356037.710:340): avc:  denied  { write } for  pid=1774 comm="syz.2.464" name="ptype" dev="proc" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   77.834455][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.849922][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.864634][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.882188][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.908798][  T493] usb 2-1: USB disconnect, device number 31
[   78.053789][   T36] audit: type=1326 audit(1756356037.970:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1795 comm="syz.1.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f232678ebe9 code=0x0
[   78.754932][   T36] audit: type=1400 audit(1756356038.670:342): avc:  denied  { write } for  pid=1821 comm="syz.1.472" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   78.788364][ T1822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   78.788401][ T1822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:411
[   78.889980][ T1830] rust_binder: Write failure EFAULT in pid:413
[   78.932095][   T36] audit: type=1400 audit(1756356038.850:343): avc:  denied  { read write } for  pid=1829 comm="syz.0.473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   78.979874][   T36] audit: type=1400 audit(1756356038.900:344): avc:  denied  { open } for  pid=1829 comm="syz.0.473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   79.098763][   T36] audit: type=1400 audit(1756356039.010:345): avc:  denied  { rename } for  pid=1844 comm="syz.1.480" name="#22" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   79.172066][ T1847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   79.181673][ T1847] veth1: entered allmulticast mode
[   79.187560][ T1846] veth1: left allmulticast mode
[   79.405997][ T1862] 9pnet_fd: Insufficient options for proto=fd
[   79.412940][ T1864] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   79.460398][ T1867] fuse: Unknown parameter 'rooY�ode'
[   79.523686][ T1870] overlay: Unknown parameter 'subj_role'
[   79.809715][  T493] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   79.959704][  T493] usb 1-1: device descriptor read/64, error -71
[   80.014021][ T1905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'.
[   80.031584][ T1905] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true
[   80.031618][ T1905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   80.056133][ T1905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:456
[   80.070268][ T1907] 9pnet_fd: Insufficient options for proto=fd
[   80.179705][  T330] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   80.269738][  T493] usb 1-1: device descriptor read/64, error -71
[   80.429722][   T65] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[   80.509706][  T493] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   80.599691][   T65] usb 3-1: Invalid ep0 maxpacket: 16
[   80.709712][  T493] usb 1-1: device descriptor read/64, error -71
[   80.749700][   T65] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[   80.909701][   T65] usb 3-1: Invalid ep0 maxpacket: 16
[   80.920705][   T65] usb usb3-port1: attempt power cycle
[   80.949727][  T493] usb 1-1: device descriptor read/64, error -71
[   81.005575][ T1852] syz.0.482 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   81.023417][ T1852] CPU: 0 UID: 0 PID: 1852 Comm: syz.0.482 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece
[   81.023456][ T1852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   81.023473][ T1852] Call Trace:
[   81.023481][ T1852]  <TASK>
[   81.023491][ T1852]  __dump_stack+0x21/0x30
[   81.023528][ T1852]  dump_stack_lvl+0x10c/0x190
[   81.023560][ T1852]  ? __cfi_dump_stack_lvl+0x10/0x10
[   81.023591][ T1852]  ? ___ratelimit+0x3f7/0x5a0
[   81.023626][ T1852]  dump_stack+0x19/0x20
[   81.023658][ T1852]  dump_header+0xd7/0x490
[   81.023684][ T1852]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[   81.023717][ T1852]  oom_kill_process+0x4c0/0x7e0
[   81.023753][ T1852]  ? sched_clock_cpu+0x75/0x400
[   81.023786][ T1852]  out_of_memory+0x7ee/0xbd0
[   81.023814][ T1852]  ? __cfi_out_of_memory+0x10/0x10
[   81.023842][ T1852]  ? mutex_lock_killable+0x92/0x1c0
[   81.023866][ T1852]  ? __cfi_mutex_lock_killable+0x10/0x10
[   81.023891][ T1852]  mem_cgroup_out_of_memory+0x279/0x350
[   81.023915][ T1852]  ? drain_obj_stock+0xed0/0xed0
[   81.023940][ T1852]  ? memcg1_oom_prepare+0x2c6/0x3a0
[   81.023978][ T1852]  try_charge_memcg+0x8f7/0xde0
[   81.024011][ T1852]  ? __cfi_try_charge_memcg+0x10/0x10
[   81.024044][ T1852]  ? __alloc_pages_noprof+0x31f/0x7b0
[   81.024075][ T1852]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   81.024108][ T1852]  __mem_cgroup_charge+0xf6/0x410
[   81.024145][ T1852]  ? __cfi_lru_add+0x10/0x10
[   81.024172][ T1852]  ? __cfi___mem_cgroup_charge+0x10/0x10
[   81.024210][ T1852]  folio_prealloc+0x67/0x240
[   81.024238][ T1852]  do_wp_page+0x1885/0x2ed0
[   81.024262][ T1852]  ? cgroup_rstat_updated+0x132/0x7f0
[   81.024298][ T1852]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   81.024345][ T1852]  ? folio_put+0x90/0x90
[   81.024368][ T1852]  ? __cfi__raw_spin_lock+0x10/0x10
[   81.024397][ T1852]  ? __pte_offset_map+0x1b0/0x230
[   81.024431][ T1852]  ? pte_offset_map_rw_nolock+0xba/0x110
[   81.024466][ T1852]  handle_mm_fault+0xff7/0x1b90
[   81.024495][ T1852]  ? __cfi_handle_mm_fault+0x10/0x10
[   81.024519][ T1852]  ? find_vma+0xcd/0x110
[   81.024557][ T1852]  ? lock_mm_and_find_vma+0xb8/0x3a0
[   81.024583][ T1852]  do_user_addr_fault+0x4ca/0x1200
[   81.024622][ T1852]  exc_page_fault+0x59/0xc0
[   81.024646][ T1852]  asm_exc_page_fault+0x2b/0x30
[   81.024669][ T1852] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[   81.024698][ T1852] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 e9 cf 5d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[   81.024726][ T1852] RSP: 0018:ffffc9000f357978 EFLAGS: 00050206
[   81.024750][ T1852] RAX: ffffffff82a33801 RBX: ffff88800894b000 RCX: 0000000000000e80
[   81.024769][ T1852] RDX: 0000000000000000 RSI: ffff88800894b180 RDI: 0000200000ef9000
[   81.024787][ T1852] RBP: ffffc9000f357ae0 R08: ffff88800894bfff R09: 1ffff110011297ff
[   81.024806][ T1852] R10: dffffc0000000000 R11: ffffed1001129800 R12: 0000200000ef8e80
[   81.024825][ T1852] R13: 0000000000ef8b80 R14: 0000000000001000 R15: ffffc9000f357e28
[   81.024845][ T1852]  ? _copy_to_iter+0x331/0x14b0
[   81.024873][ T1852]  ? _copy_to_iter+0x444/0x14b0
[   81.024900][ T1852]  ? __cfi__copy_to_iter+0x10/0x10
[   81.024925][ T1852]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   81.024952][ T1852]  ? irqentry_exit+0x4a/0x60
[   81.024975][ T1852]  ? sysvec_apic_timer_interrupt+0x50/0x90
[   81.025000][ T1852]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   81.025026][ T1852]  copy_page_to_iter+0x20d/0x2f0
[   81.025054][ T1852]  process_vm_rw+0x7f5/0xbb0
[   81.025081][ T1852]  ? __ia32_sys_process_vm_writev+0x110/0x110
[   81.025108][ T1852]  ? futex_wait+0x29a/0x7a0
[   81.025143][ T1852]  ? __se_sys_futex+0x28f/0x300
[   81.025170][ T1852]  ? __kasan_check_write+0x18/0x20
[   81.025205][ T1852]  __x64_sys_process_vm_readv+0xeb/0x100
[   81.025232][ T1852]  x64_sys_call+0x2df4/0x2ee0
[   81.025267][ T1852]  do_syscall_64+0x58/0xf0
[   81.025297][ T1852]  ? clear_bhb_loop+0x50/0xa0
[   81.025321][ T1852]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   81.025359][ T1852] RIP: 0033:0x7fd7ab58ebe9
[   81.025377][ T1852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.025397][ T1852] RSP: 002b:00007fd7ac324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   81.025420][ T1852] RAX: ffffffffffffffda RBX: 00007fd7ab7b5fa0 RCX: 00007fd7ab58ebe9
[   81.025439][ T1852] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000013a
[   81.025455][ T1852] RBP: 00007fd7ab611e19 R08: 0000000000000286 R09: 0000000000000000
[   81.025472][ T1852] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000
[   81.025488][ T1852] R13: 00007fd7ab7b6038 R14: 00007fd7ab7b5fa0 R15: 00007ffe8a619248
[   81.025510][ T1852]  </TASK>
[   81.025519][ T1852] memory: usage 307200kB, limit 307200kB, failcnt 17130
[   81.269720][   T65] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[   81.276011][  T493] usb usb1-port1: attempt power cycle
[   81.283795][ T1852] memory+swap: usage 431800kB, limit 9007199254740988kB, failcnt 0
[   81.428920][ T1921] rust_binder: inc_ref_done called when no active inc_refs
[   81.434104][ T1852] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[   81.451646][  T492] rust_binder: 1920: removing orphan mapping 0:24
[   81.458709][   T65] usb 3-1: Invalid ep0 maxpacket: 16
[   81.484038][  T492] rust_binder: 0: removing orphan mapping 24:8
[   81.485433][ T1852] Memory cgroup stats for /syz0:
[   81.545649][ T1852] cache 297201664
[   81.554308][  T330] usb 2-1: device descriptor read/64, error -71
[   81.554440][ T1852] rss 17002496
[   81.564056][ T1852] rss_huge 2097152
[   81.567800][ T1852] shmem 297201664
[   81.571487][ T1852] mapped_file 0
[   81.574964][ T1852] dirty 0
[   81.577915][ T1852] writeback 0
[   81.581263][ T1852] workingset_refault_anon 289
[   81.585952][ T1852] workingset_refault_file 32
[   81.590562][ T1852] swap 127590400
[   81.594118][ T1852] swapcached 397312
[   81.597915][ T1852] pgpgin 155921
[   81.601404][ T1852] pgpgout 80143
[   81.604876][ T1852] pgfault 36608
[   81.608334][ T1852] pgmajfault 881
[   81.612106][ T1852] inactive_anon 183820288
[   81.616446][ T1852] active_anon 130752512
[   81.620724][ T1852] inactive_file 0
[   81.624370][ T1852] active_file 0
[   81.627819][ T1852] unevictable 0
[   81.631322][ T1852] hierarchical_memory_limit 314572800
[   81.636718][ T1852] hierarchical_memsw_limit 9223372036854771712
[   81.639746][  T493] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   81.642918][ T1852] total_cache 297201664
[   81.654594][ T1852] total_rss 17002496
[   81.658480][ T1852] total_rss_huge 2097152
[   81.662740][ T1852] total_shmem 297201664
[   81.666899][ T1852] total_mapped_file 0
[   81.670931][   T65] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[   81.671329][ T1852] total_dirty 0
[   81.682007][ T1852] total_writeback 0
[   81.683252][  T493] usb 1-1: device descriptor read/8, error -71
[   81.685835][ T1852] total_workingset_refault_anon 289
[   81.697704][ T1852] total_workingset_refault_file 32
[   81.702930][ T1852] total_swap 127590400
[   81.707081][   T65] usb 3-1: Invalid ep0 maxpacket: 16
[   81.707101][ T1852] total_swapcached 397312
[   81.712606][   T65] usb usb3-port1: unable to enumerate USB device
[   81.716816][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   81.724021][ T1852] total_pgpgin 155921
[   81.734863][ T1852] total_pgpgout 80143
[   81.738850][ T1852] total_pgfault 36608
[   81.742894][ T1852] total_pgmajfault 881
[   81.746977][ T1852] total_inactive_anon 183820288
[   81.751889][ T1852] total_active_anon 130752512
[   81.756582][ T1852] total_inactive_file 0
[   81.760816][ T1852] total_active_file 0
[   81.764818][ T1852] total_unevictable 0
[   81.768797][ T1852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.461,pid=1761,uid=0
[   81.783589][ T1852] Memory cgroup out of memory: Killed process 1761 (syz.0.461) total-vm:90104kB, anon-rss:1092kB, file-rss:55280kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[   81.829741][  T330] usb 2-1: Using ep0 maxpacket: 16
[   81.840832][  T330] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config
[   81.859853][  T330] usb 2-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   81.874237][  T493] usb 1-1: device descriptor read/8, error -71
[   81.883332][  T330] usb 2-1: config 1 interface 0 has no altsetting 0
[   81.891325][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.903069][  T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.903184][ T1765] syz.0.461 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   81.913058][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.931922][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   81.940029][  T330] usb 2-1: SerialNumber: syz
[   81.945216][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   81.948515][ T1765] CPU: 1 UID: 0 PID: 1765 Comm: syz.0.461 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece
[   81.948555][ T1765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   81.948572][ T1765] Call Trace:
[   81.948578][ T1765]  <TASK>
[   81.948589][ T1765]  __dump_stack+0x21/0x30
[   81.948627][ T1765]  dump_stack_lvl+0x10c/0x190
[   81.948660][ T1765]  ? __cfi_dump_stack_lvl+0x10/0x10
[   81.948692][ T1765]  ? ___ratelimit+0x3f7/0x5a0
[   81.948729][ T1765]  dump_stack+0x19/0x20
[   81.948760][ T1765]  dump_header+0xd7/0x490
[   81.948785][ T1765]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[   81.948818][ T1765]  oom_kill_process+0x4c0/0x7e0
[   81.948846][ T1765]  ? sched_clock_cpu+0x75/0x400
[   81.948880][ T1765]  out_of_memory+0x7ee/0xbd0
[   81.948908][ T1765]  ? __cfi_out_of_memory+0x10/0x10
[   81.948935][ T1765]  ? mutex_lock_killable+0x92/0x1c0
[   81.948966][ T1765]  ? __cfi_mutex_lock_killable+0x10/0x10
[   81.948992][ T1765]  mem_cgroup_out_of_memory+0x279/0x350
[   81.949018][ T1765]  ? drain_obj_stock+0xed0/0xed0
[   81.949043][ T1765]  ? memcg1_oom_prepare+0x2c6/0x3a0
[   81.949081][ T1765]  try_charge_memcg+0x8f7/0xde0
[   81.949115][ T1765]  ? __cfi_try_charge_memcg+0x10/0x10
[   81.949147][ T1765]  ? __alloc_pages_noprof+0x31f/0x7b0
[   81.949179][ T1765]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   81.949209][ T1765]  ? __folio_batch_add_and_move+0x2ab/0x370
[   81.949241][ T1765]  __mem_cgroup_charge+0xf6/0x410
[   81.949276][ T1765]  ? _raw_spin_lock+0x8c/0x120
[   81.949306][ T1765]  ? __cfi___mem_cgroup_charge+0x10/0x10
[   81.949344][ T1765]  shmem_alloc_and_add_folio+0x86d/0x1050
[   81.949376][ T1765]  ? put_swap_device+0x130/0x130
[   81.949404][ T1765]  ? shmem_huge_global_enabled+0x2da/0x360
[   81.949430][ T1765]  ? shmem_allowable_huge_orders+0x1f7/0x430
[   81.949456][ T1765]  ? __kasan_check_write+0x18/0x20
[   81.949491][ T1765]  ? _raw_spin_lock+0x8c/0x120
[   81.949524][ T1765]  shmem_get_folio_gfp+0x5f0/0x1380
[   81.949554][ T1765]  ? shmem_get_folio+0xc0/0xc0
[   81.949578][ T1765]  ? follow_page_pte+0xa5c/0xb90
[   81.949611][ T1765]  ? inode_to_bdi+0x6d/0x100
[   81.949643][ T1765]  shmem_write_begin+0xf4/0x270
[   81.949677][ T1765]  generic_perform_write+0x330/0x960
[   81.949714][ T1765]  ? __cfi_generic_perform_write+0x10/0x10
[   81.949746][ T1765]  ? down_write+0xe9/0x2a0
[   81.949772][ T1765]  ? file_update_time+0xa3/0x220
[   81.949805][ T1765]  shmem_file_write_iter+0x105/0x130
[   81.949838][ T1765]  ? __cfi_shmem_file_write_iter+0x10/0x10
[   81.949869][ T1765]  __kernel_write_iter+0x392/0x830
[   81.949906][ T1765]  ? __cfi_shmem_file_write_iter+0x10/0x10
[   81.949939][ T1765]  ? __cfi___kernel_write_iter+0x10/0x10
[   81.949980][ T1765]  ? get_dump_page+0x160/0x220
[   81.950009][ T1765]  ? __asan_memset+0x39/0x50
[   81.950044][ T1765]  ? iov_iter_bvec+0xc0/0x180
[   81.950072][ T1765]  dump_user_range+0xb06/0xdf0
[   81.950137][ T1765]  ? __cfi_dump_emit+0x10/0x10
[   81.950174][ T1765]  ? __cfi_dump_user_range+0x10/0x10
[   81.950211][ T1765]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[   81.950248][ T1765]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[   81.950285][ T1765]  elf_core_dump+0x2cd9/0x3810
[   81.950318][ T1765]  ? __cfi_elf_core_dump+0x10/0x10
[   81.950354][ T1765]  ? dump_interrupted+0xf0/0xf0
[   81.950390][ T1765]  ? 0xffffffffff600000
[   81.950412][ T1765]  do_coredump+0x1bfa/0x2bd0
[   81.950451][ T1765]  ? __cfi_do_coredump+0x10/0x10
[   81.950486][ T1765]  ? asm_exc_page_fault+0x2b/0x30
[   81.950519][ T1765]  ? __kasan_slab_free+0x6a/0x80
[   81.950545][ T1765]  ? kmem_cache_free+0x1c1/0x510
[   81.950582][ T1765]  ? get_signal+0xa75/0x14f0
[   81.950613][ T1765]  get_signal+0x11fd/0x14f0
[   81.950647][ T1765]  arch_do_signal_or_restart+0x96/0x720
[   81.950686][ T1765]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   81.950726][ T1765]  irqentry_exit_to_user_mode+0x4e/0xb0
[   81.950753][ T1765]  irqentry_exit+0x16/0x60
[   81.950778][ T1765]  exc_page_fault+0x66/0xc0
[   81.950801][ T1765]  asm_exc_page_fault+0x2b/0x30
[   81.950824][ T1765] RIP: 0033:0x7fd7ab44f927
[   81.950844][ T1765] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   81.950865][ T1765] RSP: 002b:00007fd7a9fd8120 EFLAGS: 00010202
[   81.950891][ T1765] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd7ab58ebe9
[   81.950909][ T1765] RDX: 00007fd7a9fd8140 RSI: 00007fd7a9fd8270 RDI: 000000000000000b
[   81.950928][ T1765] RBP: 00007fd7ab611e19 R08: 0000000000000000 R09: 0000000000000000
[   81.950947][ T1765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   81.950974][ T1765] R13: 00007fd7ab7b6128 R14: 00007fd7ab7b6090 R15: 00007ffe8a619248
[   81.950999][ T1765]  </TASK>
[   81.951549][ T1765] memory: usage 307200kB, limit 307200kB, failcnt 18250
[   81.956159][  T330] cdc_ether 2-1:1.0: invalid descriptor buffer length
[   81.966354][ T1765] memory+swap: usage 431796kB, limit 9007199254740988kB, failcnt 0
[   81.978277][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.999558][ T1765] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[   82.001756][  T330] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[   82.005584][ T1765] Memory cgroup stats for 
[   82.082666][   T10] usb 4-1: config 0 descriptor??
[   82.149781][  T493] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   82.151647][ T1765] /syz0
[   82.220782][  T493] usb 1-1: device descriptor read/8, error -71
[   82.223296][ T1765] :
[   82.350804][  T493] usb 1-1: device descriptor read/8, error -71
[   82.359554][ T1765] cache 250568704
[   82.479865][  T493] usb usb1-port1: unable to enumerate USB device
[   82.481671][ T1765] rss 16875520
[   82.490252][   T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[   82.491690][ T1765] rss_huge 2097152
[   82.505583][   T10] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   82.508914][ T1765] shmem 250568704
[   82.526735][ T1765] mapped_file 0
[   82.530355][ T1926] fuse: Bad value for 'fd'
[   82.534860][ T1765] dirty 0
[   82.537819][ T1765] writeback 0
[   82.541136][ T1765] workingset_refault_anon 289
[   82.545851][ T1765] workingset_refault_file 32
[   82.550468][ T1765] swap 113451008
[   82.554106][ T1765] swapcached 352256
[   82.557905][ T1765] pgpgin 155952
[   82.561428][ T1765] pgpgout 91597
[   82.564901][ T1765] pgfault 36608
[   82.568402][ T1765] pgmajfault 881
[   82.571996][ T1765] inactive_anon 152264704
[   82.576328][ T1765] active_anon 115519488
[   82.580551][ T1765] inactive_file 0
[   82.584205][ T1765] active_file 0
[   82.587674][ T1765] unevictable 0
[   82.591169][ T1765] hierarchical_memory_limit 314572800
[   82.596559][ T1765] hierarchical_memsw_limit 9223372036854771712
[   82.602761][ T1765] total_cache 250568704
[   82.606932][ T1765] total_rss 16875520
[   82.610869][ T1765] total_rss_huge 2097152
[   82.615116][ T1765] total_shmem 250568704
[   82.619273][ T1765] total_mapped_file 0
[   82.623294][ T1765] total_dirty 0
[   82.626765][ T1765] total_writeback 0
[   82.630613][ T1765] total_workingset_refault_anon 289
[   82.635827][ T1765] total_workingset_refault_file 32
[   82.640973][ T1765] total_swap 113451008
[   82.645051][ T1765] total_swapcached 352256
[   82.649374][ T1765] total_pgpgin 155952
[   82.653404][ T1765] total_pgpgout 91597
[   82.657393][ T1765] total_pgfault 36608
[   82.661401][ T1765] total_pgmajfault 881
[   82.665483][ T1765] total_inactive_anon 152264704
[   82.670371][ T1765] total_active_anon 115519488
[   82.675061][ T1765] total_inactive_file 0
[   82.679222][ T1765] total_active_file 0
[   82.683263][ T1765] total_unevictable 0
[   82.687269][ T1765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.461,pid=1764,uid=0
[   82.702073][ T1765] Memory cgroup out of memory: Killed process 1764 (syz.0.461) total-vm:90104kB, anon-rss:1096kB, file-rss:53708kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[   82.707052][ T1924] overlayfs: statfs failed on './file0'
[   82.728689][   T10] cp2112 0003:10C4:EA90.0017: error requesting version
[   82.736417][   T10] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -71
[   82.755758][   T10] usb 4-1: USB disconnect, device number 20
[   83.146322][ T1931] tipc: Started in network mode
[   83.165138][ T1931] tipc: Node identity 5a4b64c8d60c, cluster identity 4711
[   83.179963][ T1931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.345899][ T1932] syzkaller0: entered promiscuous mode
[   83.382320][ T1932] syzkaller0: entered allmulticast mode
[   83.389114][ T1932] tipc: Resetting bearer <eth:syzkaller0>
[   83.398879][   T36] audit: type=1400 audit(1756356299.311:346): avc:  denied  { connect } for  pid=1930 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   83.452967][ T1947] overlay: ./file0 is not a directory
[   83.453977][ T1946] rust_binder: Error while translating object.
[   83.458417][ T1946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   83.479694][ T1946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:412
[   83.510682][ T1943] binder: Unknown parameter 'fscontext?}'
[   83.789923][   T65] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   83.849751][  T991] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   83.939693][   T65] usb 3-1: Using ep0 maxpacket: 16
[   83.945941][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[   83.961089][   T65] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[   83.970278][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.978295][   T65] usb 3-1: Product: syz
[   83.989755][   T65] usb 3-1: Manufacturer: syz
[   83.994522][   T65] usb 3-1: SerialNumber: syz
[   83.999999][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   84.004863][   T65] usb 3-1: config 0 descriptor??
[   84.013745][  T991] usb 1-1: Using ep0 maxpacket: 8
[   84.029378][   T65] hub 3-1:0.0: bad descriptor, ignoring hub
[   84.036186][   T65] hub 3-1:0.0: probe with driver hub failed with error -5
[   84.049880][  T991] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   84.058245][  T991] usb 1-1: config 179 has no interface number 0
[   84.064585][  T991] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   84.079707][  T991] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   84.091288][  T991] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   84.099363][   T10] usb 2-1: USB disconnect, device number 32
[   84.109687][  T991] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   84.126580][  T991] usb 1-1: config 179 interface 65 has no altsetting 0
[   84.144779][  T991] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   84.161804][    T9] usb 4-1: Using ep0 maxpacket: 16
[   84.167879][  T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.178357][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.196162][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.206687][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   84.216166][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.224099][  T991] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23
[   84.241618][    T9] usb 4-1: config 0 descriptor??
[   84.289770][  T493] tipc: Node number set to 2353489096
[   84.289876][   T94] input input23: unable to receive magic message: -110
[   84.305906][   T94] input input23: unable to receive magic message: -32
[   84.316584][   T94] input input23: unable to receive magic message: -32
[   84.354768][ T1951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417
[   84.418216][ T1953] input input23: unable to receive magic message: -32
[   84.458489][   T36] audit: type=1400 audit(1756356300.371:347): avc:  denied  { bind } for  pid=1982 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   84.480220][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   84.488073][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   84.492061][ T1988] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.500339][    T9] usb 4-1: USB disconnect, device number 21
[   84.504944][ T1988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   84.523605][ T1988] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false
[   84.523636][ T1988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   84.532193][ T1988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:379
[   84.595483][  T493] usb 1-1: USB disconnect, device number 34
[   84.595491][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   84.619299][  T493] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   84.879746][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   84.977368][   T36] audit: type=1400 audit(1756356300.891:348): avc:  denied  { bind } for  pid=1999 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   85.029743][    T9] usb 4-1: Using ep0 maxpacket: 16
[   85.036127][    T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[   85.044522][    T9] usb 4-1: config 1 has no interface number 0
[   85.050729][    T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   85.060807][    T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   85.070868][    T9] usb 4-1: config 1 interface 105 has no altsetting 0
[   85.079044][    T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   85.088185][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.096265][    T9] usb 4-1: Product: syz
[   85.100540][    T9] usb 4-1: Manufacturer: syz
[   85.105390][    T9] usb 4-1: SerialNumber: syz
[   85.111654][ T1995] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   85.120821][ T1995] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   85.261879][ T2007] binder: Unknown parameter 'fscontext?}'
[   85.345236][ T2010] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   85.369387][   T36] audit: type=1400 audit(1756356301.281:349): avc:  denied  { setattr } for  pid=2011 comm="syz.0.528" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   85.392476][ T1996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer.
[   85.529534][ T1995] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   85.537223][ T1995] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   85.574507][   T36] audit: type=1400 audit(1756356301.491:350): avc:  denied  { watch watch_reads } for  pid=2027 comm="syz.0.533" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   85.638327][ T2035] input: syz0 as /devices/virtual/input/input25
[   85.787505][   T36] audit: type=1326 audit(1756356301.701:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ab58ebe9 code=0x7ffc0000
[   85.811102][   T36] audit: type=1326 audit(1756356301.701:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ab58ebe9 code=0x7ffc0000
[   85.834567][   T36] audit: type=1326 audit(1756356301.701:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd7ab58ebe9 code=0x7ffc0000
[   85.857877][   T36] audit: type=1326 audit(1756356301.701:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ab58ebe9 code=0x7ffc0000
[   85.858727][ T2047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   85.881388][   T36] audit: type=1326 audit(1756356301.701:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ab58ebe9 code=0x7ffc0000
[   85.946520][    T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   85.957690][    T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   85.968955][    T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   85.981904][    T9] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:6f:8d:ff:2c:41
[   85.995867][    T9] usb 4-1: USB disconnect, device number 22
[   86.003030][    T9] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   86.050179][    T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   86.059596][    T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   86.069070][    T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   86.561480][   T65] rust_binder: 1950: removing orphan mapping 0:24
[   86.573932][  T991] usb 3-1: USB disconnect, device number 34
[   86.752282][ T2090] netlink: 'syz.3.549': attribute type 1 has an invalid length.
[   86.813413][ T2091] 9pnet_fd: Insufficient options for proto=fd
[   87.073466][ T2093] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   87.083227][ T2093] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.092418][ T2093] /dev/rnullb0: Can't open blockdev
[   87.161976][ T2095] overlayfs: missing 'lowerdir'
[   87.178698][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.187317][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.631342][ T2123] incfs: Can't find or create .index dir in ./file0
[   87.638082][ T2123] incfs: mount failed -17
[   88.552132][ T2148] syzkaller0: left promiscuous mode
[   88.557476][ T2148] syzkaller0: left allmulticast mode
[   88.563173][ T2148] tipc: Resetting bearer <eth:syzkaller0>
[   88.596190][   T36] kauditd_printk_skb: 45 callbacks suppressed
[   88.596210][   T36] audit: type=1400 audit(1756356304.511:401): avc:  denied  { write } for  pid=2154 comm="syz.0.570" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   88.652008][   T36] audit: type=1400 audit(1756356304.571:402): avc:  denied  { name_bind } for  pid=2161 comm="syz.0.572" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[   88.705535][ T2167] rust_binder: Error while translating object.
[   88.705571][ T2167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   88.712139][ T2167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:498
[   88.739787][ T2173] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   88.756746][ T2173] rust_binder: Write failure EINVAL in pid:502
[   88.857883][   T36] audit: type=1400 audit(1756356304.771:403): avc:  denied  { create } for  pid=2178 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   88.916259][ T2184] rust_binder: Write failure EFAULT in pid:504
[   88.948848][ T2192] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   88.949884][ T2193] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   88.962984][ T2192] overlayfs: missing 'lowerdir'
[   88.991142][ T2193] overlayfs: missing 'lowerdir'
[   89.036055][ T2203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.584'.
[   89.049220][   T36] audit: type=1400 audit(1756356304.961:404): avc:  denied  { getattr } for  pid=2204 comm="syz.0.585" path="cgroup:[4026532306]" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   89.080410][ T2210] input: syz1 as /devices/virtual/input/input26
[   89.109611][   T36] audit: type=1400 audit(1756356305.021:405): avc:  denied  { append } for  pid=2211 comm="syz.1.587" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   89.168024][   T36] audit: type=1400 audit(1756356305.081:406): avc:  denied  { create } for  pid=2223 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   89.447888][ T2233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.594'.
[   89.458087][ T2233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.594'.
[   89.467010][ T2233] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   89.482459][ T2233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   89.482496][ T2233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477
[   89.506553][   T36] audit: type=1400 audit(1756356305.421:407): avc:  denied  { execute } for  pid=2234 comm="syz.2.595" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.711527][   T36] audit: type=1400 audit(1756356305.631:408): avc:  denied  { mounton } for  pid=2241 comm="syz.0.598" path="/" dev="ramfs" ino=17502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   89.839710][  T991] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   90.002208][  T991] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   90.019696][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.027754][  T991] usb 3-1: Product: syz
[   90.039699][  T991] usb 3-1: Manufacturer: syz
[   90.044364][  T991] usb 3-1: SerialNumber: syz
[   90.056592][  T991] usb 3-1: config 0 descriptor??
[   90.239725][  T493] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   90.399704][  T493] usb 2-1: Using ep0 maxpacket: 16
[   90.406140][  T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   90.417416][  T493] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   90.430740][  T493] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   90.440100][  T493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.449522][  T493] usb 2-1: config 0 descriptor??
[   90.459164][  T493] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   90.585677][ T2246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer.
[   90.635776][ T2249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2249 comm=syz.3.601
[   90.660262][ T2252] fuse: Bad value for 'fd'
[   90.661596][ T2244] rust_binder: Write failure EFAULT in pid:518
[   90.666262][   T10] usb 2-1: USB disconnect, device number 33
[   90.792394][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'.
[   90.809941][ T2269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.608'.
[   90.829367][   T36] audit: type=1400 audit(1756356306.741:409): avc:  denied  { map } for  pid=2268 comm="syz.3.608" path="socket:[17561]" dev="sockfs" ino=17561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.874190][   T36] audit: type=1400 audit(1756356306.741:410): avc:  denied  { accept } for  pid=2268 comm="syz.3.608" path="socket:[17561]" dev="sockfs" ino=17561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.937271][ T2274] overlayfs: lower data-only dirs require metacopy support.
[   91.050234][ T2287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=2287 comm=syz.3.613
[   91.051666][ T2288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=2288 comm=syz.3.613
[   91.077346][  T991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   91.088547][  T991] asix 3-1:0.0: probe with driver asix failed with error -71
[   91.097302][  T991] usb 3-1: USB disconnect, device number 36
[   91.489725][   T65] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   91.618668][ T2309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2309 comm=syz.3.620
[   91.653142][   T65] usb 2-1: Using ep0 maxpacket: 32
[   91.660987][   T65] usb 2-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[   91.679824][   T65] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   91.696852][ T2311] netlink: 'syz.2.621': attribute type 3 has an invalid length.
[   91.704869][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[   91.716451][   T65] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   91.729807][   T65] usb 2-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3
[   91.738069][   T65] usb 2-1: Product: syz
[   91.749622][   T65] usb 2-1: Manufacturer: syz
[   91.754309][   T65] usb 2-1: SerialNumber: syz
[   91.777674][   T65] usb 2-1: config 0 descriptor??
[   91.828348][   T13] veth0_to_bond: left allmulticast mode
[   91.836519][   T13] veth0_to_bond: left promiscuous mode
[   91.869784][   T13] bridge0: port 3(veth0_to_bond) entered disabled state
[   91.887585][   T13] bridge_slave_1: left allmulticast mode
[   91.899703][   T13] bridge_slave_1: left promiscuous mode
[   91.915822][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.936415][   T13] bridge_slave_0: left allmulticast mode
[   91.945851][   T13] bridge_slave_0: left promiscuous mode
[   91.956032][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.101616][   T13] tipc: Left network mode
[   92.107314][   T13] veth1_macvtap: left promiscuous mode
[   92.112902][   T13] veth0_vlan: left promiscuous mode
[   92.263805][ T2320] /dev/rnullb0: Can't open blockdev
[   92.285239][ T2320] netlink: 'syz.0.626': attribute type 20 has an invalid length.
[   92.348288][  T493] usb 2-1: USB disconnect, device number 34
[   92.381794][ T2324] rust_binder: Write failure EFAULT in pid:527
[   92.406125][ T2318] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.445792][ T2318] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.464398][ T2318] bridge_slave_0: entered allmulticast mode
[   92.487072][ T2318] bridge_slave_0: entered promiscuous mode
[   92.496838][ T2318] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.510451][ T2318] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.527773][ T2318] bridge_slave_1: entered allmulticast mode
[   92.534293][ T2318] bridge_slave_1: entered promiscuous mode
[   92.633350][ T2318] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.640485][ T2318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.647827][ T2318] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.654931][ T2318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.692000][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.700721][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.711970][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.719036][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.731432][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.738633][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.774097][ T2318] veth0_vlan: entered promiscuous mode
[   92.789503][ T2318] veth1_macvtap: entered promiscuous mode
[   92.809698][  T493] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[   92.880910][ T2349] rust_binder: inc_ref_done called when no active inc_refs
[   92.883874][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.904331][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.917165][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.930006][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.942855][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.955525][ T2350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2350 comm=syz.3.632
[   92.979709][  T493] usb 2-1: Using ep0 maxpacket: 16
[   92.987591][  T493] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.998006][  T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   93.007942][  T493] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   93.022463][  T493] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[   93.031625][  T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.039717][  T493] usb 2-1: Product: syz
[   93.043891][  T493] usb 2-1: Manufacturer: syz
[   93.048742][  T493] usb 2-1: SerialNumber: syz
[   93.054221][  T493] usb 2-1: config 0 descriptor??
[   93.189754][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.262206][ T2335] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   93.269623][ T2335] rust_binder: Write failure EINVAL in pid:529
[   93.270422][  T991] usb 2-1: USB disconnect, device number 35
[   93.339737][   T31] usb 5-1: Using ep0 maxpacket: 32
[   93.346315][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[   93.354815][   T31] usb 5-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64
[   93.364838][   T31] usb 5-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   93.379129][   T31] usb 5-1: config 1 interface 0 has no altsetting 0
[   93.387828][   T31] usb 5-1: string descriptor 0 read error: -22
[   93.394121][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   93.403754][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.416270][ T2355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   93.423698][ T2355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   93.439696][ T2372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.638'.
[   93.499846][ T2379] netlink: 'syz.0.641': attribute type 4 has an invalid length.
[   93.507741][ T2379] netlink: 'syz.0.641': attribute type 5 has an invalid length.
[   93.515558][ T2379] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[   93.631441][ T2355] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   93.642628][   T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8
[   93.655086][   T31] usb 5-1: USB disconnect, device number 2
[   93.661750][   T31] usblp0: removed
[   93.759708][   T65] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[   93.789041][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   93.789061][   T36] audit: type=1400 audit(1756356309.701:419): avc:  denied  { execute } for  pid=2381 comm="syz.1.642" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   93.889847][   T65] usb 1-1: device descriptor read/64, error -71
[   94.055627][ T2414] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.654'.
[   94.139750][   T65] usb 1-1: device descriptor read/64, error -71
[   94.159853][   T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   94.309798][   T31] usb 2-1: Using ep0 maxpacket: 16
[   94.316252][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.327284][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.337469][   T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   94.346603][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.355229][   T31] usb 2-1: config 0 descriptor??
[   94.389729][   T65] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[   94.397705][  T991] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   94.529746][   T65] usb 1-1: device descriptor read/64, error -71
[   94.549711][  T991] usb 5-1: Using ep0 maxpacket: 16
[   94.555946][  T991] usb 5-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config
[   94.566333][  T991] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   94.577505][  T991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.586737][   T36] audit: type=1400 audit(1756356310.491:420): avc:  denied  { connect } for  pid=2418 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.606527][  T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.614666][  T991] usb 5-1: Product: и
[   94.618920][  T991] usb 5-1: Manufacturer: Ќ
[   94.623533][  T991] usb 5-1: SerialNumber: ᐁ
[   94.673919][   T36] audit: type=1400 audit(1756356310.591:421): avc:  denied  { nlmsg_read } for  pid=2425 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.673927][ T2426] netlink: 2 bytes leftover after parsing attributes in process `syz.3.659'.
[   94.771758][   T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0018/input/input27
[   94.783427][   T65] usb 1-1: device descriptor read/64, error -71
[   94.791318][   T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0018/input/input28
[   94.806243][   T31] kye 0003:0458:5012.0018: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[   94.899797][   T65] usb usb1-port1: attempt power cycle
[   94.971978][  T991] usb 2-1: USB disconnect, device number 36
[   95.031440][ T2417] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[   95.031440][ T2416] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[   95.046126][   T36] audit: type=1400 audit(1756356310.961:422): avc:  denied  { name_bind } for  pid=2415 comm="syz.4.655" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   95.067139][   T36] audit: type=1400 audit(1756356310.961:423): avc:  denied  { node_bind } for  pid=2415 comm="syz.4.655" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   95.089790][    T9] usb 5-1: USB disconnect, device number 3
[   95.239732][   T65] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[   95.260906][   T65] usb 1-1: device descriptor read/8, error -71
[   95.360880][ T2448] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   95.369265][ T2448] overlayfs: missing 'lowerdir'
[   95.375121][   T36] audit: type=1400 audit(1756356311.291:424): avc:  denied  { nlmsg_write } for  pid=2447 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   95.396939][   T36] audit: type=1400 audit(1756356311.291:425): avc:  denied  { audit_write } for  pid=2447 comm="syz.3.665" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   95.418229][   T36] audit: type=1107 audit(1756356311.291:426): pid=2447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   95.419468][   T65] usb 1-1: device descriptor read/8, error -71
[   95.464207][   T36] audit: type=1400 audit(1756356311.381:427): avc:  denied  { setopt } for  pid=2452 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.557066][ T2475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[   95.625160][ T2481] rust_binder: Error while translating object.
[   95.625208][ T2481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   95.631633][ T2481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   95.669731][   T65] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[   95.717839][   T65] usb 1-1: device descriptor read/8, error -71
[   95.851215][   T65] usb 1-1: device descriptor read/8, error -71
[   95.959800][   T65] usb usb1-port1: unable to enumerate USB device
[   96.200807][ T2503] overlayfs: failed to resolve './file1': -2
[   96.200818][ T2505] overlayfs: failed to resolve './file1': -2
[   96.267652][ T2507] netlink: 'syz.1.683': attribute type 4 has an invalid length.
[   96.276952][ T2507] netlink: 'syz.1.683': attribute type 4 has an invalid length.
[   96.284722][   T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   96.440868][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.450781][   T65] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   96.459880][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.468620][   T65] usb 5-1: config 0 descriptor??
[   96.539743][  T493] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   96.690885][  T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.701994][  T493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.711812][  T493] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[   96.720943][  T493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.730000][  T493] usb 2-1: config 0 descriptor??
[   96.876894][   T65] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[   96.902820][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   97.061409][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.071596][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   97.082317][    T9] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[   97.091546][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.099578][    T9] usb 1-1: Product: syz
[   97.103860][    T9] usb 1-1: Manufacturer: syz
[   97.108505][    T9] usb 1-1: SerialNumber: syz
[   97.114227][    T9] usb 1-1: config 0 descriptor??
[   97.137793][  T493] hid-led 0003:04D8:F372.001A: unknown main item tag 0x0
[   97.144990][  T493] hid-led 0003:04D8:F372.001A: unknown main item tag 0x0
[   97.152108][  T493] hid-led 0003:04D8:F372.001A: unknown main item tag 0x0
[   97.160246][  T493] hid-led 0003:04D8:F372.001A: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0
[   97.178985][  T493] hid-led 0003:04D8:F372.001A: Greynut Luxafor initialized
[   97.339575][  T493] usb 2-1: USB disconnect, device number 37
[   97.346511][    T9] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38)
[   97.354960][    T9] leds luxafor1:green:led5: Setting an LED's brightness failed (-38)
[   97.363424][    T9] leds luxafor1:red:led5: Setting an LED's brightness failed (-38)
[   97.372632][    T9] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38)
[   97.381003][    T9] leds luxafor1:green:led4: Setting an LED's brightness failed (-38)
[   97.389427][    T9] leds luxafor1:red:led4: Setting an LED's brightness failed (-38)
[   97.398097][    T9] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38)
[   97.406547][    T9] leds luxafor1:green:led3: Setting an LED's brightness failed (-38)
[   97.415034][    T9] leds luxafor1:red:led3: Setting an LED's brightness failed (-38)
[   97.423317][    T9] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38)
[   97.431814][    T9] leds luxafor1:green:led2: Setting an LED's brightness failed (-38)
[   97.440237][    T9] leds luxafor1:red:led2: Setting an LED's brightness failed (-38)
[   97.448544][    T9] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38)
[   97.456953][    T9] leds luxafor1:green:led1: Setting an LED's brightness failed (-38)
[   97.465403][    T9] leds luxafor1:red:led1: Setting an LED's brightness failed (-38)
[   97.473686][    T9] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38)
[   97.482058][    T9] leds luxafor1:green:led0: Setting an LED's brightness failed (-38)
[   97.490538][    T9] leds luxafor1:red:led0: Setting an LED's brightness failed (-38)
[   97.505070][   T65] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71
[   97.512564][   T65] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71
[   97.521337][   T65] usb 5-1: USB disconnect, device number 4
[   97.875887][   T36] audit: type=1400 audit(1756356313.791:428): avc:  denied  { accept } for  pid=2529 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.956341][ T2535] netlink: 240 bytes leftover after parsing attributes in process `syz.3.691'.
[   98.037893][ T2540] netlink: 'syz.4.693': attribute type 58 has an invalid length.
[   98.103510][ T2543] netlink: 'syz.4.693': attribute type 58 has an invalid length.
[   98.136655][ T2544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569
[   98.143543][   T65] rust_binder: 2541: removing orphan mapping 0:24
[   99.114522][   T12] bridge_slave_1: left allmulticast mode
[   99.120396][   T12] bridge_slave_1: left promiscuous mode
[   99.126108][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.134461][   T12] bridge_slave_0: left allmulticast mode
[   99.140233][   T12] bridge_slave_0: left promiscuous mode
[   99.145856][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.204660][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.212388][ T2579] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.219580][ T2579] bridge_slave_0: entered allmulticast mode
[   99.226087][ T2579] bridge_slave_0: entered promiscuous mode
[   99.232722][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.240101][ T2579] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.247182][ T2579] bridge_slave_1: entered allmulticast mode
[   99.253590][ T2579] bridge_slave_1: entered promiscuous mode
[   99.260606][   T12] veth1_macvtap: left promiscuous mode
[   99.266552][   T12] veth0_vlan: left promiscuous mode
[   99.355958][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.363097][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.370452][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.377515][ T2579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.388322][  T493] usb 1-1: USB disconnect, device number 39
[   99.407380][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.414731][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.424352][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.431488][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.441303][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.448356][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.474907][ T2579] veth0_vlan: entered promiscuous mode
[   99.486141][ T2579] veth1_macvtap: entered promiscuous mode
[   99.517509][ T2602] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   99.874428][ T2622] syzkaller0: entered promiscuous mode
[   99.880000][ T2622] syzkaller0: entered allmulticast mode
[   99.920308][ T2628] exFAT-fs (rnullb0): invalid boot record signature
[   99.927132][ T2628] exFAT-fs (rnullb0): failed to read boot sector
[   99.933749][ T2628] exFAT-fs (rnullb0): failed to recognize exfat type
[   99.990919][ T2638] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  100.226007][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  100.226026][   T36] audit: type=1400 audit(1756356316.141:430): avc:  denied  { mounton } for  pid=2661 comm="syz.1.729" path="/197/file0" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  100.255212][ T2662] EXT4-fs: Ignoring removed check option
[  100.261171][ T2662] No source specified
[  100.269690][  T991] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  100.357229][ T2675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'.
[  100.419744][  T991] usb 5-1: Invalid ep0 maxpacket: 16
[  100.429527][ T2691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.740'.
[  100.521965][ T2699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'.
[  100.536231][ T2699] incfs: Unexpected inode type
[  100.542154][   T36] audit: type=1400 audit(1756356316.461:431): avc:  denied  { rmdir } for  pid=2698 comm="syz.0.743" name="file0" dev="incremental-fs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.549711][  T991] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  100.616010][  T290] ------------[ cut here ]------------
[  100.621654][  T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:340 drop_nlink+0xce/0x110
[  100.629709][  T290] Modules linked in:
[  100.633628][  T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece
[  100.645365][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  100.655541][  T290] RIP: 0010:drop_nlink+0xce/0x110
[  100.660696][  T290] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[  100.680521][  T290] RSP: 0018:ffffc9000b61fc60 EFLAGS: 00010293
[  100.686624][  T290] RAX: ffffffff81edc76e RBX: ffff8881326d1a78 RCX: ffff888108a9b900
[  100.694637][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  100.702681][  T290] RBP: ffffc9000b61fc88 R08: 0000000000000003 R09: 0000000000000004
[  100.710702][  T290] R10: dffffc0000000000 R11: fffff520016c3f7c R12: dffffc0000000000
[  100.718718][  T290] R13: 1ffff110264da358 R14: ffff8881326d1ac0 R15: 0000000000000000
[  100.726746][  T290] FS:  0000555562d9e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  100.729698][  T991] usb 5-1: Invalid ep0 maxpacket: 16
[  100.735752][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.741930][  T991] usb usb5-port1: attempt power cycle
[  100.747623][  T290] CR2: 0000555562dc14e8 CR3: 0000000124504000 CR4: 00000000003526b0
[  100.747650][  T290] Call Trace:
[  100.764362][  T290]  <TASK>
[  100.767299][  T290]  shmem_rmdir+0x5f/0x90
[  100.771580][  T290]  vfs_rmdir+0x3e0/0x560
[  100.775863][  T290]  incfs_kill_sb+0x109/0x230
[  100.780498][  T290]  deactivate_locked_super+0xd5/0x2a0
[  100.785906][  T290]  deactivate_super+0xb8/0xe0
[  100.790670][  T290]  cleanup_mnt+0x3f1/0x480
[  100.795144][  T290]  __cleanup_mnt+0x1d/0x40
[  100.799595][  T290]  task_work_run+0x1e3/0x250
[  100.804226][  T290]  ? __cfi_task_work_run+0x10/0x10
[  100.809369][  T290]  ? __x64_sys_umount+0x126/0x170
[  100.814481][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[  100.819920][  T290]  ? __kasan_check_read+0x15/0x20
[  100.825013][  T290]  resume_user_mode_work+0x36/0x50
[  100.830164][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[  100.835649][  T290]  do_syscall_64+0x64/0xf0
[  100.840106][  T290]  ? clear_bhb_loop+0x50/0xa0
[  100.844811][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.850768][  T290] RIP: 0033:0x7fd7ab58ff17
[  100.855200][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  100.874852][  T290] RSP: 002b:00007ffe8a6184d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  100.883339][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd7ab58ff17
[  100.891358][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a618590
[  100.899350][  T290] RBP: 00007ffe8a618590 R08: 0000000000000000 R09: 0000000000000000
[  100.907390][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8a619620
[  100.915420][  T290] R13: 00007fd7ab611c05 R14: 00000000000188c1 R15: 00007ffe8a619660
[  100.923449][  T290]  </TASK>
[  100.926491][  T290] ---[ end trace 0000000000000000 ]---
[  100.932191][  T290] ==================================================================
[  100.940377][  T290] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[  100.946639][  T290] Write of size 4 at addr 0000000000000168 by task syz-executor/290
[  100.954608][  T290] 
[  100.956926][  T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G        W          syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece
[  100.956951][  T290] Tainted: [W]=WARN
[  100.956957][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  100.956968][  T290] Call Trace:
[  100.956973][  T290]  <TASK>
[  100.956981][  T290]  __dump_stack+0x21/0x30
[  100.957004][  T290]  dump_stack_lvl+0x10c/0x190
[  100.957026][  T290]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.957049][  T290]  print_report+0x3d/0x70
[  100.957066][  T290]  kasan_report+0x163/0x1a0
[  100.957085][  T290]  ? ihold+0x24/0x70
[  100.957101][  T290]  ? _raw_spin_unlock+0x45/0x60
[  100.957121][  T290]  ? ihold+0x24/0x70
[  100.957138][  T290]  kasan_check_range+0x299/0x2a0
[  100.957163][  T290]  __kasan_check_write+0x18/0x20
[  100.957186][  T290]  ihold+0x24/0x70
[  100.957203][  T290]  vfs_rmdir+0x26a/0x560
[  100.957225][  T290]  incfs_kill_sb+0x109/0x230
[  100.957249][  T290]  deactivate_locked_super+0xd5/0x2a0
[  100.957271][  T290]  deactivate_super+0xb8/0xe0
[  100.957291][  T290]  cleanup_mnt+0x3f1/0x480
[  100.957309][  T290]  __cleanup_mnt+0x1d/0x40
[  100.957325][  T290]  task_work_run+0x1e3/0x250
[  100.957345][  T290]  ? __cfi_task_work_run+0x10/0x10
[  100.957364][  T290]  ? __x64_sys_umount+0x126/0x170
[  100.957386][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[  100.957409][  T290]  ? __kasan_check_read+0x15/0x20
[  100.957432][  T290]  resume_user_mode_work+0x36/0x50
[  100.957451][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[  100.957469][  T290]  do_syscall_64+0x64/0xf0
[  100.957489][  T290]  ? clear_bhb_loop+0x50/0xa0
[  100.957506][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.957532][  T290] RIP: 0033:0x7fd7ab58ff17
[  100.957545][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  100.957559][  T290] RSP: 002b:00007ffe8a6184d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  100.957577][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd7ab58ff17
[  100.957589][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a618590
[  100.957600][  T290] RBP: 00007ffe8a618590 R08: 0000000000000000 R09: 0000000000000000
[  100.957611][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8a619620
[  100.957622][  T290] R13: 00007fd7ab611c05 R14: 00000000000188c1 R15: 00007ffe8a619660
[  100.957637][  T290]  </TASK>
[  100.957643][  T290] ==================================================================
[  101.204023][  T290] Disabling lock debugging due to kernel taint
[  101.211212][  T290] BUG: kernel NULL pointer dereference, address: 0000000000000168
[  101.219046][  T290] #PF: supervisor write access in kernel mode
[  101.225132][  T290] #PF: error_code(0x0002) - not-present page
[  101.231107][  T290] PGD 80000001306e6067 P4D 80000001306e6067 PUD 0 
[  101.237624][  T290] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  101.243691][  T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G    B   W          syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece
[  101.256888][  T290] Tainted: [B]=BAD_PAGE, [W]=WARN
[  101.261905][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.271966][  T290] RIP: 0010:ihold+0x2a/0x70
[  101.276475][  T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd
[  101.296309][  T290] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246
[  101.302381][  T290] RAX: ffff888108a9b900 RBX: 0000000000000000 RCX: ffff888108a9b900
[  101.310377][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  101.318347][  T290] RBP: ffffc9000b61fcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528
[  101.326321][  T290] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881326d1a84
[  101.334306][  T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  101.342286][  T290] FS:  0000555562d9e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  101.351218][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.357803][  T290] CR2: 0000000000000168 CR3: 0000000124504000 CR4: 00000000003526b0
[  101.365780][  T290] Call Trace:
[  101.369061][  T290]  <TASK>
[  101.371995][  T290]  vfs_rmdir+0x26a/0x560
[  101.376249][  T290]  incfs_kill_sb+0x109/0x230
[  101.380847][  T290]  deactivate_locked_super+0xd5/0x2a0
[  101.386331][  T290]  deactivate_super+0xb8/0xe0
[  101.391012][  T290]  cleanup_mnt+0x3f1/0x480
[  101.395432][  T290]  __cleanup_mnt+0x1d/0x40
[  101.399852][  T290]  task_work_run+0x1e3/0x250
[  101.404451][  T290]  ? __cfi_task_work_run+0x10/0x10
[  101.409569][  T290]  ? __x64_sys_umount+0x126/0x170
[  101.414617][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[  101.420004][  T290]  ? __kasan_check_read+0x15/0x20
[  101.425047][  T290]  resume_user_mode_work+0x36/0x50
[  101.430203][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[  101.435665][  T290]  do_syscall_64+0x64/0xf0
[  101.440088][  T290]  ? clear_bhb_loop+0x50/0xa0
[  101.444786][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.450699][  T290] RIP: 0033:0x7fd7ab58ff17
[  101.455117][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  101.474724][  T290] RSP: 002b:00007ffe8a6184d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  101.483153][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd7ab58ff17
[  101.491137][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a618590
[  101.499112][  T290] RBP: 00007ffe8a618590 R08: 0000000000000000 R09: 0000000000000000
[  101.507085][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8a619620
[  101.515061][  T290] R13: 00007fd7ab611c05 R14: 00000000000188c1 R15: 00007ffe8a619660
[  101.523039][  T290]  </TASK>
[  101.526055][  T290] Modules linked in:
[  101.529965][  T290] CR2: 0000000000000168
[  101.534114][  T290] ---[ end trace 0000000000000000 ]---
[  101.539562][  T290] RIP: 0010:ihold+0x2a/0x70
[  101.544070][  T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd
[  101.563686][  T290] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246
[  101.569765][  T290] RAX: ffff888108a9b900 RBX: 0000000000000000 RCX: ffff888108a9b900
[  101.577745][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  101.585717][  T290] RBP: ffffc9000b61fcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528
[  101.593691][  T290] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881326d1a84
[  101.601682][  T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  101.609668][  T290] FS:  0000555562d9e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  101.618618][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.625209][  T290] CR2: 0000000000000168 CR3: 0000000124504000 CR4: 00000000003526b0
[  101.633185][  T290] Kernel panic - not syncing: Fatal exception
[  101.639551][  T290] Kernel Offset: disabled
[  101.643877][  T290] Rebooting in 86400 seconds..