last executing test programs:

1m22.814853376s ago: executing program 1 (id=2):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

1m22.669438748s ago: executing program 1 (id=6):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffb, 0x5}, {0x2, 0xffff}]}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
pwritev2(r6, &(0x7f0000003300)=[{&(0x7f00000000c0)='r', 0x1}], 0x1, 0x8, 0x7, 0xa)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r8 = open(&(0x7f0000000180)='./file0\x00', 0x142080, 0x20)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_NMI(r7, 0xae9a)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000700000002000000040000000800002a1c95e65e"])
r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, 0x0)
fsopen(&(0x7f00000001c0)='omfs\x00', 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x7fffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x8, 0x2, 0x36}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x95, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c"})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"])
ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xb96)

1m22.323152676s ago: executing program 1 (id=15):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="200000005f0001010000000048a7376db1f9"], 0x20}], 0x1}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r4, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r4, r4, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)

1m6.958626492s ago: executing program 32 (id=15):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="200000005f0001010000000048a7376db1f9"], 0x20}], 0x1}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r4, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r4, r4, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)

38.792769376s ago: executing program 4 (id=555):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
syz_io_uring_setup(0x752d, &(0x7f0000000140)={0x0, 0xd383, 0x40, 0x0, 0x256}, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
read$FUSE(r1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100))
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

38.150680017s ago: executing program 4 (id=558):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0xc, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000007c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd)

36.452109535s ago: executing program 4 (id=590):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x400c8c0)
sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000723db05b31a47eeaf9dd343d7a00000000000000000000000000006401010000b8859912fd67d0da9d5c0b0f604c384600000000000088000000002c003000"], 0x38}}, 0x40408c0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="1800df002000010023bd70000000000008006200", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000)
write$tcp_congestion(r1, &(0x7f00000002c0)='vegas\x00', 0x6)
mknod(&(0x7f0000000240)='./cgroup\x00', 0x100, 0x54d)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001, 0x3})
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x6, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb1, 0x5, 0x0, 0xffffffba, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4, 0x400]}, 0x45c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0)

36.220791214s ago: executing program 4 (id=596):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8d)
openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80) (async)
r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000180)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000480)) (async)
clock_gettime(0x0, &(0x7f0000000480)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {r5, r6+60000000}}, &(0x7f0000000200))
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc)
r7 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
syz_open_procfs(r7, 0x0)
timer_create(0x6, &(0x7f0000000040)={0x0, 0x5, 0x0, @tid=r7}, &(0x7f0000000080))
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) (async)
r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
r10 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r10, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r10, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)
pwrite64(r8, 0x0, 0x0, 0xffffffff) (async)
pwrite64(r8, 0x0, 0x0, 0xffffffff)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r11, 0x400448e7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

36.220433534s ago: executing program 4 (id=597):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = gettid()
fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x3, 0x63f2b90d, 0x3, r1})
syz_open_procfs(r1, &(0x7f0000000000)='net/ip_mr_cache\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6, 0x0, 0x1, 0x1}]})
r2 = epoll_create(0x7)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x12})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
r6 = eventfd2(0x8, 0x80800)
ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000400)={0x2, 0x6})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd21, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r8, r0, 0x0, 0x80000000)

36.104310673s ago: executing program 4 (id=598):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@multicast2, 0xfffd, 0x20, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x100000001, 0x0, 0x7fffffffffffffff, 0x1, 0xffffffff}, {0x0, 0x2, 0x1}, 0x0, 0x4}, {{@in6=@mcast1, 0x4d5, 0x62}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x7507, 0x0, 0x2, 0x0, 0xfffffffe, 0x4000000}}, 0xe8)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

36.077593445s ago: executing program 33 (id=598):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@multicast2, 0xfffd, 0x20, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x100000001, 0x0, 0x7fffffffffffffff, 0x1, 0xffffffff}, {0x0, 0x2, 0x1}, 0x0, 0x4}, {{@in6=@mcast1, 0x4d5, 0x62}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x7507, 0x0, 0x2, 0x0, 0xfffffffe, 0x4000000}}, 0xe8)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.628069665s ago: executing program 5 (id=1116):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="660f2eaf0550b812000f00d08461f7f30f00910e300f234166b8010000000f01c1c0605800660f72f6000f797b06ba4200ed", 0x32}], 0x1, 0x285da7c0965490b, 0x0, 0x0) (async)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000000000000000000080000000600000008000000e1000000ff07000003000000000000000000000000000000000000c0"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

4.503570296s ago: executing program 5 (id=1121):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0x3000, 0x5000, 0x1000], 0xfffffffffffffff9, 0x20}) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.352251607s ago: executing program 5 (id=1125):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0)
mmap(&(0x7f00001df000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0xb5725000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
sendfile(r2, r2, 0x0, 0x3)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.261636745s ago: executing program 5 (id=1126):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @request_death={0x400c630e, 0x1}, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

3.419324153s ago: executing program 5 (id=1142):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = epoll_create(0xaf4)
clock_gettime(0x0, &(0x7f0000000540)={<r2=>0x0, <r3=>0x0})
epoll_pwait2(r1, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000005c0)={r2, r3+60000000}, &(0x7f0000000600)={[0x28]}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x0, 0x0, 0x0})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100})
r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000001680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x9, 0x1, 0x6b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x4, 0xb, 0xfffc}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0xc, 0x6, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x6, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xa, 0xfffffffd, 0x0, 0x17, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x2001, 0xf1c, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, 0x400000, 0x0, 0x4, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x0, 0x40, 0xd67c, 0x2, 0x0, 0x4, 0x1000003, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x800005, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc0ac, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000240)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
write$uinput_user_dev(r4, 0x0, 0xfffffffffffffdf0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.966968881s ago: executing program 0 (id=1184):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x48c0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000200))
r4 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x48c0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000200)) (async)
socket(0xa, 0x2, 0x0) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) (async)

1.916856065s ago: executing program 0 (id=1185):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)={[{@subsystem='cpu'}]})
r2 = socket$netlink(0x10, 0x3, 0x5)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000080)={0x7, 'veth1_macvtap\x00', {0x6}, 0x6})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

1.404127237s ago: executing program 0 (id=1189):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @empty}, 0x1c) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async)
madvise(&(0x7f0000e28000/0x1000)=nil, 0x1000, 0x16)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3})
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x1, 0x0, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x40, 0x0, 0x4007}})
sendmsg$can_raw(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "2033996cf074bfd0"}, 0x10}, 0x1, 0x0, 0x0, 0x4000045}, 0x40) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000add000/0x4000)=nil, 0x4000, &(0x7f0000000300)='./bi\xda\xfa\v\xe2\x9a\xb3\\\xc5nder1\x00')

1.384494708s ago: executing program 0 (id=1191):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
getpriority(0x1, 0x0)
fchdir(r0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000e00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "0e03"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000900)={0x0, 0x3, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0xb, 0xf5, {0xf5, 0xe, "3f053fc733fe95ccc4fccd51da7375217d2ab7cd6285a00f6901ac13871aabea05fdecb02fd850efabd09e22318c3ef0b7f050ee5b08ba1a797f6826763b2c5b97fac5f77be05d1ae7ad71cd2a184bceb14b6717b5999150a589157555b375f60ecc6122c31cb47fdfb5f04222040df8d818921b25f3f57367533eed281ac6461049288e95d5a102ab14f1700c7e080f76b16566f4a244fb381834408961a2b7665145fbc0838a03a18f25cbfb502236966c52cb587672f6d1dc1329abf6f996a1042d1b296df8a746cdc97c22c133734ca24e59752c901ee83d3c9c8ffe72fc522c9b9e1293b1eced89bb1250911de2aa8443"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x30, 0x35, "46ad0fa3dfadfe6620db7e0a36571b94c862a1cbd727ea342c76e5eb0c3e5ec2204e49a80089020ee0c3c7866b9bf6bc716dbd12de"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}})
mmap(&(0x7f0000468000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x16843000)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xad9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x47, 0x4, 0x4}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0xe, 0x7, 0x0, 0x10, 0x6}, 0x31, &(0x7f0000000380)={0x5, 0xf, 0x31, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0x89, 0x3, 0xc6, 0x80, 0xab}, @generic={0x9, 0x10, 0xb, "c65f001ffa06"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x0, 0x3, 0x76}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x414}}, {0xda, &(0x7f0000000400)=@string={0xda, 0x3, "001251014dcfc2cc1c490037441d569a682fa5567c0a76d106a10a4cbf86e149af0c5640bafd1946fd0b8cb160f9cfdd5110e8f453664af260c671823f31df861ea5270d7aeb2c72917e177b8a30a21e6d00be3ece88b52a6f43cc09cf417f24bc3cad892df749d5643e3b390c7d70c648738b803f0da3afcd696269772a2eceab64475ac6105d671d82bd309606ed807b571357e8817dc31fe384c0c3efdbe3133a33e8a937f6e4601ae91e68580cb3306afa5085d6158f425ccc52eb527d8427b1b0e2088c2680db30886d0d3c5d2c6e84955b49b5901d"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r1, &(0x7f0000002400)="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", 0x1000)

1.165703926s ago: executing program 2 (id=1192):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f00000001c0)={0x46, 0xfffffffffffff985, 0x14}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="f30f1eff64660f6db9008082fe0b0f01baff57650fc7f86766c74424009fffffff6766c74424026c0000006766c744240600000000670f011c249466b9800000c00f326635000100000f300f38085304670f09", 0x53}], 0x1, 0x7e, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in=@private=0xa010101, {0x327, 0x9, 0x0, 0x4, 0x6, 0x0, 0x1}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0xa, 0x1}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00')
r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x1)
fchdir(r9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0xff)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4)
write$binfmt_format(r5, &(0x7f0000000300)='1\x00', 0x2)
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000380)={{0x3, 0x100, 0x0, 0xe12, 0x7ff, 0x714b}, 0x33a, [0x7fffffff, 0x8000, 0x400, 0x2, 0x8, 0xfffffff8, 0xffffffff, 0x0, 0x7, 0x0, 0x3, 0x98c, 0x401, 0x6, 0x4, 0x3, 0x3, 0x5, 0x1000, 0xffffffff, 0x7, 0x3, 0x5, 0x2, 0xb, 0x3, 0x3, 0x9, 0xedb, 0x4236, 0x1000, 0x2, 0x6, 0x7ff, 0xc3, 0x8, 0x80000001, 0x8, 0x0, 0x4, 0xe, 0x6, 0x63e4, 0x6, 0x4, 0x5, 0x4, 0x10000, 0x3, 0xfffffff5, 0x86f7, 0xfffffffd, 0x2, 0x5, 0x0, 0x5, 0x4, 0x0, 0x4000000, 0x1, 0x8, 0x0, 0x5, 0x8, 0x2, 0x352e521b, 0x8c3, 0x1, 0x0, 0x8, 0xfff, 0x2, 0x8, 0x2, 0xe6c8, 0x80000001, 0xf27, 0x2, 0x5, 0xf, 0x3, 0x836b, 0xc0, 0x40000000, 0x7, 0x4, 0x7fff, 0xfffffff7, 0x2d0daedc, 0x2, 0x7fffffff, 0x7fff, 0x8, 0x7, 0x3, 0x6, 0x9, 0x9, 0x9, 0xfffffffb, 0x2, 0xffffffff, 0x7, 0x6, 0x9, 0x7, 0x0, 0xe4, 0x1, 0x3ff, 0x5, 0x7f, 0x5, 0x3, 0x8f5b, 0x10000, 0x6, 0x0, 0x4, 0x4, 0x9, 0x3, 0x4, 0x6, 0x4, 0xd7, 0xfffffffd, 0x5971, 0x3, 0x1000, 0x7, 0x5, 0x3, 0x10000, 0x9, 0x5, 0x4, 0x100, 0x6, 0x3, 0xc667, 0x4, 0x8, 0x4, 0xf20, 0x8001, 0x100, 0xb308, 0x5, 0x9, 0x5, 0x43, 0x200, 0x7, 0xe, 0x3, 0x8, 0x4, 0x2, 0x3, 0x0, 0x9, 0x3, 0x800, 0x7, 0x8, 0x400, 0xe1af, 0x200, 0xffffffff, 0x0, 0xf, 0x3, 0x651, 0x0, 0x5, 0x5, 0x2, 0x0, 0x7, 0x0, 0x0, 0x8001, 0x3, 0x9, 0x0, 0x2, 0x273b69db, 0x4, 0x5, 0x9a23, 0x1, 0xffffffff, 0x4, 0x200, 0xfffffffb, 0x8, 0x7f, 0x5, 0x7, 0x5, 0xdb9, 0x6e, 0x8001, 0x4, 0x4, 0x7, 0x0, 0x2, 0x9, 0x100, 0xd, 0x2, 0x1ff, 0xfffffff7, 0x2, 0x5, 0xa78, 0x9ab1, 0x9a4, 0x2, 0x674, 0xf, 0x9, 0x2, 0x7, 0x3, 0xfc1a, 0x1ff, 0xfffffffb, 0x100, 0x480, 0x5, 0x4, 0x2, 0x7, 0x3ff, 0xec34, 0x6, 0x7, 0x1, 0x800, 0x7d2, 0x2, 0x1, 0x4, 0x53, 0xffff, 0x7, 0x6, 0x4, 0x1000, 0xffffffff, 0x7, 0x3, 0x1, 0xe1, 0x0, 0xc00, 0x7, 0x9613, 0xd, 0x94, 0x9, 0x1, 0x13e, 0x3, 0x6, 0xe, 0x2, 0xc1, 0xffff86c0, 0x1, 0x5, 0x2, 0x315, 0x8, 0x2, 0x5, 0x5, 0x8, 0x0, 0x10, 0x5, 0x5, 0x5, 0x3, 0x80000000, 0x374, 0xd, 0x9, 0xd, 0x1f45, 0x7, 0x6, 0xfffffffa, 0x3ff, 0x81, 0x100, 0x1, 0x79, 0xb, 0x4, 0x3, 0x6, 0x4, 0x1, 0xf77, 0xfffffffc, 0x1, 0x4, 0x876, 0x7, 0x3, 0x0, 0x2, 0x6, 0x4, 0xd, 0x6, 0x300, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x3, 0x5, 0x8, 0x4, 0x7, 0x1, 0x80000000, 0x6, 0x2, 0x100, 0x0, 0x1400, 0x8, 0x380, 0xe5e, 0x9, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x3, 0xe6d, 0x7, 0x2, 0x81, 0x26, 0xfffffffc, 0x4f9, 0x4, 0xffffe4df, 0x0, 0xf13, 0x8, 0x5, 0x10000, 0x8, 0x10000, 0x0, 0xa, 0x1, 0x8001, 0x8, 0x80000001, 0xc2, 0x0, 0x1, 0x99, 0x40, 0xf0f, 0x8, 0x9, 0x48, 0x8001, 0x0, 0x0, 0xc, 0xf, 0xc70d, 0x2, 0x2, 0x7, 0x400, 0x9, 0x0, 0x40, 0xffff, 0x4, 0x3, 0xfffffff9, 0xb563, 0xfffffffb, 0x4, 0x5, 0x8, 0x1, 0x800000, 0xbc31f615, 0x3, 0x7fffffff, 0x7, 0x2, 0xa22, 0x6e, 0x1ff, 0xb22e, 0x5, 0x4, 0x401, 0x1, 0x4, 0x3, 0x40000000, 0x401, 0x6, 0x800, 0x200, 0x8000, 0xbb3, 0xb47, 0x8000, 0x7, 0x5, 0x1, 0x9, 0x7, 0x3, 0xa597, 0x2, 0x6, 0x0, 0x1ff, 0x3ff, 0x0, 0x10001, 0x5, 0xf0, 0x507, 0x9, 0x4, 0x6, 0x400, 0x7f, 0x636e, 0xda69, 0x1000, 0x5, 0x2, 0x10001, 0x7fffffff, 0xfffffff7, 0x3, 0x80000001, 0x7f, 0x6, 0x25, 0x5, 0x1, 0xd, 0x1, 0x3, 0x3d0d, 0x4, 0x8, 0x9, 0xe64, 0x1, 0x0, 0x4, 0x800, 0x1, 0x101, 0x6a, 0xe, 0x2, 0xffff, 0x7fffffff, 0x9, 0x0, 0x4, 0x101, 0xaea, 0x8, 0x9, 0x10, 0x5, 0x40, 0x7, 0x200, 0xfffffffa, 0xf, 0xb, 0x9, 0x80000001, 0x8, 0x8, 0x401, 0x5, 0x7fffffff, 0x4, 0x5, 0x7, 0x3ff, 0x2, 0x2, 0x4, 0xe2, 0x2, 0x5, 0x4, 0x0, 0x2, 0xd, 0x1171, 0x401, 0x9, 0x36, 0x5, 0x4, 0x800000, 0x8, 0x8, 0x1, 0xfffffff8, 0x1, 0x104, 0x401, 0x0, 0x81, 0x100, 0x6, 0xf, 0xc323, 0x8001, 0x81, 0x4, 0x9, 0x5, 0x7, 0x5, 0x3, 0x9, 0x2, 0xafd, 0x8000, 0x2, 0x4, 0x1d14, 0x6, 0x4, 0x400, 0x4, 0xfffffffe, 0x3, 0x3, 0x80000001, 0x9, 0x7fff, 0x9, 0x7f, 0x9, 0x3d, 0x33, 0x1, 0x6, 0x7fff, 0xfffffff9, 0x8, 0x7, 0x5, 0x8, 0xd5, 0xf, 0x5, 0x7fffffff, 0x6, 0x8000, 0x3, 0xf3, 0x3, 0x0, 0x7, 0x10001, 0x6, 0x3, 0x0, 0x7, 0xffffff00, 0x9, 0xf, 0x5, 0x645, 0x80, 0x47d, 0x8, 0x0, 0x4, 0x5, 0xe, 0x8e, 0x3, 0xfffffffa, 0x7, 0x0, 0x0, 0x2, 0x80, 0xb591, 0x8, 0x4000, 0x1, 0x0, 0x88b5, 0x0, 0x3, 0x4, 0x6, 0x4c, 0x3, 0x3, 0x2, 0x8, 0x5, 0x9, 0x8, 0x7, 0x4, 0xe, 0x0, 0x7, 0x1, 0x7, 0xae, 0x0, 0x0, 0xe0d, 0x3, 0x33b, 0x10, 0x8, 0xbf, 0x7, 0x6, 0x6, 0x6, 0xfffffffb, 0x7, 0x5, 0x94d, 0xfff, 0x4, 0x1, 0x5, 0x6, 0x10000, 0x6, 0x2, 0x3, 0x4, 0x1, 0xfffffe01, 0x6, 0x200, 0x4, 0x0, 0xe9, 0x0, 0x5, 0x0, 0x5, 0xdb6, 0x7, 0xb8, 0x6, 0x2, 0x5, 0xe0, 0x501, 0x0, 0x1, 0x6, 0x2, 0x63b, 0xd, 0x401, 0x6d497901, 0x8, 0x2, 0x22b8, 0x3, 0x8, 0x1000, 0x9, 0x6, 0x200, 0x80, 0xff, 0x6, 0x1, 0xfffffff7, 0x7, 0x3ff, 0x0, 0xffffffff, 0xc, 0x3ff, 0x8, 0x2, 0x2, 0x1, 0x1, 0x80000000, 0x5, 0x1, 0xfde, 0x0, 0xd, 0x7, 0x7, 0x6, 0x8, 0x7, 0x81, 0xc, 0x7, 0x37, 0x100, 0x8000000, 0x5cb7, 0xff, 0x7, 0xb, 0xffff, 0x1, 0x5, 0xffffff6c, 0xac11, 0xe, 0x2, 0x8001, 0x8, 0x6, 0x8000, 0xffff8e7f, 0x8, 0x2, 0x8, 0x8, 0x8, 0x9, 0x3ff, 0x3, 0x10000, 0x6a4, 0x4, 0xc0000000, 0x4, 0x8, 0x98a, 0x8e6, 0x80000001, 0x36fc, 0x0, 0x8250, 0x1f, 0x3, 0x1, 0x0, 0x8, 0x0, 0x1, 0x1e, 0x1, 0xcb2c, 0x2, 0x2, 0x998, 0x10, 0x328, 0xfffffffa, 0x2, 0x8000, 0x0, 0xfffffff7, 0x6, 0x5, 0x694d, 0x6, 0x401, 0x1000, 0x2, 0x3ff, 0x3, 0x5, 0x80, 0x10000, 0x1ffc, 0x2, 0x0, 0x6acd, 0x4, 0x400, 0x2, 0x8, 0x6, 0x38000, 0x1, 0x0, 0x101, 0x6, 0xd, 0x8, 0x3, 0x3, 0x0, 0x2, 0x100, 0x9ea, 0xaf, 0x9, 0x5, 0x7, 0xfffffffc, 0xf, 0x9, 0x1000, 0x8, 0x5, 0xb7, 0x3, 0xa, 0xa, 0x10000, 0x8000, 0x4, 0x7, 0x3, 0x4, 0x6, 0x8, 0x7f80, 0x6, 0xfffffffd, 0x7, 0x6, 0xd, 0x4, 0x0, 0x9, 0x81, 0x1, 0x881d, 0x5, 0x4, 0x0, 0x3, 0x3b8, 0x6, 0x2, 0x10001, 0x7f, 0x7, 0x4, 0x6, 0x4028, 0x100, 0x0, 0x8, 0x28000, 0x9, 0xdfe, 0xff, 0x9, 0xfff, 0x5, 0xd0, 0xf, 0x6, 0x9, 0x0, 0x0, 0x2, 0x3, 0x1, 0x49d7, 0x1, 0x6, 0x7f, 0x2, 0x80, 0x5, 0x5, 0xa012, 0x7, 0x8001, 0x171f, 0xa44, 0x2, 0x8, 0x5, 0x1, 0x8, 0x9a, 0x6, 0x7f, 0x4, 0x2, 0x7, 0xa9b, 0x2, 0x8, 0x4, 0x0, 0x3, 0x4, 0x1, 0x800, 0x9, 0x8, 0xb3, 0x560, 0xef03, 0xfffffffc, 0x9a, 0x4, 0x3, 0x9, 0x30f, 0x4, 0x7, 0x400, 0x105, 0x7, 0x80, 0xffffaa19, 0x8, 0x9, 0xa, 0x1, 0x2, 0xe, 0x6, 0x4, 0x401, 0xff, 0xa5a0, 0x8, 0x10000, 0x4, 0x6, 0x4, 0xffffff4e, 0x1, 0xc, 0x7, 0x6, 0x401, 0x0, 0x0, 0x4, 0x2, 0x546, 0x30000, 0x1, 0x3, 0x46b, 0x1, 0x7, 0x7db, 0x4e3d, 0x6, 0x7fffffff, 0xe0000000, 0x3, 0x6, 0x3, 0x69a1, 0x2, 0x80000001, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x4102aaaa, 0x80000000, 0x5, 0xff, 0x3ff, 0x2, 0x7, 0x9, 0xd03, 0x0, 0xffffffff, 0x2, 0x1, 0x4, 0x1d, 0x4, 0x4, 0x12f2, 0x6, 0x100, 0x5, 0x6, 0x5, 0xffff, 0x4, 0x80000000, 0x3, 0xffff, 0x5, 0x10001, 0x5152, 0x6]})

814.931394ms ago: executing program 0 (id=1193):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002240)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x3d95}])
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01002cbd7000fedbdf250100000000000000024100000010001369623a74756e6c"], 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x8080) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)) (async, rerun: 64)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async, rerun: 64)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x41a002, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x646401, 0x0)
signalfd(r8, &(0x7f0000000040)={[0x5]}, 0x8) (async)
ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x400021000001fd)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10010, r6, 0x15137000) (async)
getresuid(0x0, 0x0, 0x0) (async)
ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, 0x0)
mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r7, 0xb085c000)

758.231159ms ago: executing program 0 (id=1194):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x101)
r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
close(r1)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x20, 0x0, 0x9})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x10001})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000100)=[@enter_looper, @enter_looper], 0xc2d, 0x0, &(0x7f00000020c0)="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"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0xa0, r11, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x31, 0xa8, @random="f5946d6e5a1475eefab724ad865e54706cbf742fc0bf3c07fcbdc51f64b9deea38f83d7efca189885f1d87e40e"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000015)

610.326791ms ago: executing program 2 (id=1195):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = epoll_create1(0x80000)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r3], 0x0)
write$tcp_mem(r2, &(0x7f0000000000)={0x4, 0x20, 0x5809, 0x20, 0x7}, 0x48)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, <r5=>0x0})
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) (async)
epoll_create1(0x80000) (async)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r3], 0x0) (async)
write$tcp_mem(r2, &(0x7f0000000000)={0x4, 0x20, 0x5809, 0x20, 0x7}, 0x48) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
fcntl$getownex(r4, 0x10, &(0x7f0000000080)) (async)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r5) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

552.883586ms ago: executing program 2 (id=1196):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)

551.542425ms ago: executing program 2 (id=1197):
pipe2$9p(&(0x7f00000003c0)={<r0=>0xffffffffffffffff}, 0x80000) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)
readv(r0, 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f000000b540)=[{}], 0x1, &(0x7f000000b5c0)={0x0, 0x3938700}, 0x0, 0x0)
fcntl$getown(r1, 0x9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

551.189986ms ago: executing program 2 (id=1198):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket(0x11, 0xa, 0xffffffd)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x891c, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000840))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

373.62584ms ago: executing program 5 (id=1204):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r3, &(0x7f0000000600)=""/161, 0xa1, 0x40)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
timer_create(0x3, &(0x7f0000000280)={0x0, 0x17, 0x1}, &(0x7f0000000340)=<r4=>0x0)
timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(r4, 0x0, &(0x7f0000000200), &(0x7f0000000240))
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r5, 0xb085c000)
getpeername$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000100)=0x6e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x50, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x3a}, @flat=@binder={0x73622a85, 0xa, 0x2}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @exit_looper], 0x0, 0x0, 0x0})
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4075, 0xfeb}, {&(0x7f0000000780)=""/209, 0xd1}, {&(0x7f00000002c0)=""/37, 0x25}], 0x7, 0x0, 0x3f}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

286.456617ms ago: executing program 3 (id=1205):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r3, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap$binder(&(0x7f0000fea000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x80000000) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

166.714477ms ago: executing program 3 (id=1206):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xb5)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f000016e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x3, 0x2})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000000040))
socket$key(0xf, 0x3, 0x2)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="c592dffb97a42c46", 0x8}, {0x0}], 0x2}}], 0x1, 0x9200000000000000)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1})
preadv2(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/67, 0x43}, {&(0x7f0000001180)=""/208, 0xd0}, {&(0x7f0000001080)=""/39, 0x27}, {&(0x7f00000010c0)=""/76, 0x4c}, {&(0x7f0000001280)=""/201, 0xc9}], 0x6, 0x9, 0xd, 0x9)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r5, 0x0, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
sendto(r6, &(0x7f0000001400)="32b0edcfe2d4404fb40be3e7ca", 0xd, 0x44000, &(0x7f0000001440)=@in={0x2, 0x4e21, @local}, 0x80)

165.685457ms ago: executing program 3 (id=1207):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006)
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="dfff00000000000000"], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60)
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)

143.784089ms ago: executing program 3 (id=1208):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x3, &(0x7f0000000340))
read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0xb0, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x86, 0x80, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "a2f0b889637c033f02ea82730d520b7c", "c2be15535ab7fea1330d7852d0f1517a00b6edc7bdef6b52598be755a7254e8d", "45c6d9a2e095fb5011856d3acefe9f1fcab00ab0de223c8a9c12140822b64532"}}, @dsss={0x3, 0x1, 0x5}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@random='N4@4ED', @device_b, @broadcast}}, @mesh_id={0x72, 0xfffffd7e}, @sec_chan_ofs={0x3e, 0x1}]}]]}, 0xb0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x6}, 0x20)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x8000)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0xe00000, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xffffff01, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
close_range(r0, 0xffffffffffffffff, 0x0)

67.472485ms ago: executing program 3 (id=1209):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e1d, 0x620e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000370000002e0000000000000024000000000000002900000032000000ff0200000000000000000000000000017d"], 0x40}, 0x40000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)
r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private0, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8)
lstat(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x80400, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3cd592b5}}], [{@appraise_type}, {@uid_gt={'uid>', r4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@measure}, {@audit}, {@euid_gt={'euid>', r5}}, {@fowner_lt}, {@uid_lt={'uid<', r6}}]}})

755.37µs ago: executing program 2 (id=1210):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @flat=@weak_handle, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0xda, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x7, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x35, 0xa, 0xca, ':'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf2, 0x4, 0x8, 0x80, "5aea95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x0, '8', ' '}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x95, 0x4, {0x7, 0x25, 0x1, 0x1, 0x5, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x7, "77bd91853c8363"}, @as_header={0x7, 0x24, 0x1, 0x9a, 0x7, 0x1001}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x38f1, 0x2, 0x10, "efaa3a"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x8}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x2, 0x5, "4bd3c8b8059c5eed84"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x8c}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x4, 0x9, {0x7, 0x25, 0x1, 0x80, 0x2, 0x6}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7f, 0x4, 0xb, 0x18, 0xf}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x29, "35715100281aa658a12f88b60085c8cc"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x0, 0xf8, 0x101, 0xa}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "8fb586131595e9665234d91f2ba9723af57ffe2af24986082a8eb388f3a215ba374773ff1c138c48beb677244a3dad10d28b8f9dc08b7e70c6ee724e9a91538a9e8bc7769a253b655129d2830588634bd00da622c8de3b53"}}, {0x78, &(0x7f0000000380)=@string={0x78, 0x3, "ca7bbee6d97df99ff4c07cfe03623b508e06335f31d21ef7c1841454acde72d3192cb7de58f50f6643e023b701ed5397624d4b18efb9db3d114365beaa669223add99f7fe442a05bb9381a245351801d9c43bae29a58e03380ec3ad1f4791adbb137184f87388c67208c047de6971b5fbda4567f7da7"}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "f63fcb89d69eaac66454b77189a87010387c13015a74c611dc9088898344b178f4c858e7c9a4dbc31d4482a0c13475488c91aca0acd0e5a8f3ba0724b9041c4130e836a212fa9aa14637b1943f00103701888e5a89972f565cf8bf3191a1500facf3d3135759d3f20c22c2b90e2464de68f5b586359aabaeaecf2659bffe6202d7b8322ae971bc82afa6fd505ca96c1dfca1c3971503da167e1cf3d544a27aba335b3f7fb1eb305e8e47d3206e870d58"}}, {0xec, &(0x7f00000004c0)=@string={0xec, 0x3, "c09e976389fbe6cc54519256f5fc80c2e486d4a767ff59af945a4fc933ad656b9b55cf19d2b28b819173342f2deb1ff1f9b1d2e4fde1ac9ec140cb08445f99b913fdfc8ddef7e38c8385ff946f758ec1e2fd82f17463ffdfb824201b2bea8bbe3a49d9bd71d738ffe0fd211c2961f140bd69561144fd94bc981a0bba65966cd2c20ae5e29a4c08d0034b3a86bc5ba8e459c85e784f653c960a04445cd641d7d29ab19b270f0321f057e36cf8cd8ded03ec2502d2cb85182fdf0b48120d589b2263ae38d14a5bcd823653d0e777ce378b0fb73a6335e23befa964b436b0d85dd45babb102aed0f09ae3b1"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x816}}, {0xb6, &(0x7f0000000740)=@string={0xb6, 0x3, "70aa7f89bc5efc03e91ee594acecf7d3464f5b4b0c244a3c222b00960b08baa2bb29780108262f56e24d8ac837ebe8ec1558329a2fe75a3ba996cb527f410d713891683caef82c1104b61cd96e22d69577e7b633b3e6cadc5482ee5e276ca73d0182c30cf00e2e1571ab4fa111221ee2ca82bd0e3897dac8bdff1232f237fa22756daa7e8d84774bf169253114a9d3eb00337f711d0ada596c1a27b4285c08c9201dd7bb6688b047dc1fb7795e8b04fa83286017"}}]})

0s ago: executing program 3 (id=1211):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c2100001e00090002000000ffdbdf2508"], 0x218c}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/ip_tables_names\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="0f01f00f20e035100000000f22e066660f38819321d800000f2c249d219700000f20d835200000000f22d8c4c17e1118c4c3d56acf4c0fc7aa8e0e95adb941080000b8b7680000ba000000000f302636a4", 0x51}], 0x1, 0x10, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="0f01f00f20e035100000000f22e066660f38819321d800000f2c249d219700000f20d835200000000f22d8c4c17e1118c4c3d56acf4c0fc7aa8e0e95adb941080000b8b7680000ba000000000f302636a4", 0x51}], 0x1, 0x10, 0x0, 0x0)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000440)={r10, 0x0, r0, 0xffffffff, 0x80000})
ioprio_set$pid(0x2, 0x0, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x1000, 0x1000, 0x8000000, 0x8000000], 0x9, 0x1, 0x5}) (async)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x1000, 0x1000, 0x8000000, 0x8000000], 0x9, 0x1, 0x5})
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async)
r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r11, r5, 0x0, 0x80000000)

kernel console output (not intermixed with test programs):

comm="syz.0.166" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   37.818959][   T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   37.948989][   T45] usb 1-1: device descriptor read/64, error -71
[   38.184369][   T36] audit: type=1400 audit(1756085768.733:254): avc:  denied  { setopt } for  pid=862 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.208978][   T45] usb 1-1: device descriptor read/64, error -71
[   38.248004][   T36] audit: type=1400 audit(1756085768.793:255): avc:  denied  { mounton } for  pid=870 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   38.288656][  T870] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.295802][  T870] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.303578][  T870] bridge_slave_0: entered allmulticast mode
[   38.310495][  T870] bridge_slave_0: entered promiscuous mode
[   38.316976][  T870] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.324313][  T870] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.332608][  T870] bridge_slave_1: entered allmulticast mode
[   38.338798][  T870] bridge_slave_1: entered promiscuous mode
[   38.385004][  T870] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.392100][  T870] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.399397][  T870] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.406423][  T870] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.426937][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.434381][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.444487][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.451555][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.460681][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.467715][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.475251][   T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   38.496330][  T870] veth0_vlan: entered promiscuous mode
[   38.506266][  T870] veth1_macvtap: entered promiscuous mode
[   38.526523][   T36] audit: type=1400 audit(1756085769.073:256): avc:  denied  { mounton } for  pid=870 comm="syz-executor" path="/root/syzkaller.TzfCx1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   38.608967][   T45] usb 1-1: device descriptor read/64, error -71
[   38.700655][   T36] audit: type=1400 audit(1756085769.253:257): avc:  denied  { listen } for  pid=886 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   38.720611][   T36] audit: type=1400 audit(1756085769.253:258): avc:  denied  { mount } for  pid=886 comm="syz.4.174" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   38.742279][   T36] audit: type=1400 audit(1756085769.253:259): avc:  denied  { mounton } for  pid=886 comm="syz.4.174" path="/1/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   38.764890][   T36] audit: type=1400 audit(1756085769.273:260): avc:  denied  { unmount } for  pid=870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   38.839428][  T897] overlayfs: missing 'lowerdir'
[   38.890454][  T578] ums-onetouch 4-1:220.254: USB Mass Storage device detected
[   38.914794][  T910] fuse: Bad value for 'user_id'
[   38.917770][   T45] usb 1-1: device descriptor read/64, error -71
[   38.932249][  T910] fuse: Bad value for 'user_id'
[   38.949148][  T578] usb 4-1: USB disconnect, device number 5
[   38.981300][  T910] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -36
[   39.039187][   T45] usb usb1-port1: attempt power cycle
[   39.379039][   T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   39.400078][   T45] usb 1-1: device descriptor read/8, error -71
[   39.409078][  T578] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   39.489015][  T333] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   39.530014][   T45] usb 1-1: device descriptor read/8, error -71
[   39.559993][  T578] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[   39.568158][  T578] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   39.578296][  T578] usb 4-1: config 0 interface 0 has no altsetting 0
[   39.586527][  T578] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   39.595730][  T578] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   39.603953][  T578] usb 4-1: Product: syz
[   39.608134][  T578] usb 4-1: Manufacturer: syz
[   39.613537][  T578] usb 4-1: SerialNumber: syz
[   39.618738][  T578] usb 4-1: config 0 descriptor??
[   39.624488][  T578] hub 4-1:0.0: bad descriptor, ignoring hub
[   39.630446][  T578] hub 4-1:0.0: probe with driver hub failed with error -5
[   39.637994][  T578] usb 4-1: selecting invalid altsetting 0
[   39.645094][  T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   39.656493][  T333] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   39.666929][  T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.675538][  T333] usb 5-1: config 0 descriptor??
[   39.681668][  T929] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   39.768994][   T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   39.790023][   T45] usb 1-1: device descriptor read/8, error -71
[   39.919966][   T45] usb 1-1: device descriptor read/8, error -71
[   39.939128][  T578] usb 4-1: USB disconnect, device number 6
[   40.029053][   T45] usb usb1-port1: unable to enumerate USB device
[   40.094430][  T333] hid-generic 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[   40.115509][  T333] usb 5-1: USB disconnect, device number 2
[   40.162993][  T935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[   40.532309][  T948] binder: Bad value for 'max'
[   40.598826][  T955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   40.605941][  T578] rust_binder: 949: removing orphan mapping 0:24
[   40.878946][  T578] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   40.969185][   T64] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   41.028945][  T578] usb 4-1: Using ep0 maxpacket: 8
[   41.036150][  T578] usb 4-1: unable to get BOS descriptor or descriptor too short
[   41.046608][  T578] usb 4-1: unable to read config index 0 descriptor/start: -71
[   41.054638][  T578] usb 4-1: can't read configurations, error -71
[   41.118947][   T64] usb 1-1: Using ep0 maxpacket: 16
[   41.125718][   T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.135922][   T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.146290][   T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   41.155387][   T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.163403][   T64] usb 1-1: Product: syz
[   41.167557][   T64] usb 1-1: Manufacturer: syz
[   41.172187][   T64] usb 1-1: SerialNumber: syz
[   41.438975][  T454] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   41.588923][  T454] usb 5-1: Using ep0 maxpacket: 8
[   41.595228][  T454] usb 5-1: unable to get BOS descriptor or descriptor too short
[   41.603747][  T454] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0
[   41.613541][  T454] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0
[   41.623312][  T454] usb 5-1: config 8 interface 0 has no altsetting 0
[   41.631714][  T454] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   41.640544][  T971] FAT-fs (rnullb0): bogus number of reserved sectors
[   41.640900][  T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.647872][  T971] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   41.655600][  T454] usb 5-1: Product: syz
[   41.666545][  T454] usb 5-1: Manufacturer: syz
[   41.671248][  T454] usb 5-1: SerialNumber: syz
[   41.883641][  T969] FAT-fs (rnullb0): bogus number of reserved sectors
[   41.893305][  T969] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   41.945385][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   41.945416][   T36] audit: type=1326 audit(1756085772.493:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   41.974648][   T64] usb 1-1: cannot find UAC_HEADER
[   41.979738][   T36] audit: type=1326 audit(1756085772.493:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   41.981402][   T64] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   42.003537][   T36] audit: type=1326 audit(1756085772.493:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.016217][   T64] usb 1-1: USB disconnect, device number 14
[   42.035519][   T36] audit: type=1326 audit(1756085772.493:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.049525][  T514] udevd[514]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.071599][   T36] audit: type=1326 audit(1756085772.493:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.081795][  T454] usb 5-1: selecting invalid altsetting 0
[   42.103455][   T36] audit: type=1326 audit(1756085772.493:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.116390][  T454] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12
[   42.131767][  T578] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   42.153246][   T36] audit: type=1326 audit(1756085772.493:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.154206][  T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.176586][   T36] audit: type=1326 audit(1756085772.493:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.194662][  T454] usb 5-1: USB disconnect, device number 3
[   42.215646][   T36] audit: type=1326 audit(1756085772.493:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.245462][   T36] audit: type=1326 audit(1756085772.493:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x7fc00000
[   42.318939][  T578] usb 4-1: Using ep0 maxpacket: 16
[   42.325137][  T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.336081][  T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.346239][  T578] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   42.355320][  T578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.364440][  T578] usb 4-1: config 0 descriptor??
[   42.775436][  T578] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0006/input/input7
[   42.787670][  T578] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0006/input/input8
[   42.818525][  T578] kye 0003:0458:5012.0006: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0
[   42.976766][  T578] usb 4-1: USB disconnect, device number 8
[   43.348967][  T578] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   43.508961][  T578] usb 4-1: Using ep0 maxpacket: 32
[   43.519185][  T578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.529933][  T578] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 12
[   43.544209][  T578] usb 4-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.58
[   43.553790][  T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.561879][  T578] usb 4-1: Product: syz
[   43.566159][  T578] usb 4-1: Manufacturer: syz
[   43.570771][  T578] usb 4-1: SerialNumber: syz
[   43.576749][  T578] usb 4-1: config 0 descriptor??
[   43.749002][  T454] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   43.784221][ T1007] binder: Bad value for 'defcontext'
[   43.793350][  T578] ums-cypress 4-1:0.0: USB Mass Storage device detected
[   43.841453][  T578] usb 4-1: USB disconnect, device number 9
[   43.898989][  T454] usb 5-1: Using ep0 maxpacket: 8
[   43.905517][  T454] usb 5-1: unable to get BOS descriptor or descriptor too short
[   43.914091][  T454] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[   43.922223][  T454] usb 5-1: config 0 has no interface number 0
[   43.928302][  T454] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   43.939328][  T454] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024
[   43.950564][  T454] usb 5-1: config 0 interface 88 has no altsetting 0
[   43.960104][  T454] usb 5-1: string descriptor 0 read error: -22
[   43.966339][  T454] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   43.975648][  T454] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   43.984712][  T454] usb 5-1: config 0 descriptor??
[   43.991993][  T454] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input10
[   44.195191][  T435] usb 5-1: USB disconnect, device number 4
[   44.278998][  T454] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[   44.429380][  T454] usb 1-1: no configurations
[   44.433976][  T454] usb 1-1: can't read configurations, error -22
[   44.569019][  T454] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[   44.569122][  T578] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   44.639713][ T1046] incfs: Error accessing: ./file0.
[   44.644945][ T1046] incfs: mount failed -2
[   44.663829][ T1052] overlayfs: failed to clone upperpath
[   44.686787][ T1057] overlayfs: failed to clone upperpath
[   44.719290][  T454] usb 1-1: no configurations
[   44.728927][  T578] usb 4-1: Using ep0 maxpacket: 16
[   44.728945][  T454] usb 1-1: can't read configurations, error -22
[   44.737697][  T578] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   44.742509][  T454] usb usb1-port1: attempt power cycle
[   44.762544][  T578] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.773433][  T578] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   44.784519][  T578] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   44.796190][  T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.804467][  T578] usb 4-1: Product: syz
[   44.810104][  T578] usb 4-1: Manufacturer: syz
[   44.815123][  T578] usb 4-1: SerialNumber: syz
[   45.008939][  T435] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   45.098948][  T454] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[   45.119743][  T454] usb 1-1: no configurations
[   45.124415][  T454] usb 1-1: can't read configurations, error -22
[   45.138992][  T435] usb 5-1: device descriptor read/64, error -71
[   45.223453][  T578] usb 4-1: 0:2 : does not exist
[   45.230939][  T578] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[   45.243801][  T578] usb 4-1: USB disconnect, device number 10
[   45.254285][  T982] udevd[982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   45.270840][  T454] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[   45.299813][  T454] usb 1-1: no configurations
[   45.304636][  T454] usb 1-1: can't read configurations, error -22
[   45.311036][  T454] usb usb1-port1: unable to enumerate USB device
[   45.379016][  T435] usb 5-1: device descriptor read/64, error -71
[   45.618948][  T435] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   45.748963][  T435] usb 5-1: device descriptor read/64, error -71
[   45.814881][ T1083] fuse: Unknown parameter '��èl'
[   45.821216][ T1083] rust_binder: Fixups oob 156 120 160 164
[   45.821233][ T1083] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[   45.827035][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.835419][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[   45.889940][ T1098] netlink: 'syz.3.244': attribute type 1 has an invalid length.
[   45.909705][ T1098] __vm_enough_memory: pid: 1098, comm: syz.3.244, bytes: 18014402804453376 not enough memory for the allocation
[   45.983334][ T1102] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   45.988987][  T435] usb 5-1: device descriptor read/64, error -71
[   46.109035][  T435] usb usb5-port1: attempt power cycle
[   46.171076][ T1107] fuse: Unknown parameter 'f�'
[   46.193789][ T1113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1113 comm=syz.2.249
[   46.218973][  T454] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   46.370152][  T454] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[   46.380161][  T454] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   46.393371][  T454] usb 4-1: config 1 interface 0 has no altsetting 0
[   46.401633][  T454] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   46.410820][  T454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.419152][  T454] usb 4-1: Product: Ь
[   46.423231][  T454] usb 4-1: Manufacturer: з
[   46.427728][  T454] usb 4-1: SerialNumber: syz
[   46.433362][ T1102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   46.440797][ T1102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   46.458968][  T435] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   46.480142][  T435] usb 5-1: device descriptor read/8, error -71
[   46.609910][  T435] usb 5-1: device descriptor read/8, error -71
[   46.849019][  T435] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   46.869934][  T435] usb 5-1: device descriptor read/8, error -71
[   46.999914][  T435] usb 5-1: device descriptor read/8, error -71
[   47.109094][  T435] usb usb5-port1: unable to enumerate USB device
[   47.111003][ T1132] 9pnet_fd: p9_fd_create_unix (1132): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   47.145607][ T1132] rust_binder: Write failure EFAULT in pid:126
[   47.185237][   T36] kauditd_printk_skb: 2653 callbacks suppressed
[   47.185255][   T36] audit: type=1400 audit(1756085777.733:2929): avc:  denied  { write } for  pid=1153 comm="syz.0.263" path="socket:[8372]" dev="sockfs" ino=8372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   47.220900][   T36] audit: type=1400 audit(1756085777.733:2930): avc:  denied  { ioctl } for  pid=1153 comm="syz.0.263" path="socket:[8372]" dev="sockfs" ino=8372 ioctlcmd=0xaee0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   47.468948][  T465] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[   47.598968][  T465] usb 1-1: device descriptor read/64, error -71
[   47.691837][ T1157] overlayfs: failed to clone upperpath
[   47.838969][  T465] usb 1-1: device descriptor read/64, error -71
[   48.070948][   T36] audit: type=1400 audit(1756085778.631:2931): avc:  denied  { create } for  pid=1199 comm="syz.4.278" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   48.078945][  T465] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[   48.144159][   T36] audit: type=1400 audit(1756085778.701:2932): avc:  denied  { mounton } for  pid=1199 comm="syz.4.278" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   48.238950][  T465] usb 1-1: device descriptor read/64, error -71
[   48.363069][   T36] audit: type=1326 audit(1756085778.921:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.2.284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c958ebe9 code=0x0
[   48.478981][  T465] usb 1-1: device descriptor read/64, error -71
[   48.589051][  T465] usb usb1-port1: attempt power cycle
[   48.907413][   T36] audit: type=1400 audit(1756085779.461:2934): avc:  denied  { unmount } for  pid=870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   48.942478][  T465] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[   48.955679][  T454] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8
[   48.968830][  T454] usb 4-1: USB disconnect, device number 11
[   48.975903][  T454] usblp0: removed
[   48.981559][  T465] usb 1-1: device descriptor read/8, error -71
[   49.109970][  T465] usb 1-1: device descriptor read/8, error -71
[   49.204837][   T36] audit: type=1400 audit(1756085779.761:2935): avc:  denied  { accept } for  pid=1222 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   49.253130][   T36] audit: type=1400 audit(1756085779.811:2936): avc:  denied  { create } for  pid=1232 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   49.373237][  T465] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[   49.399976][  T465] usb 1-1: device descriptor read/8, error -71
[   49.540758][  T465] usb 1-1: device descriptor read/8, error -71
[   49.649091][  T465] usb usb1-port1: unable to enumerate USB device
[   49.759368][ T1237] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   49.811309][ T1243] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   50.028963][  T333] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   50.083606][   T36] audit: type=1326 audit(1756085780.641:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c958ebe9 code=0x7fc00000
[   50.119114][  T465] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   50.188931][  T333] usb 4-1: Using ep0 maxpacket: 32
[   50.195778][  T333] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.207155][  T333] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.217403][  T333] usb 4-1: config 0 interface 0 has no altsetting 0
[   50.218187][ T1252] rust_binder: 141: no such ref 1
[   50.224925][  T333] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[   50.230687][ T1252] rust_binder: 141: no such ref 0
[   50.239734][  T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.245297][ T1252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[   50.258932][  T465] usb 5-1: device descriptor read/64, error -71
[   50.262970][  T333] usb 4-1: config 0 descriptor??
[   50.288846][   T36] audit: type=1400 audit(2000000000.000:2938): avc:  denied  { write } for  pid=1257 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   50.293298][ T1260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   50.323880][ T1260] pim6reg1: entered promiscuous mode
[   50.329687][ T1260] pim6reg1: entered allmulticast mode
[   50.389799][ T1282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.400761][ T1282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.412225][ T1282] fuse: Unknown parameter '�fh��!�E�M����O�Y����9�J�y
[   50.412225][ T1282] '
[   50.450836][ T1291] capability: warning: `syz.2.308' uses deprecated v2 capabilities in a way that may be insecure
[   50.498946][  T465] usb 5-1: device descriptor read/64, error -71
[   50.628940][  T578] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   50.738982][  T465] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   50.758935][  T578] usb 1-1: device descriptor read/64, error -71
[   50.868943][  T465] usb 5-1: device descriptor read/64, error -71
[   50.988099][  T333] usbhid 4-1:0.0: can't add hid device: -71
[   50.994735][  T333] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   51.002577][ T1298] sit0: entered promiscuous mode
[   51.004764][  T578] usb 1-1: device descriptor read/64, error -71
[   51.010493][ T1298] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   51.016583][  T333] usb 4-1: USB disconnect, device number 12
[   51.033027][ T1298] netlink: 1 bytes leftover after parsing attributes in process `syz.2.310'.
[   51.043031][ T1300] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   51.050757][ T1300] netlink: 1 bytes leftover after parsing attributes in process `syz.2.310'.
[   51.119038][  T465] usb 5-1: device descriptor read/64, error -71
[   51.210302][ T1336] overlayfs: lower data-only dirs require metacopy support.
[   51.229046][  T465] usb usb5-port1: attempt power cycle
[   51.258950][  T578] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   51.267617][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[   51.388980][  T578] usb 1-1: device descriptor read/64, error -71
[   51.568944][  T465] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   51.589968][  T465] usb 5-1: device descriptor read/8, error -71
[   51.628981][  T578] usb 1-1: device descriptor read/64, error -71
[   51.720048][  T465] usb 5-1: device descriptor read/8, error -71
[   51.739021][  T578] usb usb1-port1: attempt power cycle
[   51.958958][  T465] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   51.979959][  T465] usb 5-1: device descriptor read/8, error -71
[   52.078957][  T578] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   52.100083][  T578] usb 1-1: device descriptor read/8, error -71
[   52.110098][  T465] usb 5-1: device descriptor read/8, error -71
[   52.219084][  T465] usb usb5-port1: unable to enumerate USB device
[   52.230206][  T578] usb 1-1: device descriptor read/8, error -71
[   52.468935][  T578] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   52.489984][  T578] usb 1-1: device descriptor read/8, error -71
[   52.620071][  T578] usb 1-1: device descriptor read/8, error -71
[   52.729360][  T578] usb usb1-port1: unable to enumerate USB device
[   52.779907][ T1362] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   53.058974][   T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   53.188944][   T31] usb 4-1: device descriptor read/64, error -71
[   53.428932][   T31] usb 4-1: device descriptor read/64, error -71
[   53.569449][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   53.569460][   T36] audit: type=1400 audit(2000000003.279:2944): avc:  denied  { ioctl } for  pid=1374 comm="syz.0.338" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   53.657819][ T1380] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   53.664990][ T1380] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97)
[   53.665007][ T1380] rust_binder: Error while translating object.
[   53.675471][   T31] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   53.675783][ T1380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.689402][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   53.700420][ T1380] rust_binder: Write failure EINVAL in pid:154
[   53.720171][   T36] audit: type=1400 audit(2000000003.429:2945): avc:  denied  { name_bind } for  pid=1381 comm="syz.4.341" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   53.720522][ T1382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   53.747057][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:102
[   53.769498][ T1384] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use)
[   53.794927][   T36] audit: type=1400 audit(2000000003.499:2946): avc:  denied  { read } for  pid=1383 comm="syz.4.342" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   53.817644][   T36] audit: type=1400 audit(2000000003.499:2947): avc:  denied  { open } for  pid=1383 comm="syz.4.342" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   53.848924][   T31] usb 4-1: device descriptor read/64, error -71
[   53.865208][   T36] audit: type=1400 audit(2000000003.569:2948): avc:  denied  { write } for  pid=1385 comm="syz.4.343" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   53.868121][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'.
[   53.902038][ T1386] binder: Unknown parameter '/dev/ptp0'
[   54.075966][   T36] audit: type=1400 audit(2000000003.779:2949): avc:  denied  { connect } for  pid=1387 comm="syz.4.344" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.096603][   T31] usb 4-1: device descriptor read/64, error -71
[   54.219818][   T31] usb usb4-port1: attempt power cycle
[   54.323276][ T1398] SELinux:  Context /usr/sbin/cups-browsed is not valid (left unmapped).
[   54.332074][   T36] audit: type=1400 audit(2000000004.039:2950): avc:  denied  { relabelto } for  pid=1397 comm="syz.2.346" name="cgroup" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="/usr/sbin/cups-browsed"
[   54.358167][   T36] audit: type=1400 audit(2000000004.039:2951): avc:  denied  { associate } for  pid=1397 comm="syz.2.346" name="cgroup" dev="tmpfs" ino=1113 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/usr/sbin/cups-browsed"
[   54.384754][   T36] audit: type=1400 audit(2000000004.069:2952): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="/usr/sbin/cups-browsed"
[   54.411215][   T36] audit: type=1400 audit(2000000004.099:2953): avc:  denied  { map } for  pid=1404 comm="syz.2.348" path="socket:[9147]" dev="sockfs" ino=9147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.460040][ T1412] rust_binder: 159: no such ref 2
[   54.558943][   T31] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[   54.589972][   T31] usb 4-1: device descriptor read/8, error -71
[   54.719888][   T31] usb 4-1: device descriptor read/8, error -71
[   54.789479][ T1433] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1433 comm=syz.2.357
[   54.811486][ T1435] overlayfs: failed to clone upperpath
[   54.841743][ T1443] rust_binder: Write failure EFAULT in pid:117
[   54.841800][ T1443] rust_binder: Write failure EFAULT in pid:117
[   54.865450][ T1449] SELinux: security_context_str_to_sid () failed with errno=-22
[   54.958936][   T31] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[   54.979957][   T31] usb 4-1: device descriptor read/8, error -71
[   55.110037][   T31] usb 4-1: device descriptor read/8, error -71
[   55.148965][  T465] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[   55.219082][   T31] usb usb4-port1: unable to enumerate USB device
[   55.299976][  T465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   55.304686][ T1462] vlan0: entered promiscuous mode
[   55.312441][  T465] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.316110][ T1462] vlan0: entered allmulticast mode
[   55.328790][  T465] usb 5-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00
[   55.334203][ T1462] veth0_vlan: entered allmulticast mode
[   55.343149][  T465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.366075][  T465] usb 5-1: config 0 descriptor??
[   55.371571][ T1460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   55.417301][ T1472] overlayfs: failed to clone upperpath
[   55.578832][ T1498] FAT-fs (rnullb0): bogus number of reserved sectors
[   55.585659][ T1498] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   55.621076][ T1501] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   55.678288][ T1508] rust_binder: 175: no such ref 2
[   55.787951][  T465] wacom 0003:056A:00B9.0007: Unknown device_type for 'HID 056a:00b9'. Assuming pen.
[   55.798061][  T465] wacom 0003:056A:00B9.0007: hidraw0: USB HID v1.01 Device [HID 056a:00b9] on usb-dummy_hcd.4-1/input0
[   55.810089][  T465] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B9.0007/input/input11
[   55.936701][ T1531] tipc: Started in network mode
[   55.941683][ T1531] tipc: Node identity ac14140f, cluster identity 4711
[   55.948590][ T1531] tipc: New replicast peer: 255.255.255.255
[   55.954871][ T1531] tipc: Enabled bearer <udp:syz2>, priority 10
[   56.004173][  T578] usb 5-1: USB disconnect, device number 13
[   56.203267][ T1460] rust_binder: Write failure EFAULT in pid:130
[   56.248397][ T1569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1569 comm=syz.3.402
[   56.356103][ T1575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   56.364923][ T1575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   56.379014][   T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   56.528927][   T31] usb 1-1: Using ep0 maxpacket: 16
[   56.535196][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.546134][   T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[   56.556004][   T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   56.565676][   T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   56.579957][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.589164][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   56.597136][   T31] usb 1-1: SerialNumber: syz
[   56.602591][ T1552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.609793][ T1552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.617348][   T31] hub 1-1:1.0: bad descriptor, ignoring hub
[   56.623300][   T31] hub 1-1:1.0: probe with driver hub failed with error -5
[   56.817956][ T1552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.826471][ T1552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.834755][ T1552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.841954][ T1552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   57.044240][ T1584] x_tables: duplicate entry at hook 2
[   57.068986][   T10] tipc: Node number set to 2886997007
[   57.100298][ T1588] /dev/sr0: Can't lookup blockdev
[   57.251187][   T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[   57.261487][ T1592] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[   57.609541][ T1599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=808464454 (6467715632 ns) > initial count (6467715456 ns). Using initial count to start timer.
[   57.978944][  T434] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   57.998619][ T1614] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   58.005886][ T1614] rust_binder: Write failure EINVAL in pid:191
[   58.016647][ T1616] tipc: Started in network mode
[   58.027686][ T1616] tipc: Node identity 7f000001, cluster identity 4711
[   58.034836][ T1616] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.042260][ T1616] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   58.050599][ T1616] tipc: Enabled bearer <udp:syz0>, priority 10
[   58.140005][  T434] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[   58.150355][  T434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.160282][  T434] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   58.170537][  T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   58.178568][  T434] usb 5-1: SerialNumber: syz
[   58.348975][   T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   58.386126][  T434] usb 5-1: 0:2 : does not exist
[   58.391195][  T434] usb 5-1: unit 5 not found!
[   58.399732][  T434] usb 5-1: USB disconnect, device number 14
[   58.500183][   T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.510437][   T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.520116][   T64] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   58.529203][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   58.537211][   T64] usb 4-1: SerialNumber: syz
[   58.745144][   T64] usb 4-1: 0:2 : does not exist
[   58.750716][   T64] usb 4-1: unit 14 not found!
[   58.757268][   T64] usb 4-1: USB disconnect, device number 17
[   58.949667][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   58.949683][   T36] audit: type=1326 audit(2000000008.659:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1622 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c958ebe9 code=0x7fc00000
[   59.026991][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'.
[   59.146223][   T36] audit: type=1400 audit(2000000008.849:2971): avc:  denied  { create } for  pid=1643 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   59.166060][   T10] tipc: Node number set to 2130706433
[   59.168928][   T64] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   59.239009][  T434] usb 1-1: USB disconnect, device number 27
[   59.331343][   T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.345144][   T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.355194][   T64] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.364617][ T1669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[   59.364681][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.382075][   T64] usb 5-1: SerialNumber: syz
[   59.401424][   T36] audit: type=1400 audit(2000000009.109:2972): avc:  denied  { shutdown } for  pid=1670 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.589891][   T64] usb 5-1: 0:2 : does not exist
[   59.594919][   T64] usb 5-1: unit 14 not found!
[   59.601907][   T64] usb 5-1: USB disconnect, device number 15
[   59.610145][  T982] udevd[982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.947179][   T36] audit: type=1400 audit(2000000009.649:2973): avc:  denied  { map } for  pid=1672 comm="syz.2.438" path="socket:[12118]" dev="sockfs" ino=12118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   60.176184][ T1688] rust_binder: Write failure EFAULT in pid:202
[   60.238012][ T1690] rust_binder: Error in use_page_slow: ESRCH
[   60.244269][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   60.257860][ T1690] rust_binder: use_range failure ESRCH
[   60.257886][ T1690] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   60.263620][ T1690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   60.271563][ T1690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:146
[   60.361114][ T1698] overlayfs: failed to resolve './file0': -2
[   60.408972][   T10] usb 1-1: device descriptor read/64, error -71
[   60.482849][  T578] rust_binder: 1699: removing orphan mapping 0:8
[   60.501848][ T1705] binder: Bad value for 'stats'
[   60.519517][ T1710] 9pnet_fd: Insufficient options for proto=fd
[   60.658968][   T10] usb 1-1: device descriptor read/64, error -71
[   60.759001][   T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   60.777249][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208
[   60.786799][ T1725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'.
[   60.908944][   T31] usb 5-1: Using ep0 maxpacket: 16
[   60.908949][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   60.914600][   T31] usb 5-1: too many configurations: 97, using maximum allowed: 8
[   60.930368][   T31] usb 5-1: config index 0 descriptor too short (expected 65535, got 18)
[   60.938791][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   60.947687][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   60.958231][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   60.968341][   T31] usb 5-1: config index 1 descriptor too short (expected 65535, got 18)
[   60.976733][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   60.985676][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   60.996558][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.008058][   T31] usb 5-1: config index 2 descriptor too short (expected 65535, got 18)
[   61.016566][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.026853][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.037298][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.047303][   T31] usb 5-1: config index 3 descriptor too short (expected 65535, got 18)
[   61.055840][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.059198][   T10] usb 1-1: device descriptor read/64, error -71
[   61.064914][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.081696][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.091825][   T31] usb 5-1: config index 4 descriptor too short (expected 65535, got 18)
[   61.100216][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.109185][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.119630][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.129749][   T31] usb 5-1: config index 5 descriptor too short (expected 65535, got 18)
[   61.138099][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.147006][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.157586][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.167624][   T31] usb 5-1: config index 6 descriptor too short (expected 65535, got 18)
[   61.176045][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.185033][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.195501][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.205665][   T31] usb 5-1: config index 7 descriptor too short (expected 65535, got 18)
[   61.214235][   T31] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   61.223389][   T31] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[   61.234099][   T31] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   61.276088][   T31] usb 5-1: string descriptor 0 read error: -71
[   61.288954][   T31] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[   61.300432][   T31] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[   61.310039][   T31] usb 5-1: rejected 8 configurations due to insufficient available bus power
[   61.318967][   T31] usb 5-1: no configuration chosen from 8 choices
[   61.319237][   T10] usb 1-1: device descriptor read/64, error -71
[   61.333940][   T31] usb 5-1: USB disconnect, device number 16
[   61.448489][ T1754] netlink: 'syz.2.467': attribute type 16 has an invalid length.
[   61.456680][   T10] usb usb1-port1: attempt power cycle
[   61.744119][ T1772] rust_binder: Got transaction with invalid offset.
[   61.744187][ T1772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   61.751101][ T1772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219
[   61.761172][   T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   61.798947][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   61.819909][   T10] usb 1-1: device descriptor read/8, error -71
[   61.909008][   T31] usb 5-1: device descriptor read/64, error -71
[   61.950143][   T10] usb 1-1: device descriptor read/8, error -71
[   61.996986][ T1782] overlayfs: failed to clone upperpath
[   62.027529][ T1785] fuse: Bad value for 'fd'
[   62.032373][ T1784] 2N: renamed from vcan0 (while UP)
[   62.078946][   T64] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   62.148945][   T31] usb 5-1: device descriptor read/64, error -71
[   62.189001][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   62.222321][   T10] usb 1-1: device descriptor read/8, error -71
[   62.230237][   T64] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[   62.239195][   T64] usb 4-1: config 0 has no interface number 0
[   62.245993][   T64] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.257941][   T64] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.268905][   T64] usb 4-1: config 0 interface 85 has no altsetting 0
[   62.275722][   T64] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[   62.285007][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.293983][   T64] usb 4-1: config 0 descriptor??
[   62.342071][ T1834] netlink: 'syz.2.496': attribute type 4 has an invalid length.
[   62.349794][ T1834] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.496'.
[   62.359809][ T1834] fuseblk: Bad value for 'blksize'
[   62.370226][   T10] usb 1-1: device descriptor read/8, error -71
[   62.385636][ T1839] overlayfs: failed to clone upperpath
[   62.398953][   T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   62.403284][ T1842] bridge0: port 3(veth1_macvtap) entered blocking state
[   62.414016][ T1842] bridge0: port 3(veth1_macvtap) entered disabled state
[   62.421062][ T1842] veth1_macvtap: entered allmulticast mode
[   62.427335][ T1842] veth1_macvtap: left allmulticast mode
[   62.489086][   T10] usb usb1-port1: unable to enumerate USB device
[   62.528959][   T31] usb 5-1: device descriptor read/64, error -71
[   62.704299][   T64] hid-led 0003:1D34:0004.0008: unknown main item tag 0x1
[   62.768976][   T31] usb 5-1: device descriptor read/64, error -71
[   62.879063][   T31] usb usb5-port1: attempt power cycle
[   62.906741][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.915605][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.923770][   T64] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -71
[   62.933960][   T64] usb 4-1: USB disconnect, device number 18
[   62.963336][ T1850] netlink: 5 bytes leftover after parsing attributes in process `syz.2.501'.
[   62.989982][   T36] audit: type=1400 audit(2000000012.708:2974): avc:  denied  { map } for  pid=1853 comm="syz.2.503" path="pipe:[12517]" dev="pipefs" ino=12517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   63.218975][   T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   63.239950][   T31] usb 5-1: device descriptor read/8, error -71
[   63.370016][   T31] usb 5-1: device descriptor read/8, error -71
[   63.550391][ T1877] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.550496][ T1876] rust_binder: Read failure Err(EAGAIN) in pid:233
[   63.569362][ T1876] vlan0: entered promiscuous mode
[   63.581525][ T1876] vlan0: entered allmulticast mode
[   63.586739][ T1876] veth0_vlan: entered allmulticast mode
[   63.593885][ T1877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233
[   63.609755][   T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   63.641178][   T31] usb 5-1: device descriptor read/8, error -71
[   63.711344][   T36] audit: type=1400 audit(2000000013.428:2975): avc:  denied  { ioctl } for  pid=1887 comm="syz.3.515" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   63.749267][ T1888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=1888 comm=syz.3.515
[   63.780061][   T31] usb 5-1: device descriptor read/8, error -71
[   63.889098][   T31] usb usb5-port1: unable to enumerate USB device
[   64.024356][   T36] audit: type=1400 audit(2000000013.738:2976): avc:  denied  { setopt } for  pid=1891 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.049880][ T1897] fuseblk: Unknown parameter 'deS�"��6�fault_permissons'
[   64.078187][   T36] audit: type=1400 audit(2000000013.788:2977): avc:  denied  { mount } for  pid=1903 comm="syz.2.521" name="/" dev="configfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   64.101160][   T36] audit: type=1400 audit(2000000013.818:2978): avc:  denied  { search } for  pid=1903 comm="syz.2.521" name="/" dev="configfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.199950][ T1909] netlink: 168 bytes leftover after parsing attributes in process `syz.2.522'.
[   64.299835][ T1911] rust_binder: Error while translating object.
[   64.299892][ T1911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   64.316529][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:244
[   64.497012][   T36] audit: type=1326 audit(2000000014.208:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1914 comm="syz.0.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f512ed8ebe9 code=0x0
[   64.583432][   T36] audit: type=1400 audit(2000000014.298:2980): avc:  denied  { create } for  pid=1916 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   64.618985][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   64.748949][   T10] usb 4-1: device descriptor read/64, error -71
[   64.988925][   T10] usb 4-1: device descriptor read/64, error -71
[   65.038931][  T434] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   65.188914][  T434] usb 5-1: Using ep0 maxpacket: 8
[   65.195189][  T434] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.205891][  T434] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   65.220129][  T434] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   65.229631][  T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   65.237888][  T434] usb 5-1: SerialNumber: syz
[   65.242713][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   65.252121][  T434] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[   65.260492][  T434] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[   65.267091][  T434] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[   65.398949][   T10] usb 4-1: device descriptor read/64, error -71
[   65.487102][ T1937] rust_binder: Error while translating object.
[   65.487140][ T1937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   65.493299][   T36] audit: type=1400 audit(2000000015.208:2981): avc:  denied  { execute } for  pid=1930 comm="syz.4.532" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   65.493681][ T1937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263
[   65.503931][  T578] usb 5-1: USB disconnect, device number 21
[   65.542984][   T36] audit: type=1400 audit(2000000015.238:2982): avc:  denied  { mount } for  pid=1935 comm="syz.2.535" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   65.556733][ T1940] 9pnet_fd: p9_fd_create_unix (1940): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   65.565529][   T36] audit: type=1400 audit(2000000015.238:2983): avc:  denied  { remount } for  pid=1935 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.616498][ T1942] __vm_enough_memory: pid: 1942, comm: syz.0.537, bytes: 18014402804453376 not enough memory for the allocation
[   65.646646][   T36] audit: type=1400 audit(2000000015.358:2984): avc:  denied  { bind } for  pid=1949 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.666170][   T36] audit: type=1400 audit(2000000015.358:2985): avc:  denied  { listen } for  pid=1949 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.759035][   T10] usb 4-1: device descriptor read/64, error -71
[   65.869121][   T10] usb usb4-port1: attempt power cycle
[   65.888977][   T31] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[   66.040123][   T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[   66.049359][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.061959][   T31] usb 1-1: config 0 descriptor??
[   66.097415][ T1961] rust_binder: Error in use_page_slow: ESRCH
[   66.097434][ T1961] rust_binder: use_range failure ESRCH
[   66.103656][ T1961] rust_binder: Failed to allocate buffer. len:152, is_oneway:true
[   66.110086][ T1961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   66.117991][ T1961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192
[   66.184060][ T1971] pim6reg1: entered promiscuous mode
[   66.199490][ T1971] pim6reg1: entered allmulticast mode
[   66.208952][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   66.240729][   T10] usb 4-1: device descriptor read/8, error -71
[   66.342744][ T1986] 9pnet_fd: Insufficient options for proto=fd
[   66.370139][   T10] usb 4-1: device descriptor read/8, error -71
[   66.471560][   T31] lenovo 0003:17EF:6067.0009: unknown main item tag 0x0
[   66.478577][   T31] lenovo 0003:17EF:6067.0009: item fetching failed at offset 3/5
[   66.486882][   T31] lenovo 0003:17EF:6067.0009: hid_parse failed
[   66.493109][   T31] lenovo 0003:17EF:6067.0009: probe with driver lenovo failed with error -22
[   66.608972][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   66.630020][   T10] usb 4-1: device descriptor read/8, error -71
[   66.674790][ T1952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.683356][ T1952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.692664][ T1952] input: syz0 as /devices/virtual/input/input15
[   66.705662][  T578] usb 1-1: USB disconnect, device number 32
[   66.760181][   T10] usb 4-1: device descriptor read/8, error -71
[   66.869198][   T10] usb usb4-port1: unable to enumerate USB device
[   66.978993][ T2006] overlayfs: failed to clone upperpath
[   67.178949][   T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   67.331510][   T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   67.343660][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   67.355266][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   67.356246][ T2015] binder: Unknown parameter 'context�'
[   67.366608][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   67.391869][   T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   67.402610][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.411271][   T31] usb 5-1: config 0 descriptor??
[   67.416529][ T1994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   67.457227][ T2022] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[   67.457257][ T2022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   67.466475][ T2022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:248
[   67.495547][ T2030] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   67.537061][ T2033] exFAT-fs (rnullb0): invalid boot record signature
[   67.544058][ T2033] exFAT-fs (rnullb0): failed to read boot sector
[   67.550764][ T2033] exFAT-fs (rnullb0): failed to recognize exfat type
[   67.615746][ T2047] overlayfs: failed to clone lowerpath
[   67.642585][ T2055] tmpfs: Cannot retroactively limit inodes
[   67.671684][ T2062] overlayfs: failed to clone upperpath
[   67.699286][ T2067] SELinux:  Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped).
[   67.828065][   T31] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[   67.845421][   T31] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   67.988944][   T64] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   68.102910][ T1994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940630386 (15762521544 ns) > initial count (6051692324 ns). Using initial count to start timer.
[   68.150909][   T31] usb 5-1: USB disconnect, device number 22
[   68.159835][   T64] usb 1-1: Using ep0 maxpacket: 32
[   68.172413][   T64] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   68.183310][   T64] usb 1-1: config 0 has no interface number 0
[   68.189638][   T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.200839][   T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.211002][   T64] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   68.220248][   T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.232557][   T64] usb 1-1: config 0 descriptor??
[   68.678436][ T2088] SELinux:  policydb magic number 0x10c0 does not match expected magic number 0xf97cff8c
[   68.688594][ T2088] SELinux: failed to load policy
[   68.714774][ T2088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294950908 (17179803632 ns) > initial count (352 ns). Using initial count to start timer.
[   68.839482][   T64] uclogic 0003:28BD:0094.000B: pen parameters not found
[   68.846698][   T64] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring
[   68.858576][ T2108] incfs: Can't find or create .incomplete dir in ./file0
[   68.865788][ T2108] incfs: mount failed -17
[   69.018942][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   69.042619][  T578] usb 1-1: USB disconnect, device number 33
[   69.149889][   T36] kauditd_printk_skb: 23 callbacks suppressed
[   69.149907][   T36] audit: type=1400 audit(2000000018.868:3009): avc:  denied  { remount } for  pid=2119 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   69.184079][ T2116] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.191240][ T2116] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.198327][ T2116] bridge_slave_0: entered allmulticast mode
[   69.204689][   T10] usb 4-1: Using ep0 maxpacket: 16
[   69.205772][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.210462][ T2116] bridge_slave_0: entered promiscuous mode
[   69.221861][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1503, setting to 1024
[   69.227680][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.239023][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   69.246134][ T2116] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.266500][ T2116] bridge_slave_1: entered allmulticast mode
[   69.272899][ T2116] bridge_slave_1: entered promiscuous mode
[   69.279130][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00
[   69.288248][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.302410][   T10] usb 4-1: config 0 descriptor??
[   69.308596][ T2105] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   69.355515][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.362609][ T2116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.369878][ T2116] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.378802][ T2116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.403930][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.413587][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.420673][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.435848][ T2138] input: syz1 as /devices/virtual/input/input17
[   69.463505][ T2116] veth0_vlan: entered promiscuous mode
[   69.479315][ T2116] veth1_macvtap: entered promiscuous mode
[   69.516386][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.527900][ T2144] netlink: 'syz.5.599': attribute type 11 has an invalid length.
[   69.528768][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.543465][   T36] audit: type=1404 audit(2000000019.238:3010): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   69.560629][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.567994][   T36] audit: type=1404 audit(2000000019.258:3011): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   69.577681][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.596964][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.598691][   T36] audit: type=1400 audit(2000000019.278:3012): avc:  denied  { read write } for  pid=2103 comm="syz.3.595" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.606294][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.629814][   T36] audit: type=1400 audit(2000000019.278:3013): avc:  denied  { open } for  pid=2103 comm="syz.3.595" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.640602][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.660439][   T36] audit: type=1400 audit(2000000019.278:3014): avc:  denied  { ioctl } for  pid=2103 comm="syz.3.595" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.670736][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.693428][   T36] audit: type=1400 audit(2000000019.278:3015): avc:  denied  { read write } for  pid=2116 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.714134][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.743223][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.755621][   T36] audit: type=1400 audit(2000000019.278:3016): avc:  denied  { open } for  pid=2116 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.780477][   T36] audit: type=1400 audit(2000000019.278:3017): avc:  denied  { ioctl } for  pid=2116 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.807421][   T36] audit: type=1400 audit(2000000019.288:3018): avc:  denied  { read write } for  pid=2145 comm="syz.5.606" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.809315][   T10] wacom 0003:056A:00D3.000C: unknown main item tag 0x0
[   69.834998][   T10] wacom 0003:056A:00D3.000C: unknown main item tag 0x0
[   69.846850][   T10] wacom 0003:056A:00D3.000C: unknown main item tag 0x0
[   69.855271][   T10] wacom 0003:056A:00D3.000C: Unknown device_type for 'HID 056a:00d3'. Assuming pen.
[   69.867382][   T10] wacom 0003:056A:00D3.000C: hidraw0: USB HID v0.00 Device [HID 056a:00d3] on usb-dummy_hcd.3-1/input0
[   69.878931][   T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   69.879672][   T10] input: Wacom Bamboo 2FG 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D3.000C/input/input18
[   70.009003][   T64] usb 6-1: device descriptor read/64, error -71
[   70.020618][   T10] usb 4-1: USB disconnect, device number 23
[   70.173749][ T2179] netlink: 'syz.3.615': attribute type 16 has an invalid length.
[   70.181687][ T2179] netlink: 'syz.3.615': attribute type 2 has an invalid length.
[   70.189406][ T2179] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.615'.
[   70.268990][   T64] usb 6-1: device descriptor read/64, error -71
[   70.297632][ T2187] loop6: detected capacity change from 0 to 8388608
[   70.509016][   T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   70.638953][   T64] usb 6-1: device descriptor read/64, error -71
[   70.878973][   T64] usb 6-1: device descriptor read/64, error -71
[   70.989222][   T64] usb usb6-port1: attempt power cycle
[   71.027620][ T2209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'.
[   71.062046][ T2214] SELinux:  Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped).
[   71.073329][ T2214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2214 comm=syz.3.627
[   71.142946][ T2218] loop7: detected capacity change from 0 to 7
[   71.194920][ T2219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   71.194955][ T2219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:349
[   71.316033][ T2228] random: crng reseeded on system resumption
[   71.335236][ T2225] veth1: entered allmulticast mode
[   71.339029][   T64] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   71.358514][ T2225] veth1: left allmulticast mode
[   71.372736][   T64] usb 6-1: device descriptor read/8, error -71
[   71.412467][ T2231] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   71.420689][ T2231] rust_binder: Write failure EINVAL in pid:320
[   71.423631][ T2234] netlink: 'syz.2.634': attribute type 16 has an invalid length.
[   71.448726][ T2241] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.451737][ T2239] rust_binder: Write failure EFAULT in pid:323
[   71.510109][   T64] usb 6-1: device descriptor read/8, error -71
[   71.758957][   T64] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   71.780037][   T64] usb 6-1: device descriptor read/8, error -71
[   71.910059][   T64] usb 6-1: device descriptor read/8, error -71
[   72.019022][   T64] usb usb6-port1: unable to enumerate USB device
[   72.408966][   T64] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   72.528973][  T465] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   72.558951][   T64] usb 1-1: Using ep0 maxpacket: 16
[   72.565260][   T64] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   72.573429][   T64] usb 1-1: config 0 has no interface number 0
[   72.579568][   T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.590549][   T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.601092][   T64] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   72.610259][   T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.619217][   T64] usb 1-1: config 0 descriptor??
[   72.676154][ T2276] rust_binder: Got transaction with invalid offset.
[   72.676215][ T2276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.682923][  T465] usb 4-1: Using ep0 maxpacket: 16
[   72.683155][ T2276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[   72.695569][  T465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.715648][  T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.723717][  T465] usb 4-1: Product: 뚲ꙕ蒟瑲㽉⺬硿횋漢ᶶ쑟娔곫㮰秴鳃u퓓蛲䍝놶睻聘餴䭩豟椗靄ꡦ驡퉹
[   72.737183][  T465] usb 4-1: Manufacturer: Щ
[   72.741715][  T465] usb 4-1: SerialNumber: syz
[   73.026458][ T2267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.035088][ T2267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.152412][  T465] cdc_ncm 4-1:1.0: bind() failure
[   73.158401][  T465] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[   73.166664][  T465] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[   73.176165][  T465] usb 4-1: USB disconnect, device number 24
[   73.199258][ T2282] devpts: called with bogus options
[   73.710564][ T2295] input: syz1 as /devices/virtual/input/input25
[   73.918945][  T578] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   74.048937][  T578] usb 6-1: device descriptor read/64, error -71
[   74.288967][  T578] usb 6-1: device descriptor read/64, error -71
[   74.528966][  T578] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   74.658953][  T578] usb 6-1: device descriptor read/64, error -71
[   74.899019][  T578] usb 6-1: device descriptor read/64, error -71
[   75.009069][  T578] usb usb6-port1: attempt power cycle
[   75.174853][   T64] usbhid 1-1:0.1: can't add hid device: -71
[   75.180976][   T64] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[   75.197432][   T64] usb 1-1: USB disconnect, device number 34
[   75.207388][   T36] kauditd_printk_skb: 114 callbacks suppressed
[   75.207418][   T36] audit: type=1400 audit(2000000024.918:3133): avc:  denied  { name_bind } for  pid=2301 comm="syz.3.659" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   75.239061][   T36] audit: type=1400 audit(2000000024.948:3134): avc:  denied  { bind } for  pid=2301 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.259413][   T36] audit: type=1400 audit(2000000024.948:3135): avc:  denied  { name_bind } for  pid=2301 comm="syz.3.659" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   75.285754][   T36] audit: type=1400 audit(2000000024.948:3136): avc:  denied  { node_bind } for  pid=2301 comm="syz.3.659" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   75.309814][   T36] audit: type=1400 audit(2000000024.948:3137): avc:  denied  { connect } for  pid=2301 comm="syz.3.659" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.332542][   T36] audit: type=1400 audit(2000000024.948:3138): avc:  denied  { write } for  pid=2301 comm="syz.3.659" path="socket:[15917]" dev="sockfs" ino=15917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.356105][   T36] audit: type=1400 audit(2000000024.968:3139): avc:  denied  { read } for  pid=2301 comm="syz.3.659" path="socket:[15917]" dev="sockfs" ino=15917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.388917][  T578] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   75.421247][  T578] usb 6-1: device descriptor read/8, error -71
[   75.474470][   T36] audit: type=1400 audit(2000000025.188:3140): avc:  denied  { ioctl } for  pid=2306 comm="syz.3.661" path="cgroup:[4026532303]" dev="nsfs" ino=4026532303 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   75.550236][  T578] usb 6-1: device descriptor read/8, error -71
[   75.644944][   T36] audit: type=1400 audit(2000000025.358:3141): avc:  denied  { remount } for  pid=2316 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   75.645445][ T2317] overlayfs: missing 'workdir'
[   75.687357][   T36] audit: type=1400 audit(2000000025.398:3142): avc:  denied  { remount } for  pid=2308 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   75.799115][  T578] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   75.820207][  T578] usb 6-1: device descriptor read/8, error -71
[   75.858934][  T434] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   75.949907][  T578] usb 6-1: device descriptor read/8, error -71
[   75.988915][  T434] usb 1-1: device descriptor read/64, error -71
[   76.059004][  T578] usb usb6-port1: unable to enumerate USB device
[   76.228953][  T434] usb 1-1: device descriptor read/64, error -71
[   76.468940][  T434] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   76.598962][  T434] usb 1-1: device descriptor read/64, error -71
[   76.623524][ T2366] rust_binder: 2365 RLIMIT_NICE not set
[   76.623865][ T2365] binder: Unknown parameter 'fsname'
[   76.652508][ T2373] SELinux: security_context_str_to_sid () failed with errno=-22
[   76.670405][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'.
[   76.679665][ T2375] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   76.679783][ T2375] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.799992][ T2389] binder: Unknown parameter 'context�'
[   76.838939][  T434] usb 1-1: device descriptor read/64, error -71
[   76.914284][ T2403] rust_binder: pid 2403 performed invalid decrement on ref
[   76.949011][  T434] usb usb1-port1: attempt power cycle
[   77.058964][  T465] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[   77.208939][  T465] usb 4-1: Using ep0 maxpacket: 32
[   77.215151][  T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   77.226474][  T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   77.236160][  T465] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[   77.247654][  T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10
[   77.258694][  T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024
[   77.271101][  T465] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   77.280176][  T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.288156][  T465] usb 4-1: Product: syz
[   77.292507][  T465] usb 4-1: Manufacturer: syz
[   77.297107][  T465] usb 4-1: SerialNumber: syz
[   77.298939][  T434] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   77.309628][  T465] usb 4-1: config 0 descriptor??
[   77.314848][ T2391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   77.323048][  T465] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26
[   77.329966][  T434] usb 1-1: device descriptor read/8, error -71
[   77.339531][   T94] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   77.349845][   T94] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   77.362162][  T982] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   77.374217][   T94] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   77.384678][   T94] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   77.469997][  T434] usb 1-1: device descriptor read/8, error -71
[   77.544356][   T64] usb 4-1: USB disconnect, device number 25
[   77.706553][ T2413] process 'syz.2.700' launched '/dev/fd/4' with NULL argv: empty string added
[   77.715526][  T434] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   77.739870][  T434] usb 1-1: device descriptor read/8, error -71
[   77.828828][ T2426] rust_binder: Failed copying into alloc: EFAULT
[   77.828847][ T2426] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   77.835379][ T2426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   77.843757][ T2426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44
[   77.879945][  T434] usb 1-1: device descriptor read/8, error -71
[   77.999029][  T434] usb usb1-port1: unable to enumerate USB device
[   78.035530][  T434] rust_binder: 2431: removing orphan mapping 0:24
[   78.515533][ T2467] netlink: 'syz.2.718': attribute type 28 has an invalid length.
[   78.621382][ T2471] netlink: 'syz.5.720': attribute type 19 has an invalid length.
[   78.629312][ T2471] netlink: 5 bytes leftover after parsing attributes in process `syz.5.720'.
[   78.651059][ T2477] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   78.653403][ T2473] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   78.705203][ T2487] syzkaller0: entered promiscuous mode
[   78.713458][ T2490] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   78.717231][ T2487] syzkaller0: entered allmulticast mode
[   78.719315][ T2490] rust_binder: Error while translating object.
[   78.734062][ T2490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   78.742164][ T2490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376
[   78.756658][ T2490] overlayfs: failed to resolve './file1/file0': -2
[   78.802439][ T2495] binder: Bad value for 'stats'
[   79.065054][ T2510] fuse: Bad value for 'fd'
[   79.069849][   T64] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[   79.098967][  T434] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   79.135326][ T2514] 9pnet_fd: Insufficient options for proto=fd
[   79.218958][   T64] usb 4-1: Using ep0 maxpacket: 32
[   79.225232][   T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.235384][   T64] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 12
[   79.245700][   T64] usb 4-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.58
[   79.254769][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.262779][   T64] usb 4-1: Product: syz
[   79.266930][   T64] usb 4-1: Manufacturer: syz
[   79.268908][  T434] usb 6-1: Using ep0 maxpacket: 16
[   79.271544][   T64] usb 4-1: SerialNumber: syz
[   79.278132][  T434] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[   79.293974][   T64] usb 4-1: config 0 descriptor??
[   79.296838][  T434] usb 6-1: config 0 has no interface number 0
[   79.305354][  T434] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   79.315504][  T434] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   79.326378][  T434] usb 6-1: config 0 interface 41 has no altsetting 0
[   79.334998][  T434] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   79.344293][  T434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.352430][  T434] usb 6-1: Product: syz
[   79.356743][  T434] usb 6-1: Manufacturer: syz
[   79.361548][  T434] usb 6-1: SerialNumber: syz
[   79.367126][  T434] usb 6-1: config 0 descriptor??
[   79.372627][ T2500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.380151][ T2500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.419663][ T2526] netlink: 'syz.0.739': attribute type 11 has an invalid length.
[   79.427565][ T2526] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   79.435314][ T2526] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.739'.
[   79.519398][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.528587][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.534289][ T2543] binder: Bad value for 'max'
[   79.587578][ T2500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.594886][ T2500] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.650756][ T2560] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   79.659065][ T2560] rust_binder: Write failure EINVAL in pid:419
[   79.720552][   T64] ums-cypress 4-1:0.0: USB Mass Storage device detected
[   79.768584][ T2566] rust_binder: got new transaction with bad transaction stack
[   79.768606][ T2566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422
[   79.782380][   T64] usb 4-1: USB disconnect, device number 26
[   79.803103][  T434] Error reading MAC address
[   79.808011][ T2501] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.815295][ T2501] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   79.832926][  T578] rust_binder: 2562: removing orphan mapping 0:24
[   79.844714][ T2568] fuse: Unknown parameter '00000000000000000000004'
[   79.957381][ T2575] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[   80.024011][  T434] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[   80.091692][ T2584] 9pnet_fd: Insufficient options for proto=fd
[   80.098945][  T578] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[   80.249974][  T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.261046][  T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.271004][  T578] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   80.280252][  T578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.291940][  T578] usb 1-1: config 0 descriptor??
[   80.503324][  T578] usbhid 1-1:0.0: can't add hid device: -71
[   80.510723][  T578] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   80.521524][   T36] kauditd_printk_skb: 38 callbacks suppressed
[   80.521539][   T36] audit: type=1400 audit(2000000030.236:3181): avc:  denied  { read write } for  pid=2587 comm="syz.0.757" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.523070][  T578] usb 1-1: USB disconnect, device number 39
[   80.531605][   T36] audit: type=1400 audit(2000000030.236:3182): avc:  denied  { open } for  pid=2587 comm="syz.0.757" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.597639][ T2594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   80.597661][ T2594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:393
[   80.622481][   T36] audit: type=1400 audit(2000000030.336:3183): avc:  denied  { mounton } for  pid=2596 comm="syz.0.759" path="/140/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   80.622687][ T2597] fuse: Bad value for 'group_id'
[   80.661452][ T2597] fuse: Bad value for 'group_id'
[   80.670171][   T36] audit: type=1400 audit(2000000030.386:3184): avc:  denied  { remount } for  pid=2596 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   80.673705][ T2599] devpts: called with bogus options
[   80.690261][   T36] audit: type=1400 audit(2000000030.386:3185): avc:  denied  { ioctl } for  pid=2596 comm="syz.0.759" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   80.735484][ T2609] tmpfs: Bad value for 'nr_inodes'
[   80.736448][  T434] usb 6-1: USB disconnect, device number 10
[   80.770971][   T36] audit: type=1400 audit(2000000030.486:3186): avc:  denied  { getopt } for  pid=2611 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   80.793604][   T36] audit: type=1400 audit(2000000030.486:3187): avc:  denied  { ioctl } for  pid=2611 comm="syz.0.764" path="socket:[17169]" dev="sockfs" ino=17169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   80.821048][   T36] audit: type=1400 audit(2000000030.486:3188): avc:  denied  { bind } for  pid=2611 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   80.840975][   T36] audit: type=1400 audit(2000000030.486:3189): avc:  denied  { name_bind } for  pid=2611 comm="syz.0.764" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   80.870137][   T36] audit: type=1400 audit(2000000030.486:3190): avc:  denied  { node_bind } for  pid=2611 comm="syz.0.764" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   80.894377][ T2639] overlayfs: empty lowerdir
[   80.901802][ T2625] rust_binder: Read failure Err(EFAULT) in pid:405
[   80.929581][ T2651] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   80.984969][ T2660] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false
[   80.998697][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.018587][ T2662] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.078938][ T2670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'.
[   81.099134][ T2672] rust_binder: 2662 RLIMIT_NICE not set
[   81.103073][ T2676] x_tables: duplicate underflow at hook 1
[   81.141552][ T2681] netlink: 'syz.5.787': attribute type 4 has an invalid length.
[   81.323046][ T2699] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   81.386517][ T2709] rust_binder: Error while translating object.
[   81.386543][ T2709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   81.392916][ T2709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:106
[   81.491365][ T2712] exFAT-fs (rnullb0): invalid boot record signature
[   81.507019][ T2712] exFAT-fs (rnullb0): failed to read boot sector
[   81.513352][ T2712] exFAT-fs (rnullb0): failed to recognize exfat type
[   82.319540][ T2719] rust_binder: Write failure EINVAL in pid:111
[   82.598944][  T578] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[   82.665503][ T2734] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   82.681375][ T2736] netlink: 2 bytes leftover after parsing attributes in process `syz.2.808'.
[   82.738972][  T578] usb 6-1: device descriptor read/64, error -71
[   82.978953][  T578] usb 6-1: device descriptor read/64, error -71
[   83.048992][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.049287][  T535] Bluetooth: hci0: command 0x1003 tx timeout
[   83.218967][  T578] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[   83.318927][   T64] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[   83.348948][  T578] usb 6-1: device descriptor read/64, error -71
[   83.449015][   T64] usb 4-1: device descriptor read/64, error -71
[   83.598912][  T578] usb 6-1: device descriptor read/64, error -71
[   83.688958][   T64] usb 4-1: device descriptor read/64, error -71
[   83.709004][  T578] usb usb6-port1: attempt power cycle
[   83.928960][   T64] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[   84.058978][  T578] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[   84.068965][   T64] usb 4-1: device descriptor read/64, error -71
[   84.079951][  T578] usb 6-1: device descriptor read/8, error -71
[   84.210050][  T578] usb 6-1: device descriptor read/8, error -71
[   84.297465][ T2778] netlink: 'syz.0.826': attribute type 6 has an invalid length.
[   84.318940][   T64] usb 4-1: device descriptor read/64, error -71
[   84.438423][   T64] usb usb4-port1: attempt power cycle
[   84.448926][  T578] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[   84.470038][  T578] usb 6-1: device descriptor read/8, error -71
[   84.599935][  T578] usb 6-1: device descriptor read/8, error -71
[   84.709005][  T578] usb usb6-port1: unable to enumerate USB device
[   84.778948][   T64] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[   84.809936][   T64] usb 4-1: device descriptor read/8, error -71
[   84.847139][ T2815] netlink: 5 bytes leftover after parsing attributes in process `syz.0.839'.
[   84.884357][ T2820] overlayfs: failed to resolve './file2': -2
[   84.950262][   T64] usb 4-1: device descriptor read/8, error -71
[   85.188928][   T64] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[   85.210002][   T64] usb 4-1: device descriptor read/8, error -71
[   85.340318][   T64] usb 4-1: device descriptor read/8, error -71
[   85.449083][   T64] usb usb4-port1: unable to enumerate USB device
[   85.573545][ T2868] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   85.599474][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   85.599492][   T36] audit: type=1400 audit(2000000035.316:3210): avc:  denied  { setopt } for  pid=2871 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   85.650892][ T2875] overlayfs: failed to clone upperpath
[   85.744482][ T2888] overlayfs: failed to clone upperpath
[   85.758957][  T465] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   85.920078][  T465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.931478][  T465] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   85.940541][  T465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.949214][  T465] usb 6-1: config 0 descriptor??
[   86.355937][  T465] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[   86.365414][  T465] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000D/input/input28
[   86.434507][  T465] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[   86.488940][  T578] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[   86.638942][  T578] usb 4-1: Using ep0 maxpacket: 16
[   86.645915][  T578] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16
[   86.655882][  T578] usb 4-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   86.668766][  T578] usb 4-1: config 1 interface 0 has no altsetting 0
[   86.676943][  T578] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   86.686129][  T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.694148][  T578] usb 4-1: Product: syz
[   86.698315][  T578] usb 4-1: Manufacturer: syz
[   86.703039][  T578] usb 4-1: SerialNumber: syz
[   86.708655][ T2907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   86.715934][ T2907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   86.761916][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.770483][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.779503][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.788303][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.798482][    T9] usb 6-1: USB disconnect, device number 15
[   86.926982][  T578] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   86.943767][  T578] usb 4-1: USB disconnect, device number 31
[   87.380198][ T2943] incfs: Error accessing: ./file1.
[   87.385543][ T2944] incfs: Error accessing: ./file1.
[   87.390721][ T2944] incfs: mount failed -2
[   87.395008][ T2943] incfs: mount failed -2
[   87.453082][ T2946] rust_binder: Error while translating object.
[   87.453117][ T2946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   87.459496][ T2946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:421
[   87.462999][   T36] audit: type=1400 audit(2000000037.176:3211): avc:  denied  { write } for  pid=2949 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   87.495156][ T2953] SELinux: security_context_str_to_sid () failed with errno=-22
[   87.797924][   T36] audit: type=1400 audit(2000000037.506:3212): avc:  denied  { wake_alarm } for  pid=2983 comm="syz.2.900" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.849684][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[   87.904004][ T2992] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[   88.009982][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.021032][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   88.030305][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.039219][    T9] usb 4-1: config 0 descriptor??
[   88.107928][ T3006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'.
[   88.247381][ T2966] sit0: entered promiscuous mode
[   88.254115][ T2966] netlink: 'syz.3.892': attribute type 1 has an invalid length.
[   88.262144][ T2966] netlink: 1 bytes leftover after parsing attributes in process `syz.3.892'.
[   88.475926][   T36] audit: type=1326 audit(2000000038.186:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.3.892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f011d18ebe9 code=0x0
[   89.017758][ T3055] 9pnet_fd: Insufficient options for proto=fd
[   90.023562][ T3082] syz.0.934 uses obsolete (PF_INET,SOCK_PACKET)
[   90.286319][ T3112] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.544730][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   90.552810][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   90.566757][ T3127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434
[   90.569180][    T9] usb 4-1: USB disconnect, device number 32
[   90.595575][   T36] audit: type=1400 audit(2000000040.306:3214): avc:  denied  { create } for  pid=3126 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   90.625266][   T36] audit: type=1400 audit(2000000040.336:3215): avc:  denied  { read } for  pid=3128 comm="syz.5.950" name="file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   90.740633][ T3134] ./cgroup: Can't lookup blockdev
[   90.740633][ T3136] ./cgroup: Can't lookup blockdev
[   90.791239][ T3138] rust_binder: 438: no such ref 0
[   90.796369][ T3138] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   90.804587][ T3138] rust_binder: 438: no such ref 0
[   90.820418][ T3140] binder: Unknown parameter 'defcontext01777777777777777777777'
[   90.867192][ T3146] overlayfs: failed to resolve './file1': -2
[   90.880042][ T3140] binder: Unknown parameter 'defcontext01777777777777777777777'
[   91.138957][  T578] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[   91.199391][ T3185] rust_binder: Write failure EFAULT in pid:150
[   91.248255][ T3190] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.289560][  T578] usb 4-1: too many configurations: 9, using maximum allowed: 8
[   91.305542][ T3191] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   91.312938][ T3191] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97)
[   91.312953][ T3191] rust_binder: Error while translating object.
[   91.323927][ T3191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   91.330214][ T3191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   91.343614][  T578] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[   91.361911][  T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.369930][  T578] usb 4-1: Product: syz
[   91.374094][  T578] usb 4-1: Manufacturer: syz
[   91.378685][  T578] usb 4-1: SerialNumber: syz
[   91.384328][  T578] usb 4-1: config 0 descriptor??
[   91.390259][  T578] usb 4-1: Waiting for MOTU Microbook II to boot up...
[   91.397135][  T578] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22
[   91.405324][  T578] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[   91.643741][   T36] audit: type=1400 audit(2000000041.356:3216): avc:  denied  { ioctl } for  pid=3152 comm="syz.3.959" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   91.644207][ T3194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444
[   91.672031][  T578] usb 4-1: USB disconnect, device number 33
[   91.989909][   T36] audit: type=1400 audit(2000000041.706:3217): avc:  denied  { getopt } for  pid=3197 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   92.066751][   T36] audit: type=1326 audit(2000000041.776:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.0.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512ed8ebe9 code=0x0
[   92.092350][  T578] rust_binder: 3188: removing orphan mapping 0:1048
[   92.104867][ T3203] input: syz1 as /devices/virtual/input/input29
[   92.114109][   T36] audit: type=1400 audit(2000000041.826:3219): avc:  denied  { map } for  pid=3202 comm="syz.5.974" path="socket:[20013]" dev="sockfs" ino=20013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   92.151038][ T3209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.975'.
[   92.197482][  T578] rust_binder: 0: removing orphan mapping 0:96
[   92.219865][ T3211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447
[   92.398963][  T465] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   92.489467][   T36] audit: type=1400 audit(2000000042.206:3220): avc:  denied  { create } for  pid=3214 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   92.560053][  T465] usb 6-1: config 1 has an invalid interface number: 236 but max is 0
[   92.568283][  T465] usb 6-1: config 1 has no interface number 0
[   92.574588][  T465] usb 6-1: too many endpoints for config 1 interface 236 altsetting 146: 134, using maximum allowed: 30
[   92.586875][  T465] usb 6-1: config 1 interface 236 altsetting 146 has 0 endpoint descriptors, different from the interface descriptor's value: 134
[   92.600561][  T465] usb 6-1: config 1 interface 236 has no altsetting 0
[   92.608775][  T465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   92.618175][  T465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.626408][  T465] usb 6-1: Product: syz
[   92.630807][  T465] usb 6-1: Manufacturer: syz
[   92.635476][  T465] usb 6-1: SerialNumber: syz
[   92.742341][ T3232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'.
[   92.840428][ T3238] IPv6: NLM_F_CREATE should be specified when creating new route
[   92.844364][  T465] hub 6-1:1.236: bad descriptor, ignoring hub
[   92.856185][  T465] hub 6-1:1.236: probe with driver hub failed with error -5
[   92.939132][ T3240] netlink: 92 bytes leftover after parsing attributes in process `syz.3.988'.
[   93.012639][ T3248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'.
[   93.028934][  T465] usb 6-1: reset high-speed USB device number 16 using dummy_hcd
[   93.040638][ T3248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3248 comm=syz.0.991
[   93.053637][ T3248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3248 comm=syz.0.991
[   93.348960][  T578] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[   93.393700][ T3209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.402329][ T3209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.412002][  T465] usb 6-1: failed to restore interface 236 altsetting 146 (error=-71)
[   93.420401][  T465] usb 6-1: USB disconnect, device number 16
[   93.498947][  T578] usb 4-1: Using ep0 maxpacket: 32
[   93.505201][  T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.516160][  T578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.525932][  T578] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[   93.534991][  T578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.543561][  T578] usb 4-1: config 0 descriptor??
[   93.615472][   T36] audit: type=1400 audit(2000000043.326:3221): avc:  denied  { map } for  pid=3269 comm="syz.0.999" path="socket:[20241]" dev="sockfs" ino=20241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   94.150757][   T36] audit: type=1400 audit(2000000043.866:3222): avc:  denied  { shutdown } for  pid=3286 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.171174][   T36] audit: type=1400 audit(2000000043.886:3223): avc:  denied  { ioctl } for  pid=3286 comm="syz.2.1005" path="socket:[20359]" dev="sockfs" ino=20359 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.216522][ T3295] fuse: Bad value for 'fd'
[   94.223220][   T36] audit: type=1326 audit(2000000043.926:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3280 comm="syz.5.1003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6d38ebe9 code=0x0
[   94.354828][  T578] usbhid 4-1:0.0: can't add hid device: -71
[   94.361979][  T578] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   94.375530][  T578] usb 4-1: USB disconnect, device number 34
[   94.447437][ T3311] rust_binder: Error while translating object.
[   94.447463][ T3311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   94.453825][ T3311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:470
[   94.463205][ T3311] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   94.472302][ T3311] rust_binder: Read failure Err(EFAULT) in pid:470
[   94.868954][  T578] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[   95.040326][  T578] usb 4-1: unable to get BOS descriptor or descriptor too short
[   95.048553][  T578] usb 4-1: not running at top speed; connect to a high speed hub
[   95.057313][  T578] usb 4-1: config 14 has an invalid interface number: 16 but max is 0
[   95.065868][  T578] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[   95.076307][  T578] usb 4-1: config 14 has no interface number 0
[   95.082543][  T578] usb 4-1: config 14 interface 16 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   95.095811][  T578] usb 4-1: config 14 interface 16 has no altsetting 0
[   95.104124][  T578] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=51.5b
[   95.113442][  T578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.121561][  T578] usb 4-1: Product: syz
[   95.125778][  T578] usb 4-1: Manufacturer: syz
[   95.134325][  T578] usb 4-1: SerialNumber: syz
[   95.348602][  T578] usb 4-1: unknown interface protocol 0x18, assuming v1
[   95.355708][  T578] usb 4-1: 16:2 : does not exist
[   95.362660][  T578] usb 4-1: USB disconnect, device number 35
[   95.917049][ T3358] rust_binder: Write failure EFAULT in pid:476
[   96.024015][ T3362] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   96.192656][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   96.192674][   T36] audit: type=1400 audit(2000000045.906:3234): avc:  denied  { append } for  pid=3365 comm="syz.5.1036" name="pfkey" dev="proc" ino=4026532900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   96.511051][  T578] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   96.668906][  T578] usb 6-1: Using ep0 maxpacket: 16
[   96.675027][  T578] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[   96.688903][  T578] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.699042][  T578] usb 6-1: config 1 has no interface number 0
[   96.705150][  T578] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   96.718249][  T578] usb 6-1: config 1 interface 105 has no altsetting 0
[   96.726476][  T578] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   96.735846][  T578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.743955][  T578] usb 6-1: Product: syz
[   96.748167][  T578] usb 6-1: Manufacturer: syz
[   96.752898][  T578] usb 6-1: SerialNumber: syz
[   96.860494][   T36] audit: type=1400 audit(2000000046.576:3235): avc:  denied  { mounton } for  pid=3394 comm="syz.3.1044" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   96.860601][ T3395] /dev/rnullb0: Can't open blockdev
[   96.901251][ T3398] pim6reg1: entered promiscuous mode
[   96.906589][ T3398] pim6reg1: entered allmulticast mode
[   96.964005][  T578] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22
[   96.983690][  T578] usb 6-1: USB disconnect, device number 17
[   96.993358][   T36] audit: type=1400 audit(2000000046.696:3236): avc:  denied  { append } for  pid=3407 comm="syz.5.1048" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   97.067654][ T3413] IPv4: Oversized IP packet from 127.202.26.0
[   97.079381][ T3413] input: syz1 as /devices/virtual/input/input30
[   97.096590][ T3417] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.098827][ T3417] rust_binder: Error in use_page_slow: ESRCH
[   97.108509][ T3418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205
[   97.114657][ T3417] rust_binder: use_range failure ESRCH
[   97.125192][ T3417] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   97.130731][ T3417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   97.147395][ T3417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:205
[   97.200037][ T3433] rust_binder: Error while translating object.
[   97.209653][ T3433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   97.215819][ T3433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:212
[   97.289658][   T36] audit: type=1400 audit(2000000047.006:3237): avc:  denied  { remount } for  pid=3425 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   97.384415][   T36] audit: type=1400 audit(2000000047.096:3238): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   97.628968][  T465] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[   97.781640][  T465] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   97.790221][  T465] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   97.806177][  T465] usb 4-1: config 220 has no interface number 2
[   97.812535][  T465] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[   97.822392][  T465] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   97.835480][  T465] usb 4-1: config 220 interface 0 has no altsetting 0
[   97.842309][  T465] usb 4-1: config 220 interface 76 has no altsetting 0
[   97.849203][  T465] usb 4-1: config 220 interface 1 has no altsetting 0
[   97.857514][  T465] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   97.866701][  T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.874754][  T465] usb 4-1: Product: syz
[   97.879018][  T465] usb 4-1: Manufacturer: syz
[   97.883712][  T465] usb 4-1: SerialNumber: syz
[   97.898786][   T36] audit: type=1400 audit(2000000047.606:3239): avc:  denied  { getopt } for  pid=3451 comm="syz.5.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.956553][    T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[   97.979461][    T9] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   98.020301][   T36] audit: type=1400 audit(2000000047.736:3240): avc:  denied  { write } for  pid=3453 comm="syz.5.1065" name="hidraw0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   98.131923][  T465] usb 4-1: selecting invalid altsetting 0
[   98.137825][  T465] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   98.144223][  T465] usb 4-1: No valid video chain found.
[   98.152438][  T465] usb 4-1: USB disconnect, device number 36
[   98.199332][   T36] audit: type=1400 audit(2000000047.916:3241): avc:  denied  { setopt } for  pid=3459 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   98.348940][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   98.501435][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.510603][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.518634][    T9] usb 6-1: Product: syz
[   98.522965][    T9] usb 6-1: Manufacturer: syz
[   98.527628][    T9] usb 6-1: SerialNumber: syz
[   98.645505][   T36] audit: type=1400 audit(2000000048.356:3242): avc:  denied  { execute } for  pid=3473 comm="syz.3.1071" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   98.831558][   T36] audit: type=1400 audit(2000004400.551:3243): avc:  denied  { create } for  pid=3495 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[   98.859871][ T3500] overlayfs: failed to clone upperpath
[   98.908948][  T465] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   99.060054][  T465] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   99.068432][  T465] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   99.078760][  T465] usb 4-1: config 220 has no interface number 2
[   99.085126][  T465] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.095354][  T465] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   99.108531][  T465] usb 4-1: config 220 interface 0 has no altsetting 0
[   99.115343][  T465] usb 4-1: config 220 interface 76 has no altsetting 0
[   99.122342][  T465] usb 4-1: config 220 interface 1 has no altsetting 0
[   99.130922][  T465] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   99.140181][  T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.148187][  T465] usb 4-1: Product: syz
[   99.152379][  T465] usb 4-1: Manufacturer: syz
[   99.156969][  T465] usb 4-1: SerialNumber: syz
[   99.432926][  T465] usb 4-1: selecting invalid altsetting 0
[   99.444654][  T465] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   99.451122][  T465] usb 4-1: No valid video chain found.
[   99.454981][ T3521] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   99.462022][  T465] usb 4-1: USB disconnect, device number 37
[   99.465701][ T3521] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   99.483295][ T3521] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   99.492156][ T3521] overlayfs: failed to clone lowerpath
[   99.542627][    T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[   99.549381][    T9] cdc_ncm 6-1:1.0: setting rx_max = 16384
[   99.671420][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[   99.882752][    T9] cdc_ncm 6-1:1.0: setting tx_max = 184
[   99.890239][    T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   99.903904][    T9] usb 6-1: USB disconnect, device number 18
[   99.910982][    T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  100.095994][ T3563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'.
[  100.105225][ T3563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=3563 comm=syz.2.1103
[  100.118424][ T3563] 9pnet_fd: Insufficient options for proto=fd
[  100.139082][ T3568] 9pnet_fd: Insufficient options for proto=fd
[  100.150177][ T3568] overlayfs: failed to clone upperpath
[  100.608974][    T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  100.769945][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.788354][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  100.797651][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.810190][    T9] usb 4-1: config 0 descriptor??
[  100.856739][ T3625] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.907699][ T3626] rust_binder: Error in use_page_slow: ESRCH
[  100.914210][ T3626] rust_binder: use_range failure ESRCH
[  100.920297][ T3626] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  100.925884][ T3626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  100.933787][ T3626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:242
[  101.125982][ T3644] loop0: Can't mount, would change RO state
[  101.174516][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  101.187518][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  101.201239][    T9] usb 4-1: USB disconnect, device number 38
[  101.399581][   T36] kauditd_printk_skb: 9 callbacks suppressed
[  101.399597][   T36] audit: type=1400 audit(2000004403.111:3253): avc:  denied  { create } for  pid=3663 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  101.439660][ T3670] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  101.668939][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  101.818958][    T9] usb 4-1: Using ep0 maxpacket: 16
[  101.825326][    T9] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config
[  101.835665][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 11776, setting to 64
[  101.846661][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  101.860174][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.869235][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  101.877209][    T9] usb 4-1: SerialNumber: syz
[  101.883969][    T9] hub 4-1:1.0: bad descriptor, ignoring hub
[  101.889948][    T9] hub 4-1:1.0: probe with driver hub failed with error -5
[  101.897178][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  101.986824][ T3694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1149'.
[  102.048977][  T454] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  102.085076][ T3647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1132'.
[  102.200167][  T454] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  102.209321][  T454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.218107][  T454] usb 6-1: config 0 descriptor??
[  102.238828][ T3720] overlayfs: failed to clone upperpath
[  102.289088][  T465] usb 4-1: USB disconnect, device number 39
[  102.351814][ T3736] TCP: TCP_TX_DELAY enabled
[  102.941940][ T3758] overlayfs: failed to clone upperpath
[  103.110829][ T3777] overlayfs: failed to clone upperpath
[  103.156806][   T36] audit: type=1400 audit(2000004404.861:3254): avc:  denied  { ioctl } for  pid=3788 comm="syz.0.1185" path="socket:[22826]" dev="sockfs" ino=22826 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  103.594474][ T3792] rust_binder: Error in use_page_slow: ESRCH
[  103.594493][ T3792] rust_binder: use_range failure ESRCH
[  103.600579][ T3792] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  103.606103][ T3792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  103.613977][ T3792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:535
[  103.674208][   T36] audit: type=1400 audit(2000004405.381:3255): avc:  denied  { setattr } for  pid=3796 comm="syz.3.1188" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  103.705030][   T36] audit: type=1400 audit(2000004405.401:3256): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  103.952827][ T3811] netlink: 'syz.2.1192': attribute type 32 has an invalid length.
[  104.248339][   T36] audit: type=1400 audit(2000004405.951:3257): avc:  denied  { map } for  pid=3812 comm="syz.0.1193" path="socket:[22849]" dev="sockfs" ino=22849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  104.272492][   T36] audit: type=1400 audit(2000004405.951:3258): avc:  denied  { accept } for  pid=3812 comm="syz.0.1193" path="socket:[22849]" dev="sockfs" ino=22849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  104.618365][ T3835] fuse: Unknown parameter 'fd�õ&�'
[  104.669374][   T36] audit: type=1400 audit(2000004406.381:3259): avc:  denied  { create } for  pid=3836 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  104.700642][   T36] audit: type=1400 audit(2000004406.381:3260): avc:  denied  { setopt } for  pid=3836 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  104.743643][  T454] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  104.746472][ T3849] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.753884][  T454] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  104.757283][ T3849] __vm_enough_memory: pid: 3849, comm: syz.5.1204, bytes: 18014402804453376 not enough memory for the allocation
[  104.760708][  T454] asix 6-1:0.0: probe with driver asix failed with error -71
[  104.776122][   T36] audit: type=1326 audit(2000004406.481:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.5.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6d38ebe9 code=0x0
[  104.786900][  T454] usb 6-1: USB disconnect, device number 19
[  104.907169][   T36] audit: type=1400 audit(2000004406.611:3262): avc:  denied  { read } for  pid=3857 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  104.936880][ T3860] netlink: 'syz.3.1207': attribute type 16 has an invalid length.
[  104.944885][ T3860] netlink: 'syz.3.1207': attribute type 2 has an invalid length.
[  104.952997][ T3860] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.1207'.
[  105.050430][ T3864] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  105.130479][ T3868] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.1211'.
[  105.144344][ T3868] ------------[ cut here ]------------
[  105.149875][ T3868] WARNING: CPU: 0 PID: 3868 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[  105.160253][ T3868] Modules linked in:
[  105.164229][ T3868] CPU: 0 UID: 0 PID: 3868 Comm: syz.3.1211 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[  105.175806][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  105.185961][ T3868] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[  105.192523][ T3868] Code: 7e 3b e8 44 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 21 0c 6a 00 <0f> 0b e9 e4 fc ff ff e8 15 0c 6a 00 0f 0b e9 0e fd ff ff e8 09 0c
[  105.212162][ T3868] RSP: 0018:ffffc9000dd2f9c0 EFLAGS: 00010293
[  105.218236][ T3868] RAX: ffffffff811bd81f RBX: ffff888132a58000 RCX: ffff888114879300
[  105.226236][ T3868] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  105.234224][ T3868] RBP: ffffc9000dd2fc70 R08: ffff888114879307 R09: 1ffff1102290f260
[  105.242297][ T3868] R10: dffffc0000000000 R11: ffffed102290f261 R12: ffff888141cca000
[  105.250356][ T3868] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888132a58078
[  105.258326][ T3868] FS:  00007f011bbf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  105.267269][ T3868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.273879][ T3868] CR2: 0000200000ff0000 CR3: 000000011d658000 CR4: 00000000003526b0
[  105.281877][ T3868] Call Trace:
[  105.285241][ T3868]  <TASK>
[  105.288157][ T3868]  ? kthread_queue_work+0xbb/0x100
[  105.293310][ T3868]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  105.299339][ T3868]  ? futex_unqueue+0x136/0x160
[  105.304202][ T3868]  ? __futex_wait+0x218/0x2a0
[  105.308930][ T3868]  ? __cfi_wait_rcu_exp_gp+0x10/0x10
[  105.314239][ T3868]  ? ioctl_has_perm+0x1aa/0x4d0
[  105.319127][ T3868]  ? __asan_memcpy+0x5a/0x80
[  105.323735][ T3868]  ? ioctl_has_perm+0x3e0/0x4d0
[  105.328580][ T3868]  ? has_cap_mac_admin+0xd0/0xd0
[  105.333772][ T3868]  ? synchronize_rcu+0x77/0x2e0
[  105.338630][ T3868]  ? __cfi_synchronize_rcu+0x10/0x10
[  105.343955][ T3868]  ? futex_wait+0x29a/0x7a0
[  105.348464][ T3868]  ? __kasan_check_write+0x18/0x20
[  105.353706][ T3868]  kvm_vcpu_ioctl+0x96f/0xee0
[  105.358388][ T3868]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  105.363616][ T3868]  ? do_futex+0x309/0x500
[  105.368032][ T3868]  ? __cfi_do_futex+0x10/0x10
[  105.372771][ T3868]  ? __fget_files+0x2c5/0x340
[  105.377607][ T3868]  ? bpf_lsm_file_ioctl+0xd/0x20
[  105.382586][ T3868]  ? security_file_ioctl+0x34/0xd0
[  105.387795][ T3868]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  105.393029][ T3868]  __se_sys_ioctl+0x132/0x1b0
[  105.397716][ T3868]  __x64_sys_ioctl+0x7f/0xa0
[  105.402334][ T3868]  x64_sys_call+0x1878/0x2ee0
[  105.407046][ T3868]  do_syscall_64+0x58/0xf0
[  105.411496][ T3868]  ? clear_bhb_loop+0x50/0xa0
[  105.416189][ T3868]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  105.422112][ T3868] RIP: 0033:0x7f011d18ebe9
[  105.426532][ T3868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.446180][ T3868] RSP: 002b:00007f011bbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.454649][ T3868] RAX: ffffffffffffffda RBX: 00007f011d3b5fa0 RCX: 00007f011d18ebe9
[  105.462720][ T3868] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  105.470724][ T3868] RBP: 00007f011d211e19 R08: 0000000000000000 R09: 0000000000000000
[  105.478696][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.486786][ T3868] R13: 00007f011d3b6038 R14: 00007f011d3b5fa0 R15: 00007fffe10cd258
[  105.494784][ T3868]  </TASK>
[  105.497798][ T3868] ---[ end trace 0000000000000000 ]---