last executing test programs:

10.877897462s ago: executing program 1 (id=713):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9})
socket$inet6_icmp(0xa, 0x2, 0x3a)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

10.810394538s ago: executing program 1 (id=714):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001200010a00000000ff985f417c6c8f50"], 0x14}}, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0xfffffff7)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x5411, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0) (async, rerun: 32)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (rerun: 32)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f0000000100)='./bus\x00') (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_register(r5, 0x0, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64)
r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) (rerun: 64)
timer_settime(r4, 0x1, &(0x7f0000000200), 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x200040) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/240, &(0x7f0000000080)=0xf0) (async, rerun: 32)
ioctl$USBDEVFS_BULK(r6, 0x4004550c, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)

10.792321139s ago: executing program 1 (id=715):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x54d8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3e9dade932f0"}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="e393697bd580261e73dd1726b7bbd3cd2b17b935bc1745fbe12654464222"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_IE={0xd2, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0x8, @device_a, 0x22d9, @value=@device_b, 0xe, 0x2, @device_a, 0x6}}, @random={0x7, 0x5, "db1e77cd81"}, @fast_bss_trans={0x37, 0x72, {0x57, 0x2, "7e5fd924abae7f2e5c26c08e0bba3a95", "1d218823ce8d75915102cfe28bf45c76c130321669378bef7baabd91ed028c6c", "658d84209ddb2ad4dcdc6952f4c9de7e1bebcac6fc887ae0e3041bcc6fe39c39", [{0x1, 0x11, "adf03a946db76b0aada47cc28aea632cbb"}, {0x3, 0xb, "da195228683db152a1775c"}]}}, @mic={0x8c, 0x10, {0x511, "cacedfd2df98", @short="df4c8004bfd1d719"}}, @peer_mgmt={0x75, 0x6, {0x1, 0x8c07, @void, @val=0x1a, @void}}, @mic={0x8c, 0x10, {0x662, "6ad5dffb6a16", @short="6b8ebfbe6facb600"}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x40010808) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ef}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000800)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4090) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xac, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200400c5}, 0x810) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8e271c00a0fa81e4}, 0x1) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x880800, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3f)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan4\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x90, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0006ac7250d9df8c903c40a53fb1ff9"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd0}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e3685be65f72e9d63e9141e1046f22ab33c888761604d212a3a70ee448d2df12"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000014}, 0x844) (async)
r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000c80), 0x185c00, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000cc0)={r10, 0xd, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x9, 0x0, "d20472a130b310cd9feef9ac1cafdd6ec91edf421562f20563a7464e96a516474b2f17c6be2be7389fe9a4106e5aa70e73352445d18d87d665b68303e63d273d", "6c79ab97edc608370e12e3e46828fb09c79546aa56f83b13ddaeaa95261cc8608eb69920dc77a71810081c7a13183e0dde437bd548051df17b3f26a6cc916efb", "748676e0fed618379c2d24c934e71b251f80392a6953b7cbe256b588c7b01770", [0x2, 0x4]}})
sendmsg$key(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2, 0x5, 0x9, 0x2, 0x10, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x7, 0x48, 0x3, 0xe0000000}, @sadb_x_nat_t_type={0x1, 0x14, 0xeb}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sec_ctx={0xa, 0x18, 0x9, 0x8, 0x43, "e9eb515a9f60fd2ea8dea88e17c1460a74d75682003af20ccaa88374594cadc0c3d946c734c38d265db31c991f81f33d7ae16b218e216146e914a0e213cd26ce0e3837"}]}, 0x80}}, 0x24008001)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000f00)={0x20000001}) (async)
r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f40), 0x20000, 0x0)
ioctl$LOOP_SET_STATUS64(r12, 0x4c04, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x6, 0x75d3, 0x0, 0x3, 0xa, 0xc, "2e1665b211690aae56ca913e48541d1aa399f30de8d70240611f0ce2f59a8c348041bbd890289e37c5cc336567cd8f2442b1f6ed52bb4bcdbd77686c2657ab5c", "3167dcc4574eeff95e84621473636b179fbcc285b0c8f4e842180fe6788735100892fac355a02337ba77dfa31c5b2927c8f1cea401b33e36c93f6d91a72a4d76", "8e250e3cbadb9903327d095d6b5944adbe1b2a3f76821dcd014eeb912e93d33c"})
fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000001080))
ioctl$KVM_NMI(r12, 0xae9a) (async)
connect$inet6(r10, &(0x7f00000010c0)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x22}, 0x1c) (async)
getpeername$tipc(r10, &(0x7f0000001100)=@id, &(0x7f0000001140)=0x10)

10.736244924s ago: executing program 1 (id=716):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x6, 0x0, 0x100}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES64, @ANYRES64=r0, @ANYBLOB="75019c579c55415ba9ca0573a0fa88a9a7134532d50a58cdf6e44486368fd27dbf4ff8cfea392bad549eff88d8444b25b32a46fd12a8e98e6655daaf8c58006aec2762250abd1877a7c64640ed3b5c324235f12873efe46a4e0955b52375e3acc561bd9a8b30550076c536ceb43a4442981b68e0a82fb93f2feec27a72b8589991525c051f219e0bb2501a32e17496add9bda27fc1ddaa2fd1eb1ecaf0d4fb0a6a6e8927f7d835ae15dc5f6679476330b764c6e8acafdb99eeee51c03c6eeef88f8c5608806ffc3e92de7c4016ad1abaa98833a9b15b3fa1db267ba91d394dd881acc3a6e5529c9d3300616eda", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x78}, {&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB], 0x44}], 0x2, 0x0, 0x0, 0x20020c00}, 0x20000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mmap(&(0x7f0000f57000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r3, 0x0, 0x0, 0x20040010, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}})
munmap(&(0x7f00003f9000/0xc00000)=nil, 0xc00000)
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x2)
ppoll(&(0x7f0000000200)=[{r6, 0x48}], 0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r8], 0x0}, 0x0)
syz_usb_ep_write(r7, 0x81, 0x83, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5")
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

7.280362852s ago: executing program 1 (id=751):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

7.279937153s ago: executing program 1 (id=752):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r1 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x80, 0x5, 0xfffff671, 0x1, 0xfffc, 0x7, 0x8, 0xfffffffe, 0x7f, 0xfff8, 0x8000, 0x400}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x36)
epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r5, &(0x7f0000001c00)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815", 0x5b8)
chmod(&(0x7f00000005c0)='./file0\x00', 0x101)
utime(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)={0xfffffffffffffff9, 0x6})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000100)={&(0x7f00000003c0)=""/222, 0xde, 0x9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000640))

5.188170602s ago: executing program 0 (id=781):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448df, 0x0)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000001140)={0x0, 0xc000})
mount$9p_fd(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000003c0), 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rbdno=', @ANYRESHEX, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB=',msize=0x00000000ffffffff,\x00'])
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x189a02, 0xb8)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x1000, 0x8, 0x5, 0x7, 0x0, 0x0, 0x1, 0x5, 0x4, 0x8, 0x4, 0x0, 0x800, 0x8000, 0x4], 0xeeee8000, 0x580c4})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100))
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', <r8=>0x0})
write$P9_RREADDIR(r6, &(0x7f0000000400)={0xb, 0x29, 0x1}, 0xb)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
syz_open_dev$hiddev(&(0x7f0000000440), 0x1, 0x408480)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fadbdf25120000000c00018008000100", @ANYRES32=r8, @ANYBLOB="4c79af1819a33e333c2b9b804c2ba13d"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x14)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000002c0)={0x1, &(0x7f0000001480)=[{}]})
sendto$packet(r6, &(0x7f0000000480)="26095b31efa8924496831c5dec7c4575381ebc29a12edfd22e6e27f65d2ebe19e5284b4f253b2d4410cf8670126724f7d71139d6f2165cc32ff21afa615bffaa8eea247daa1f39916d0b4e4d28b77af8fe71d935cc2d06e57d85548e8e7a7e117ae98d69338ef929f993e5694e8e49da59331f50c82f60d3fc38546a3d113bad68be9e4e46b26799e46f50444e24b15fc2c68a55cd0918c3d510837424c328534cd4ae4967e9c6b7c2cde959b5c2d1497efbdc9395d4ec14e4663a8488f71cdca5d84dcf5c970a9bb3845ec22accd8c9ec90b5f123ec5fc03c2fd73590b3dead754544662ba9b5f5c1cb72124d7c764ff9c87a8c8d72196b839b5dce9b82c17110358294b96e01768785d81abfb1a205c3203acf20eddb2e34bbd971ddede2b773d3402c153a6bc20bcfe690c03e7b6d502f42b96ab6136d186dd39f1064906a50a6ef34e2dc9322f1f2913cdc97972983baaded149c11ea20e09f5d74206e17b626f255858ce3e0e14adc17739f88d7ccaa38dff46192684c0f95a9fe5abc99bdc7bbeff34155a36fdc583c298fdfc154f5398135e78912e92f2a4f7069dda7db8d09e2ea3389bc89b1738d1b6208755e3e8f5a0ec207005d6012331dccf2f1fa4ec8beb629e8c3dbce93b868a7b5f8d1591c788d68df52b73657ac1a1ee5202135527614cb54fcc1bec1b7e31cd82853221eb12aa6d39c4fe35109a12600c4d647b0b6c998aaa014754d57b582d3ab386d9298df78afa46a688730eaf256eb885609351d078ff59c0f98407d3e5fd894ba191f2c8f16fa98dce2eb37f9da58ff46a78cc6eda8c973ec40e8974c3037efd27c4d27324c53005600bb0950eebd32deec9d95a7e0a76e3d3d8cd9ba96a636734f9383655e114e08413a4632b86dff17fa5d1a22a5a238d27fa711235194abf69eae05500485958ad7ba98293a6eab7872e3a06e78f71d387d5206eb61db18b4c2d60ff1180742de3f01089a73825eeca8c2e808eb019342ca61c266a64c241a9e90ee16fde5fb2f38d0c9a4551eb76fa7622bf401c4c1077ba6d0cb7da7e7ac8b20802c8e2a0c4533e67a0c6f24fc016c859af15d966a393d06cb73707ebfb3da458bb6ad8e064efad54fd15e7983863def30e9146329c82ab2fcc2bc437b3e482d217dc7cb25734428f35cecd51ed82044c8e184d7c50bef2f67ae49d4217ad335ffe0592b65d1bbdc6b59bd416d716636bc29a9d4d8d871c06cac56b1de6cad0d8a71d5146347af1a79bc710a7a769f64ceef2769e135990278c19f099d42d064142e90bd100b71900ba28da23a9a2b808b9973f67827c6b3522f53bd2959668780b25999d7bc95f273740318010a094762f3d1f9521ef6b2a190723f2c97cb9d247b71371028ebc8bb7e006313df0992d143ba6cc1536c6260a966a913f0f1dc4ab507ebf4ec56ec10ae735934f08e75540ae918db80d24f488282ce638c5c7b47a2f1baf67d6c5ad2bd646bcd8771906f7379885d9a07637c04ca30d29fffcb57103ccb99807445d0e2e3dd78ceb55cf87679888ae72a2845cb843ff73c8a4beb9c7ed4ba1714915568721f1bd1319ccea9806da1b228715e3f04f5ae000a46ae6ccd133c60095bb3c397de08e8a2cb1419677124fb882c59d99406c49395cbf3e4eac046c321d1fc531a9f4f45ce9752bdf703aa50f408dc3cd97c75b7e852b2d7ec734c78e2d00440ed859b15f6fc2e605ac7d715486fac0a1b398c519e8dacc105200293583ce55afe725726f5e6bfc91ea90990d0fdec0c12ab5ab18e0fe2d6c94ff6990e048c9a18122286d4924bc3ad2524713f5dd771898b0df7c69e666c122bf61a82dae9bc05e1ba0c4e458332a384fdc1de2ec1790988856b185fa66c5975b8966ad107d22381a07a022abf59d4fed2142745114e8aca8903ef358986a086cebdcda535b5f0814164c2243c4832e90ef81ee004c6e731d2f517bc537b3887bc9c877743bdb9877cecef3a30c2cff7db6712061e6f06131c5015c348dbe48ce569247b8945aeb3dee5d85ead78bcb0cb36f3887f45273b19227bce77ace95cd4662c60619a7d47eedceda47c5babc44cbe394f7d5af2cbf24922806d0475bd0f862fc22b1e1496b02bb56c7dd42be6559c96d1fd84639bb4288a09144f872eb57b20db9f79af4d45853219a855cd4177bd4c6033df58416b880d5444a45c84e1ba63b2d1da8a8b95173f29913766644aeccd246b5cfc317885a972c0f46ab4ade98999adc1dd1d688efde9a360d91ac824f8cb7b6d7b367292574cdfc744c8ea290137f384a7bebb18794340729e7b06a00c1628b783540d9edf09c72d0329667b53f19d6831b4b944868630cd039621c4ff047c0ded8b267bb7474a6c8e687750ade2e8014c7ee2d1ac0d3ac1646f73109169470d85a6ef6830c3fb2c4d77c7e0c749f1f265430d4bbf4977f81a8b0efdd78b9f668f2c48f8229c10496fe8245619ec121438fab495143699d57699b897b3899cc024d92945f7a950689571a9766d92241724b3e083c0ddc70b53317eaa84fd1879f624042ed8e4f094c91aba5a8d50a02065f45661843cb49e6c339a2a2910bced1416dc34a5ecea965768f7a328b27e69ce54576d6b693cde9e74447de676a6bf6d37cff69ee0c06db0cfb3d6288465937f9ebd4624a20f8cec693a2986d8a97d0fb5b681b6dfb0529e9596897bf6d22d983d615ce4633c6bb200ea45a9146aa7f1b620d1a42cf38942bb2c8c9507d69f8f8e0628a577a01f6b607d9f95be3172ccd682d2073694db47322c41b5c71e388fc70bb18d6d0c2d155b6fe6c0cc0fd8233738240713c4b07fd72796741a4858ed0c183732525ee0414a50375c385b1828554bc9595c127e615c02dd133cce4b7303be02a4a4220c1860a79cffecd84b523ed65b513789b0682897ab0ae69795c0e400f1d254409c5915d8f3a90aab92ec583d79e1f2412a5b7cbacaed552fd183c44192a022c0157cad058e742637e204827ce2777fb9c30c53ef655985ef550cb3bc011046358dae288c00375c64bed4eb26cb9a69476c11ce239edc58b33308a5cdf5ab471716b6e88263ade752cf5f11c30acfa557a71f60ea74de57d647c559451ebb488dcca40adf2457107452d601205d75853ee5e7558a7ed68843d83187effb1548a833564ed33957de7fa28c9d66eabb549b0f577bd6c2d75e35408ddd7bbeab37e0c846a19b269af02836e41387cf7f7cbfec49b89afd19453aa8970b27f8d7931e76edd56c94465a4a54f1636cefc59fd16f83e0416fe6f0de3d8e608996a5c930a33b77266f37aa4c27c208dc228de39eaf857e6cf1e0bc1fe38da0ed51af7bc7b8c314146e538a1654aaad0a393cf18b568726247221993d5b96e5063dbf3f8b0df58bfd746271fee57a10e195e600daffa769831a51d77cc9b22b4cab084f07b3a0acf94dae9945c84ae5da72e195de6f7fae8caa152b502023b67f2f740c84f61b64ded0eb8516437e9450e3fe7cb53e9c58e108a9bda4f4f09347450085122b4e227f10577f05538ee809a5dbc69b47c8ecd74e30290c18e0edfa4a4df8bf4e1042c080d6410626f7adaf1feb9ec12283732d312e708fb7c4eb3c2d46209b2a4dc65730bc4ab8067f19dd2f2e6b6e65a81a16225b6593d91bfd15f95dd2cde6cbf3c6013bf5c90274c78491a9697aaf7a630d9a897f033933da400e75ecc3dffad5b5c92a3cd54839d86a46aec1f92914c6f127aa22d58a5769afaede5efea3b62fc3245ef9e4909a6c41577448eff4358d37085af907bfc97a02b4e9269d3415805d2d25fc6a6921efa42d9d497963305b76e7a3de6bc98c8c787a95a2ab5b1d843d01d14c0e55a3a099f7af2dd091490bc93756dada22f63b96602a34096467295818640d7b79e0175ee2ae47f124f972c05b680bb30ef95bdeb4edf2dc51304b4f853683f86b29a4f8caefa59fdfaefab79fd7ad89cb7f3ccc6a67796b652d63988542a3c365b9e549b1b385058380d7452eb8ff23ea8d6e15f277d79fc5b47c546d00da08207681e7d14ef8e12462a2b59d60703656e0f0862fc88a32c151168aa88ab2b6e74dbbaabf8b35d90d9895d2cf0f64e56d5360d042d9cc38e7fe805a3882f576c7eec459754dafce8284f89fa9143d3773f02303e621a5ec2b6c5bfc6eb2a620c9c7a69d909787d622b281723de945e0f70a0e4154a865013d7844c9c971b932167697c5b46c20f8338242f75e9a0ea8a43ba9dd58363b3ac51c477f2ca955bf5533d8d07c610434b1cdea44aaf0e1d72da42cc26632b6fb92d0f2c06ff5aed3fdf4d3cdbf4acb625c00bcf665b086a41b22a9d36cd6739bba448dcba224eef00760d020cbe61db807bd0f6c4142e698b3f9012a4937c5b054a6ffe79daebe53b1d29714f0b8121e68b28cca85970df2e80e70cc35c90e46f26722238cdf66972d038f1072ce89acb5347e47b8191a6a7bd389e8f1df276026d3f0c58e19c76a6486308fffae4832e00214a2b69e15ce92c403bdb6471b9599754bf9db9fdd40ac3b75b4ac509b54668e7af686eeb5df53a408b5137d5b67d1f7674a9c7abf8d19d07454f015a28e15036a6b74eb46448a7f2545a3126ac4af63456655577f9f42117c0151a1252f7053544fda26b01489cf368cb9a3fe3849322a1769a65a4bf81d495960b0ac1a2bed46d9634e6077608a6c4d6362f62780e13dbdc7b1bfdc47bbbba0829aa604e5c60dc4227dff11e743f6304a00f0811f311528d04fbd5f78cb57e4d99128eaa9c7675b50a961cd4c0cb14b01e295644eb3021100088f781c8c063abbda68edf5ed1fc2fa396832166ad0f978eb39efda19cc03895bdc8023601c3b9c76e5abe0fe191e7e8e3db2f8d39c2307d64d0de75c5782a390a6364514abd50cae2940f73c2be95a4cd534209cc2a57d36825ca57d18228139a49d2d0f4ec741485668ff67ca3659005f2ce17aa1b72ebd4d8a8c965ea2ee69620d324ed89a9353e1ec49a702ef7b938ef39066146322f68e519ccc50c202804679dc2f6cc724417a21ebcaa46801ae875255075e9e02c6b2e99270b6104b1d8077edf85021b9835b29a9c2d89b57d65a6317f19814d6bed46c212c463a6d773d5444bf1372914f34a24e0a75c018b227eb04a48ebe168f8dbaba9c87d651ff7d5fc11fda7095cd45f2650ba967c287acab9bc56073112f75233182b8c1e7e92a7092e68a9be095a441ace9850e4570f39079258b667262273a52e0e6b7cc3de1ef858fe78cdc1af5b5c07327dc19b0838f44b5e0e19e1af51ba71a5fb7c8c0e30337afad347307e3389024c4d13b9ba31f70b6f740a768a97d3cef2c5950216bc4b3120aa06577ef2e8da13814410437f4d2360c8ee1aee97a6294a1dd8e59d33b2e051bc1b3bd4bf5df16c2d6b0b7609a1ee4e5804480a84b19521440e2c03ca023ca5c4eb3a554c8edfcdb2bfc91610af6123df33424480b8dee282ef3d7759c7594f2eab6fced45c0757c20601e8cc6247b4ccd1590887dd47921de6673fd1f084efeef6ec2a9b9a80176ea25b276dee92e6d3dd38cf4c5d4a2c970198163f3675665e30eb8345bea3f47db3ee7fa12b38817d59bd117c372c211565e03cf6b5bd10964f79b4cd101b93c37602e0a2efb36dbe96f727e4468c28428e4a8299f1c4bf09cbb0708ea09c6dd5af131f3fa6d07a92520adf6bd525c284e2c181bc7808cf293b78d148a7b560eabe78dd464984f361177b284d68be423dca5e73a7c097d0b183d0beee0b68d7dfb29648df3d7f0ab", 0x1000, 0x20000000, &(0x7f0000000040)={0x11, 0xf6, r8, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

5.134743886s ago: executing program 0 (id=782):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fadvise64(r0, 0x4, 0xb, 0x1)
sendfile(r0, r0, 0x0, 0x7ffff000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
gettid() (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
fadvise64(r0, 0x4, 0xb, 0x1) (async)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)

4.22587113s ago: executing program 0 (id=792):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008800)
mount$bpf(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x800800, &(0x7f0000000380)={[{@uid={'uid', 0x3d, 0xee01}}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
syz_usb_connect(0x3, 0x83e, &(0x7f0000000600)={{0x12, 0x1, 0x340, 0xb9, 0x11, 0xda, 0x40, 0x1608, 0x305, 0xb889, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82c, 0x3, 0x3, 0x2, 0x10, 0x8, [{{0x9, 0x4, 0x6b, 0x4, 0xd, 0xe1, 0x60, 0x47, 0x3, [@uac_as], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0xd, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x68d}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x3, 0x0, [@generic={0x22, 0x6, "636f5d201f0f090d0d4b1b9bf57d6e3933f7de3a4271797ebef99d82d824a8e3"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0xff, 0x8, 0x10, [@generic={0x91, 0x1, "0829ea0794a62a08171b524da668c04f19c05545b94e37019266f758cbfc7ae5006daa6a816b461575eeb18714e4ab583af38de905ac05d6b97e247269fc08deee2eb1ecf0c93ba6ac0e56071c65cc46cbef0552da4b777b3bd87d269fc61e2d119bb407fd9a19b7eb9b9d2bb3f0b423160265bc33f57e4ff0fd8c42e66240354e538adbf23fb60fdf7bf89d25027b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf9, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x60, 0x6, 0x4, 0x2, [@generic={0x94, 0x1, "c2e6e3f36789076ac6ad2d401b0e5e6e467ab767be5ad445832e2cfc2c3d6042b51b0b8e060d8881b21035df976675fd20368ff7e46beabefeb0745095c3c1fe93955f1722dfc1eaf678162e622d684384621e3ecf71e45757a08a3fe894a371d67a3c678629bc496042dc64da2cbf5cd94fa9ee2bc2db736799bf38bde508943b6e658c65c8b56c8f6439ed84d09db728ef"}, @generic={0x1b, 0x10, "efddab94cbd33c8370729d48ca41d8ff2782f48e0a7d479378"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x8, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xc8}, @generic={0xa3, 0x30, "3397d1de36e1a324ce444b7ed2dd0c667d3320a857a39f3769f3e0157d1ffc98567cccb5bff94d4e7b19433f4e0398978efbe9ec47a3f7c2e87ad7897dd126abffb3697de6a2d21f3feda5b2909815b3fd311862c8f84022eece53bd5f816cb908fb0354b61ef800939475bc3ae0889f2dfd497763c4e6b3502c4f27d0d99dfd94c693a0c482b85caf6d0416c7f08079b1064715291ad0590e527d3a4d4d8aa667"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x7f, 0xa, 0xa, [@generic={0x6a, 0x0, "0fe5ec927999810432430a20068161bc01e528986a5db8c541ed427593c60214beb22e07940dbd11be51516d19c0a9ed08465cec87251f4f4864ec1313ca7c5be31e01f050940da0fa2af747281deacf8fa94764a148cd61aceef7a8b6a603af9c0e5ec480284f44"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xfb, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x4, 0xa2, 0x9, [@generic={0x87, 0xd, "03a14e1453d4b898f416e20236fd7f785e1df10513da8f20efd2137bcee3ada2c847e0b6b6864eba414c5635ff6a57d20663d6f29c5d4cff8edcbb10f82e15500f70e765cd7e8739e332307e194517fffae0ae8fbdcb3e47a2d19a0dd5f069bea8d2d57211c5f6ee69f8352186a7a1bd9ad6ab40a1fd049b5ec3d3674a418230ee9a375a98"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x3}]}}, {{0x9, 0x5, 0xa, 0x14, 0x40, 0x4, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x9b, 0x5}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x9, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x3}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x0, 0xd, 0x0, [@generic={0xdb, 0x21, "9db59dcb9b96d4af87e24fb6099016870a84cf4fdb39b783119d2cde038ce9962ca916a211abe885db37a6e749f76f99bfc90642f5d7aa8d254d9a200ce85b6096d0de7493e3aa9da516dd5b733e5a1ade93af341a680362a24cb4fee5874033cac95b0a0774056db11bfb5d29ed727e82e5418e4070f4827bed3c212fa17ead1c39005e7ce2025997f3aee14dcd2e308f2fab7ae5812c33b4e99535138370ae7498e7e16015c350457d6a27d41437570ec6e8c941aeac018d41f98c0669f6886ce33f188774f8d10e90eab732df26756bd46392944a710377"}, @generic={0xa4, 0x1, "b92cb9ea6d15115e698beabe130905213c38f9a9ea50f21d1bd50849fdf91509fa5d7a1545cb1977057a37ed10b8619abe47a039b6fa20e9a384429b0c46ae77680ba2ded6caa967f12ab971e077cec22f4b65b76480a01ecf4d88ea80f5ef121de6f74809b239ae1420ad9bdacb08025f17be2a4a6af958e662339172a9b1ece4f78526b7c64f623128700edeb65683d9394370d4f38da6944e2cdb43338a7d7cc6"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x8, 0x4}}]}}, {{0x9, 0x4, 0x13, 0x1, 0x1, 0xfb, 0xb5, 0x24, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5c, 0x3, 0x57, 0x5, "c3"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x0, 0x40, 'x'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x0, "90fb588e315ed6"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xee, 0x6, 0xfd, "76ac8e62a0"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xb, 0x4, 0xed, 0x3, "9b69996e8b7497"}]}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0xd, "f1dba89d6bc4a7"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x8, 0x1, 0x80}}]}}, {{0x9, 0x4, 0x9f, 0x2, 0x9, 0x3a, 0xc0, 0xde, 0x1, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x10}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0xef, 0x3, [@generic={0x53, 0x23, "c76546efbaaf5383b1b5f926ee950b24ccaac2a0f419f7c8e7d2f4e4959a545eabc84d12ec5a9b2ab9a58945216c232cf86b810940d9d4a495bd730e8b960a67ef4c011b99ecd12126880fb06755cdda04"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x80, [@generic={0x94, 0xa, "65694f20e3945fea38780a55711b415e12a88986a2ca1748800d74c737114aff33af70f9789e11d56617193aef11397b08c579013975a212d9a68b936788ce0964ea237584347159eed1cc0ed9385a2285d7860e4b52a5f31f71a7341368f57ede0e87cf0c054304b8d582293dc7abf62defd26702dc5bbf870a4a6b9b246c3df5ea4c5882bda17b6ba14220413a47ae8760"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xffff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0xc0, 0x9}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0x81, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x3, 0x5a}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x71, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5d, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x49, 0xfb, 0x41, [@generic={0x8f, 0xf, "7933e9661a277f116f7322e55e0cf670169a68a81a009ec98f9684df99676e464a05848f23557fc91627514297d2fa6d19df22360dafaaf2efa7eff05c4e7e13e01d415c75aec66f453cda2e9403b3d0073d14a8a7f356b797ff782f1739c88a8625165cfbfd98e22cb03c0ded604afe4f09beaa4a8f268f58e05c767bf271ddd4954c51e6b3385fe8ffa4f6e2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x5, 0x3, 0xf, [@generic={0xa5, 0x22, "301a19daaed930f4cd6773f3088203e374fec8ba3dc786ba6171e1514babaff8deebac11150c6b6b1c574719eaae84c7a9b0170a5628ec3c9c85f37dd56ae9b5281222e2df64df1d9b7ead17efde31e1f5a52ee9f3413ea186b73d8f2c38f6b3a88b79f4cd0aa4d6fbf1eec2f719e69bceda0109d16bd769cedf011e3ff4549557298242c726fd2a8f47c075e1813c26e4653ac6842c1c2d6f9ae7893d517be2fa9c1c"}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x80, 0x98, 0x2, 0x2, 0xff, 0xb}, 0xc1, &(0x7f0000000200)={0x5, 0xf, 0xc1, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xf68b11058a67b927, 0xa, 0xf, 0xfffc}, @generic={0xb, 0x10, 0x3, "4550e90f90c89a31"}, @generic={0xa4, 0x10, 0xa, "c28ae4cfccbe59ffb6fd60e4939cd34491a22e896722ba54a13dae5b83aa7e0d637b8391f1ecea1f72ab8de6417686c577c5171067460e9f4613f41e9b6b2e38cfe659f5493346b92ac3c2fefdcdffd5d701e54c2d576bde4f61af8a75dfad6689fff6deaf724c27db2e36c8a0b81e9f9deb1bff3a0ce38153524f6fbafc725aaeb031d873872fad4ad8cf7e674163ca36a299eff601a57eb784654914c39b0f28"}, @ptm_cap={0x3}]}, 0x6, [{0x51, &(0x7f0000000100)=@string={0x51, 0x3, "049b913116b6c2dc252f5bb7d3284ce5e4b015215b2f6baf9a58c87571a66e862e974ee5488aaf90af2c88338a07dd6f7cecc4a429a424401051b5dc044fb823c6cae6e8f65267c6a21aa42fa872c4"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x445}}, {0x71, &(0x7f00000003c0)=@string={0x71, 0x3, "8cf7fcf112988110b29e0661d12b68a3e65b4abe2f36d34c49b1ca46d5322c9046256c592e2e82b17637044ad67435aa561bc1075a62ca8f65081464d200e788b044ffcdf4fae3dd430f37761a0868c3b4c0693c3cc8bc0d38c0c6b80ac75b9162572d7ea2168d473f9b3787f4b9d2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x703f}}, {0xea, &(0x7f0000000480)=@string={0xea, 0x3, "6b087b61929cdbd639cb4cb0858b770dde2ccd74ac5134a408d829502c852edd756a2df0c30991a5b4ff7fefb4824b7be0a0696b321f882db48efe3bb9f16841397a083fa49df792adc5e81036e788f0c2547cb3200e0fdcacdc9b231b13452eea5ee660c0265d361bf1b2fc478d3eb94c50c59c0d09e7009e7b54640e470d70ff78f1682aac0f08c886d0616b1506cac4304a8ea4a32155c5aad19fbaa65afeb91bff3f109c11ea0cdb01922abe19bb01c200d4481455f19f353b8f17a466edd9ab5bf448828b1750d097410c99fefaefd79815bad486dd924c92807fc33bf3c61cf2cb5d99fc9b"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0c}}]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]})
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe})
read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020)

984.065741ms ago: executing program 0 (id=816):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00')
pread64(r0, &(0x7f0000000480)=""/14, 0xd, 0x8000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x5)
read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
memfd_secret(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1002c82, 0x0)
syz_open_dev$evdev(&(0x7f0000000280), 0xffffffffffffffff, 0xc002)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x5, 0x0, 0x31}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x0, 0x0, 0x0})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000300)={0x6, 'wg0\x00', {0x4}, 0xfff7})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x20}, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000002500)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x46, 0x2bd, 0x10000, 0xb26, 0x7f695b25, 0x0, "42f4a34a5cb61b338968c0cfc494bd3499c10330585b0acb28841a765d4bf950396932e6cd03c02738198a62a536c17efec43800fae03769239a54735b055969a35465552c40"}}, 0x15e)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

876.099679ms ago: executing program 0 (id=819):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
futex(&(0x7f0000000180)=0x2, 0x5, 0x2, 0x0, &(0x7f00000001c0)=0x2, 0x6)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0xa1, 0x6d, 0x2, 0x1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1, 0x0, 0xfffffffffffffe47}}], 0x1, 0x400120a0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000080))

872.51278ms ago: executing program 3 (id=821):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb984"], 0xfdef) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1b"}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x4, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x51, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0x6, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x2, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x4, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) (async)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r6, 0x0}])
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) (async)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
ioctl$TCSETSW(r8, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) (async)
ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000026c0)=0x3d) (async)
ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"})

854.195171ms ago: executing program 3 (id=822):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0)
mlockall(0x7)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3})
io_setup(0x101, &(0x7f0000000a00))
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
fcntl$setsig(r1, 0xa, 0x30)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201"], 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
sendfile(r0, r0, 0x0, 0x7ffff000)

812.329725ms ago: executing program 2 (id=823):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

812.098355ms ago: executing program 2 (id=824):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x2})
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x101)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r5], 0xfdef)
write$P9_RAUTH(r5, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x80, 0x2, 0x8}}, 0x14)
dup(r0)

579.161794ms ago: executing program 2 (id=825):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x2002, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffb6) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

530.199558ms ago: executing program 2 (id=826):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0x91f, 0x0, &(0x7f0000001480)="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"})
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

460.476553ms ago: executing program 2 (id=827):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0x91f, 0x0, &(0x7f0000001480)="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"}) (fail_nth: 1)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

335.956714ms ago: executing program 2 (id=828):
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x80084504, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000001300)=0x7fff, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

217.681453ms ago: executing program 3 (id=829):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000d00)={0x2, {{0xa, 0x2, 0x5, @mcast1}}}, 0x90)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fff}, 0x1c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0x91f, 0x0, &(0x7f0000001480)="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"})
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

198.208254ms ago: executing program 3 (id=830):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x2402, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002c80)={0x30}, 0x30)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x3, 0xfc}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x3, 0xfc}], 0x0, 0x0, 0x0})

140.272939ms ago: executing program 3 (id=831):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000005080)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

140.053769ms ago: executing program 3 (id=832):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup(r4)
getsockopt$inet_int(r5, 0x0, 0xd, 0x0, &(0x7f0000000400))
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=833):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x7cab6ced641560b, 0x21})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xb)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3, 0x1000000}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts.
[   22.611734][   T36] audit: type=1400 audit(1755978442.860:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.613234][  T281] cgroup: Unknown subsys name 'net'
[   22.634414][   T36] audit: type=1400 audit(1755978442.860:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.661806][   T36] audit: type=1400 audit(1755978442.900:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.662139][  T281] cgroup: Unknown subsys name 'devices'
[   22.847595][  T281] cgroup: Unknown subsys name 'hugetlb'
[   22.853262][  T281] cgroup: Unknown subsys name 'rlimit'
[   22.967948][   T36] audit: type=1400 audit(1755978443.220:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.991253][   T36] audit: type=1400 audit(1755978443.220:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.016067][   T36] audit: type=1400 audit(1755978443.220:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.028298][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   23.047976][   T36] audit: type=1400 audit(1755978443.300:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.073484][   T36] audit: type=1400 audit(1755978443.300:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.111986][   T36] audit: type=1400 audit(1755978443.360:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.137636][   T36] audit: type=1400 audit(1755978443.360:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.137786][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.916461][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.923561][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.931014][  T288] bridge_slave_0: entered allmulticast mode
[   23.937438][  T288] bridge_slave_0: entered promiscuous mode
[   23.965406][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.972454][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.979572][  T288] bridge_slave_1: entered allmulticast mode
[   23.985914][  T288] bridge_slave_1: entered promiscuous mode
[   24.107597][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.114660][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.121835][  T292] bridge_slave_0: entered allmulticast mode
[   24.128125][  T292] bridge_slave_0: entered promiscuous mode
[   24.134316][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.141656][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.148899][  T294] bridge_slave_0: entered allmulticast mode
[   24.155360][  T294] bridge_slave_0: entered promiscuous mode
[   24.163191][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.170308][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.177435][  T292] bridge_slave_1: entered allmulticast mode
[   24.183768][  T292] bridge_slave_1: entered promiscuous mode
[   24.193372][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.200495][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.207696][  T294] bridge_slave_1: entered allmulticast mode
[   24.213989][  T294] bridge_slave_1: entered promiscuous mode
[   24.250661][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.257811][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.265340][  T293] bridge_slave_0: entered allmulticast mode
[   24.271597][  T293] bridge_slave_0: entered promiscuous mode
[   24.279825][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.287025][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.294082][  T293] bridge_slave_1: entered allmulticast mode
[   24.300425][  T293] bridge_slave_1: entered promiscuous mode
[   24.363821][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.370919][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.378227][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.385284][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.474977][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.482043][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.489379][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.496502][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.510541][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.518072][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.525382][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.532423][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.560244][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.567822][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.575942][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.583109][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.590464][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.597950][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.628137][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.635246][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.643631][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.650848][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.660095][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.667165][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.679216][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.686298][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.717341][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.724414][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.732960][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.740041][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.766306][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.773467][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.781167][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.788338][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.799757][  T288] veth0_vlan: entered promiscuous mode
[   24.820492][  T288] veth1_macvtap: entered promiscuous mode
[   24.847582][  T294] veth0_vlan: entered promiscuous mode
[   24.860829][  T292] veth0_vlan: entered promiscuous mode
[   24.885145][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.900735][  T294] veth1_macvtap: entered promiscuous mode
[   24.910680][  T292] veth1_macvtap: entered promiscuous mode
[   24.923811][  T293] veth0_vlan: entered promiscuous mode
[   24.969838][  T293] veth1_macvtap: entered promiscuous mode
[   24.998959][  T335] Zero length message leads to an empty skb
[   25.036806][  T337] pim6reg1: entered promiscuous mode
[   25.042165][  T337] pim6reg1: entered allmulticast mode
[   25.137938][  T346] bridge0: entered allmulticast mode
[   25.153759][  T346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'.
[   25.167479][  T346] bridge_slave_1: left allmulticast mode
[   25.173163][  T346] bridge_slave_1: left promiscuous mode
[   25.181758][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.192869][  T348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.210777][  T346] bridge_slave_0: left allmulticast mode
[   25.216503][  T346] bridge_slave_0: left promiscuous mode
[   25.227568][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.252749][  T346] bridge0 (unregistering): left allmulticast mode
[   25.724894][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.884827][   T10] usb 2-1: Using ep0 maxpacket: 16
[   25.896105][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.908277][  T366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   25.914213][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.920683][  T366] x_tables: duplicate underflow at hook 1
[   25.929779][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   25.945087][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.957865][   T10] usb 2-1: config 0 descriptor??
[   26.024930][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.124093][  T372] bpf: Bad value for 'uid'
[   26.185924][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.195974][   T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   26.205394][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.217556][   T45] usb 1-1: config 0 descriptor??
[   26.367503][   T10] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0
[   26.380545][   T10] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0
[   26.388125][   T10] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0
[   26.395563][   T10] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0
[   26.402976][   T10] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0
[   26.464933][   T10] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found
[   26.473235][   T10] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found
[   26.578195][  T333] usb 2-1: USB disconnect, device number 2
[   26.635625][   T45] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[   27.135093][  T371] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.167540][  T386] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   27.174891][  T386] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97)
[   27.175012][  T386] rust_binder: Error while translating object.
[   27.185724][  T386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.192010][  T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[   27.211166][  T383] rust_binder: 384: removing orphan mapping 0:1048
[   27.236357][   T45] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71
[   27.245088][   T45] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71
[   27.263920][   T45] usb 1-1: USB disconnect, device number 2
[   27.307460][  T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.325937][  T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.346474][  T371] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   27.366500][  T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.385547][  T371] usb 4-1: config 0 descriptor??
[   27.626353][  T371] usbhid 4-1:0.0: can't add hid device: -71
[   27.632430][  T371] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   27.650150][  T371] usb 4-1: USB disconnect, device number 2
[   27.688318][  T398] __vm_enough_memory: pid: 398, comm: syz.1.21, bytes: 18014402804453376 not enough memory for the allocation
[   27.731804][  T400] rust_binder: Write failure EFAULT in pid:19
[   27.763180][   T36] kauditd_printk_skb: 63 callbacks suppressed
[   27.763201][   T36] audit: type=1400 audit(1755978448.010:137): avc:  denied  { create } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.817007][   T36] audit: type=1400 audit(1755978448.070:138): avc:  denied  { setopt } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.838867][   T36] audit: type=1400 audit(1755978448.090:139): avc:  denied  { ioctl } for  pid=407 comm="syz.0.24" path="socket:[4337]" dev="sockfs" ino=4337 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.864259][   T36] audit: type=1400 audit(1755978448.110:140): avc:  denied  { getopt } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.865056][  T409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=409 comm=syz.0.24
[   27.898566][   T36] audit: type=1400 audit(1755978448.110:141): avc:  denied  { write } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.907517][  T409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=409 comm=syz.0.24
[   27.920885][   T36] audit: type=1400 audit(1755978448.110:142): avc:  denied  { nlmsg_write } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.934597][  T409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2305 sclass=netlink_xfrm_socket pid=409 comm=syz.0.24
[   27.951758][   T36] audit: type=1400 audit(1755978448.110:143): avc:  denied  { read } for  pid=407 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.966804][  T409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=409 comm=syz.0.24
[   27.997979][   T36] audit: type=1400 audit(1755978448.220:144): avc:  denied  { ioctl } for  pid=407 comm="syz.0.24" path="socket:[3557]" dev="sockfs" ino=3557 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   28.032680][   T36] audit: type=1400 audit(1755978448.280:145): avc:  denied  { create } for  pid=412 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   28.052404][  T413] rust_binder: pid 413 performed invalid decrement on ref
[   28.066232][   T36] audit: type=1400 audit(1755978448.320:146): avc:  denied  { create } for  pid=414 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   28.183472][  T424] mmap: syz.0.30 (424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   28.218006][  T432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32'.
[   28.227126][  T432] netlink: 'syz.0.32': attribute type 6 has an invalid length.
[   28.234701][  T432] netlink: 'syz.0.32': attribute type 5 has an invalid length.
[   28.242662][  T432] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   28.251130][  T434] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.275062][  T420] =======================================================
[   28.275062][  T420] WARNING: The mand mount option has been deprecated and
[   28.275062][  T420]          and is ignored by this kernel. Remove the mand
[   28.275062][  T420]          option from the mount to silence this warning.
[   28.275062][  T420] =======================================================
[   28.350398][  T432] rust_binder: Error in use_page_slow: ESRCH
[   28.350417][  T432] rust_binder: use_range failure ESRCH
[   28.356499][  T432] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   28.362032][  T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   28.370129][  T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:17
[   28.438189][  T449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.483538][  T459] binder: Unknown parameter 'fscontext?}'
[   28.534000][  T466] overlayfs: failed to resolve './file1/file0': -2
[   28.580428][  T469] incfs: Can't find or create .index dir in ./bus
[   28.586990][  T469] incfs: mount failed -1
[   28.592770][  T469] incfs: Can't find or create .index dir in ./bus
[   28.599539][  T469] incfs: mount failed -1
[   28.618829][  T469] pim6reg1: entered promiscuous mode
[   28.624249][  T469] pim6reg1: entered allmulticast mode
[   28.651412][  T472] binder: Unknown parameter 'silent'
[   28.658399][  T476] tipc: Started in network mode
[   28.663356][  T476] tipc: Node identity 100, cluster identity 4711
[   28.663768][  T474] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.670425][  T476] tipc: Node number set to 256
[   28.671473][  T477] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.688295][  T474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.701329][  T474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[   28.787366][  T488] netlink: 'syz.3.48': attribute type 4 has an invalid length.
[   28.811365][  T494] tmpfs: Cannot retroactively limit inodes
[   29.035420][  T520] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.035482][  T521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.042205][  T371] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   29.042537][  T520] rust_binder: Failed copying into alloc: EFAULT
[   29.056275][  T520] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   29.062681][  T520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   29.071278][  T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57
[   29.103825][  T383] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   29.201117][  T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   29.212108][  T371] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00
[   29.221153][  T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.229973][  T371] usb 1-1: config 0 descriptor??
[   29.235313][  T487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   29.274974][  T383] usb 3-1: Invalid ep0 maxpacket: 16
[   29.381872][  T369] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   29.414021][  T383] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   29.543711][  T369] usb 2-1: unable to get BOS descriptor or descriptor too short
[   29.551831][  T369] usb 2-1: not running at top speed; connect to a high speed hub
[   29.564591][  T369] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 34879, setting to 1023
[   29.567683][  T534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'.
[   29.577711][  T369] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   29.584601][  T383] usb 3-1: Invalid ep0 maxpacket: 16
[   29.593989][  T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.599805][  T383] usb usb3-port1: attempt power cycle
[   29.608907][  T369] usb 2-1: Product: syz
[   29.616770][  T369] usb 2-1: Manufacturer: syz
[   29.621569][  T369] usb 2-1: SerialNumber: syz
[   29.674514][  T371] wacom 0003:056A:5002.0003: unknown main item tag 0x0
[   29.682164][  T371] wacom 0003:056A:5002.0003: unknown main item tag 0x0
[   29.689067][  T371] wacom 0003:056A:5002.0003: unknown main item tag 0x0
[   29.696218][  T371] wacom 0003:056A:5002.0003: unknown main item tag 0x0
[   29.703260][  T371] wacom 0003:056A:5002.0003: unknown main item tag 0x0
[   29.711251][  T371] wacom 0003:056A:5002.0003: hidraw0: USB HID vf.3d Device [HID 056a:5002] on usb-dummy_hcd.0-1/input0
[   29.900824][  T371] usb 1-1: USB disconnect, device number 3
[   29.901868][  T369] usb 2-1: 2:1: invalid format type 0xaf4f is detected, processed as PCM
[   29.920231][  T369] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   29.932210][  T369] usb 2-1: USB disconnect, device number 3
[   29.943114][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.981490][  T383] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   30.002555][  T383] usb 3-1: Invalid ep0 maxpacket: 16
[   30.141195][  T383] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   30.162881][  T383] usb 3-1: Invalid ep0 maxpacket: 16
[   30.168309][  T383] usb usb3-port1: unable to enumerate USB device
[   30.235269][  T543] overlayfs: failed to resolve './file1': -2
[   30.243300][  T543] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure
[   30.460701][  T557] tmpfs: Bad value for 'huge'
[   30.751739][  T371] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   30.799127][  T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78
[   30.799205][  T579] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   30.815829][  T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78
[   30.953499][  T371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   30.972844][  T371] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   30.982801][  T371] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   31.102852][  T371] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   31.136255][  T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.144290][  T371] usb 1-1: Product: syz
[   31.148627][  T371] usb 1-1: Manufacturer: syz
[   31.153302][  T371] usb 1-1: SerialNumber: syz
[   31.159763][  T371] hub 1-1:1.0: bad descriptor, ignoring hub
[   31.165695][  T371] hub 1-1:1.0: probe with driver hub failed with error -5
[   31.375923][  T371] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   31.404911][  T371] usb 1-1: USB disconnect, device number 4
[   31.411243][  T622] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.411833][  T621] rust_binder: Error while translating object.
[   31.412313][  T371] usblp0: removed
[   31.420463][  T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.431729][  T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   31.511572][  T626] netlink: 'syz.0.100': attribute type 13 has an invalid length.
[   31.546941][  T628] netlink: 'syz.0.100': attribute type 13 has an invalid length.
[   31.718807][  T638] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   31.730981][  T641] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.751380][  T640] overlayfs: missing 'lowerdir'
[   31.758489][  T640] rust_binder: 52: no such ref 2
[   31.763526][  T640] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   31.770609][  T640] rust_binder: 52: no such ref 0
[   32.066044][  T645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=645 comm=syz.2.107
[   32.080071][  T645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=645 comm=syz.2.107
[   32.092811][  T645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=645 comm=syz.2.107
[   32.150959][  T662] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.151124][  T662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49
[   32.158037][  T662] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   32.365444][  T371] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   32.515126][  T371] usb 2-1: device descriptor read/64, error -71
[   32.554398][  T671] 9pnet: Could not find request transport: fd
[   32.657772][  T675] netlink: 'syz.0.115': attribute type 13 has an invalid length.
[   32.771807][  T371] usb 2-1: device descriptor read/64, error -71
[   33.028477][  T371] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   33.164679][   T36] kauditd_printk_skb: 74 callbacks suppressed
[   33.164697][   T36] audit: type=1400 audit(1755978453.118:221): avc:  denied  { read write } for  pid=682 comm="syz.2.118" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.167491][  T371] usb 2-1: device descriptor read/64, error -71
[   33.171313][   T36] audit: type=1400 audit(1755978453.118:222): avc:  denied  { open } for  pid=682 comm="syz.2.118" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.224081][   T36] audit: type=1400 audit(1755978453.156:223): avc:  denied  { ioctl } for  pid=682 comm="syz.2.118" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.254132][   T36] audit: type=1400 audit(1755978453.165:224): avc:  denied  { setattr } for  pid=682 comm="syz.2.118" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.264326][  T691] overlayfs: failed to resolve './cgroup': -2
[   33.277511][   T36] audit: type=1400 audit(1755978453.212:225): avc:  denied  { create } for  pid=690 comm="syz.3.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   33.305045][   T36] audit: type=1400 audit(1755978453.212:226): avc:  denied  { mounton } for  pid=690 comm="syz.3.120" path="/49/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   33.307751][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'.
[   33.343866][   T36] audit: type=1400 audit(1755978453.296:227): avc:  denied  { unlink } for  pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   33.368229][   T36] audit: type=1326 audit(1755978453.315:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=692 comm="syz.3.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5628b8ebe9 code=0x0
[   33.404240][   T36] audit: type=1400 audit(1755978453.352:229): avc:  denied  { ioctl } for  pid=694 comm="syz.0.122" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   33.429139][   T36] audit: type=1400 audit(1755978453.352:230): avc:  denied  { create } for  pid=694 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   33.466896][  T371] usb 2-1: device descriptor read/64, error -71
[   33.488283][   T31] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   33.584645][  T371] usb usb2-port1: attempt power cycle
[   33.627281][   T31] usb 3-1: device descriptor read/64, error -71
[   33.883940][   T31] usb 3-1: device descriptor read/64, error -71
[   33.894809][  T383] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   33.948148][  T371] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   33.970705][  T371] usb 2-1: device descriptor read/8, error -71
[   34.055028][  T383] usb 1-1: Using ep0 maxpacket: 32
[   34.063021][  T383] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   34.072144][  T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.080194][  T383] usb 1-1: Product: syz
[   34.084384][  T383] usb 1-1: Manufacturer: syz
[   34.089196][  T383] usb 1-1: SerialNumber: syz
[   34.094420][  T383] usb 1-1: config 0 descriptor??
[   34.109531][  T371] usb 2-1: device descriptor read/8, error -71
[   34.151279][   T31] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   34.290337][   T31] usb 3-1: device descriptor read/64, error -71
[   34.365209][  T371] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   34.384568][  T721] netlink: 288 bytes leftover after parsing attributes in process `syz.3.130'.
[   34.394809][  T371] usb 2-1: device descriptor read/8, error -71
[   34.530834][  T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.540905][  T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.548889][   T31] usb 3-1: device descriptor read/64, error -71
[   34.557627][  T371] usb 2-1: device descriptor read/8, error -71
[   34.633715][  T383] usb 1-1: USB disconnect, device number 5
[   34.675520][  T371] usb usb2-port1: unable to enumerate USB device
[   34.681959][   T31] usb usb3-port1: attempt power cycle
[   35.015397][  T737] netlink: 'syz.3.137': attribute type 15 has an invalid length.
[   35.049568][   T31] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[   35.072026][   T31] usb 3-1: device descriptor read/8, error -71
[   35.194801][  T747] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[   35.194838][  T747] rust_binder: Error in use_page_slow: EFAULT
[   35.207567][  T747] rust_binder: use_range failure EFAULT
[   35.213930][  T747] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   35.219620][  T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   35.227978][  T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:74
[   35.237810][   T31] usb 3-1: device descriptor read/8, error -71
[   35.444329][  T761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.147'.
[   35.453526][  T761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'.
[   35.462648][  T761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'.
[   35.476397][  T761] netlink: 15 bytes leftover after parsing attributes in process `syz.1.147'.
[   35.514030][  T768] netlink: 'syz.1.150': attribute type 13 has an invalid length.
[   35.520185][   T31] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[   35.542548][   T31] usb 3-1: device descriptor read/8, error -71
[   35.562855][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   35.605074][  T782] fuse: Bad value for 'group_id'
[   35.610428][  T782] fuse: Bad value for 'group_id'
[   35.615751][  T780] input: syz1 as /devices/virtual/input/input8
[   35.681525][   T31] usb 3-1: device descriptor read/8, error -71
[   35.733954][    T9] usb 1-1: Using ep0 maxpacket: 8
[   35.740347][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   35.749551][    T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[   35.757799][    T9] usb 1-1: config 0 has no interface number 0
[   35.763984][    T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   35.775558][    T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024
[   35.787198][    T9] usb 1-1: config 0 interface 88 has no altsetting 0
[   35.795999][    T9] usb 1-1: string descriptor 0 read error: -22
[   35.800654][   T31] usb usb3-port1: unable to enumerate USB device
[   35.803052][    T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   35.825927][    T9] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   35.836918][  T819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133
[   35.841020][    T9] usb 1-1: config 0 descriptor??
[   35.867840][    T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9
[   36.077269][  T826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   36.086241][  T826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   36.096641][  T826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   36.109370][  T383] usb 1-1: USB disconnect, device number 6
[   36.265874][  T831] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   36.272983][  T831] overlayfs: failed to set xattr on upper
[   36.278703][  T831] overlayfs: ...falling back to redirect_dir=nofollow.
[   36.285610][  T831] overlayfs: ...falling back to index=off.
[   36.291644][  T831] overlayfs: ...falling back to uuid=null.
[   36.297454][  T831] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   36.396974][   T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   36.558562][   T31] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   36.569077][   T31] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[   36.579811][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   36.586471][   T31] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[   36.595526][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.604119][   T31] usb 2-1: config 0 descriptor??
[   36.609940][   T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   36.759668][  T863] binder: Bad value for 'stats'
[   36.776139][  T866] rust_binder: 90: no such ref 0
[   36.836247][  T867] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   36.843548][  T867] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   36.878859][  T383] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   37.038648][  T383] usb 3-1: Using ep0 maxpacket: 8
[   37.044869][  T383] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   37.054033][  T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.064891][  T383] usb 3-1: config 0 descriptor??
[   37.285181][  T383] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   37.295141][  T383] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[   37.305774][  T383] asix 3-1:0.0: probe with driver asix failed with error -32
[   37.665658][  T383] usb 3-1: USB disconnect, device number 10
[   37.844565][  T894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.844591][  T894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:78
[   38.150929][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   38.182846][  T369] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   38.321876][    T9] usb 1-1: Using ep0 maxpacket: 8
[   38.327056][  T369] usb 3-1: device descriptor read/64, error -71
[   38.334478][    T9] usb 1-1: config 0 has an invalid interface number: 150 but max is 0
[   38.342685][    T9] usb 1-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config
[   38.352951][    T9] usb 1-1: config 0 has no interface number 0
[   38.359162][    T9] usb 1-1: config 0 interface 150 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   38.372611][    T9] usb 1-1: config 0 interface 150 has no altsetting 0
[   38.379531][    T9] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[   38.388616][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.397349][    T9] usb 1-1: config 0 descriptor??
[   38.589213][  T369] usb 3-1: device descriptor read/64, error -71
[   38.618755][  T383] usb 1-1: USB disconnect, device number 7
[   38.845871][  T369] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   38.984885][  T369] usb 3-1: device descriptor read/64, error -71
[   39.176816][   T36] kauditd_printk_skb: 6502 callbacks suppressed
[   39.176835][   T36] audit: type=1400 audit(1755978458.738:6733): avc:  denied  { accept } for  pid=924 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   39.262938][  T369] usb 3-1: device descriptor read/64, error -71
[   39.302312][  T936] rust_binder: Read failure Err(EFAULT) in pid:105
[   39.315033][   T36] audit: type=1400 audit(1755978458.869:6734): avc:  denied  { write } for  pid=938 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   39.359384][   T45] usb 2-1: USB disconnect, device number 8
[   39.383594][  T369] usb usb3-port1: attempt power cycle
[   39.423984][   T36] audit: type=1400 audit(1755978458.981:6735): avc:  denied  { append } for  pid=938 comm="syz.0.201" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.503034][   T36] audit: type=1400 audit(1755978459.056:6736): avc:  denied  { connect } for  pid=947 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.765540][  T369] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   39.787939][  T369] usb 3-1: device descriptor read/8, error -71
[   39.927171][  T369] usb 3-1: device descriptor read/8, error -71
[   39.991484][  T969] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.998714][  T968] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   39.998742][  T968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   40.008043][  T972] 9pnet_fd: Insufficient options for proto=fd
[   40.010467][  T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:151
[   40.046855][  T976] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   40.073811][  T978] ip6tnl0: mtu less than device minimum
[   40.081001][   T36] audit: type=1400 audit(1755978459.580:6737): avc:  denied  { ioctl } for  pid=977 comm="syz.3.216" path="socket:[6932]" dev="sockfs" ino=6932 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.082810][  T980] fuse: Unknown parameter '�?�c�[H�\if�k���2�M�r��0x0000000000000008'
[   40.106446][   T36] audit: type=1400 audit(1755978459.599:6738): avc:  denied  { map } for  pid=979 comm="syz.0.215" path="/proc/113/net/netstat" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   40.139880][   T36] audit: type=1400 audit(1755978459.627:6739): avc:  denied  { ioctl } for  pid=979 comm="syz.0.215" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   40.185526][   T36] audit: type=1400 audit(1755978459.692:6740): avc:  denied  { mount } for  pid=984 comm="syz.3.219" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   40.208571][   T36] audit: type=1400 audit(1755978459.692:6741): avc:  denied  { search } for  pid=984 comm="syz.3.219" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.214679][  T369] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   40.230832][   T36] audit: type=1400 audit(1755978459.692:6742): avc:  denied  { read } for  pid=984 comm="syz.3.219" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.258527][  T369] usb 3-1: device descriptor read/8, error -71
[   40.333466][  T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115
[   40.405415][  T369] usb 3-1: device descriptor read/8, error -71
[   40.535658][  T369] usb usb3-port1: unable to enumerate USB device
[   41.063264][ T1028] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.117962][ T1029] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   41.274040][ T1039] tipc: Started in network mode
[   41.286842][ T1039] tipc: Node identity 4, cluster identity 4711
[   41.293040][ T1039] tipc: Node number set to 4
[   41.299483][ T1039] 9pnet_fd: Insufficient options for proto=fd
[   41.378158][ T1048] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.379023][ T1048] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 151)
[   41.385849][ T1048] rust_binder: Error while translating object.
[   41.396463][  T369] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   41.403396][ T1048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.410553][ T1048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125
[   41.512512][   T31] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   41.531038][   T31] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   41.575584][  T369] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.596889][  T369] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.621771][  T369] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.638618][  T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.658028][ T1061] incfs: Error accessing: ./file0.
[   41.663448][  T369] usb 2-1: SerialNumber: syz
[   41.672822][ T1061] incfs: mount failed -20
[   41.788437][ T1090] tipc: Can't bind to reserved service type 2
[   41.898312][ T1025] rust_binder: 175: no such ref 1
[   41.905802][ T1025] rust_binder: Write failure EINVAL in pid:175
[   41.992764][ T1097] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.257183][   T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   42.278819][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   42.428297][   T65] usb 3-1: Using ep0 maxpacket: 32
[   42.434752][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.438977][   T31] usb 1-1: Using ep0 maxpacket: 16
[   42.446236][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.453268][   T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   42.461320][   T65] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   42.470412][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.479089][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.488802][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.500770][   T65] usb 3-1: config 0 descriptor??
[   42.510576][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   42.520613][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.528655][   T31] usb 1-1: Product: syz
[   42.532828][   T31] usb 1-1: Manufacturer: syz
[   42.537483][   T31] usb 1-1: SerialNumber: syz
[   42.952575][   T65] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   43.081164][   T31] usb 1-1: 0:2 : does not exist
[   43.179291][ T1133] fuse: Bad value for 'user_id'
[   43.190082][ T1133] fuse: Bad value for 'user_id'
[   43.231564][ T1100] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   43.231596][ T1100] rust_binder: Error while translating object.
[   43.251183][ T1100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.257781][ T1100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112
[   43.273953][   T45] usb 3-1: USB disconnect, device number 15
[   43.316165][ T1140] fuseblk: Bad value for 'source'
[   43.724911][ T1130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.744143][ T1130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.768435][   T31] usb 1-1: USB disconnect, device number 8
[   43.979080][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.003404][ T1146] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   44.205794][ T1155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.249715][  T369] usb 2-1: 0:2 : does not exist
[   44.261460][  T369] usb 2-1: unit 5: unexpected type 0x09
[   44.269009][  T369] usb 2-1: USB disconnect, device number 9
[   44.285710][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.303634][   T65] rust_binder: 0: removing orphan mapping 0:24
[   44.377617][ T1168] binder: Bad value for 'defcontext'
[   44.663274][  T369] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   44.738473][ T1185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   44.804339][ T1196] /dev/loop0: Can't lookup blockdev
[   44.827729][  T369] usb 2-1: Using ep0 maxpacket: 8
[   44.839949][  T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[   44.853957][  T369] usb 2-1: New USB device found, idVendor=28bd, idProduct=005d, bcdDevice= 0.00
[   44.863410][  T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.874727][  T369] usb 2-1: config 0 descriptor??
[   44.927509][ T1198] rust_binder: Error while translating object.
[   44.927565][ T1198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   44.938195][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:159
[   44.951191][   T36] kauditd_printk_skb: 56 callbacks suppressed
[   44.951211][   T36] audit: type=1400 audit(1755978464.143:6799): avc:  denied  { listen } for  pid=1201 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.051119][   T36] audit: type=1400 audit(1755978464.246:6800): avc:  denied  { read } for  pid=1203 comm="syz.2.292" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   45.121303][ T1207] rust_binder: Write failure EFAULT in pid:161
[   45.175967][ T1209] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   45.205622][  T369] usbhid 2-1:0.0: can't add hid device: -71
[   45.217858][  T369] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   45.228549][ T1209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   45.240322][  T369] usb 2-1: USB disconnect, device number 10
[   45.246320][   T36] audit: type=1400 audit(1755978464.414:6801): avc:  denied  { connect } for  pid=1210 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.349767][ T1217] rust_binder: Write failure EFAULT in pid:186
[   45.350077][ T1217] rust_binder: Write failure EFAULT in pid:186
[   45.391114][ T1221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   45.492594][ T1226] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   45.547888][ T1227] /dev/rnullb0: Can't open blockdev
[   45.553209][   T36] audit: type=1400 audit(1755978464.704:6802): avc:  denied  { mounton } for  pid=1224 comm="syz.0.297" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   45.758621][ T1238] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.758709][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   45.765583][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:198
[   45.818750][   T36] audit: type=1400 audit(1755978464.966:6803): avc:  denied  { lock } for  pid=1242 comm="syz.1.302" path="socket:[8884]" dev="sockfs" ino=8884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   45.906484][ T1244] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.907048][ T1244] rust_binder: Write failure EINVAL in pid:201
[   46.018854][ T1247] netlink: 'syz.2.303': attribute type 4 has an invalid length.
[   46.032796][ T1247] netlink: 17 bytes leftover after parsing attributes in process `syz.2.303'.
[   46.042532][ T1247] rust_binder: 166: no such ref 2
[   46.047821][ T1247] rust_binder: Failed to allocate buffer. len:48, is_oneway:false
[   46.342215][ T1250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.350943][ T1250] veth1: entered allmulticast mode
[   46.365727][ T1249] veth1: left allmulticast mode
[   46.753484][   T36] audit: type=1400 audit(1755978465.836:6804): avc:  denied  { getopt } for  pid=1269 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.753919][ T1270] bridge0: port 3(veth1_macvtap) entered blocking state
[   46.781226][ T1270] bridge0: port 3(veth1_macvtap) entered disabled state
[   46.788297][ T1270] veth1_macvtap: entered allmulticast mode
[   46.795272][ T1270] veth1_macvtap: left allmulticast mode
[   47.058751][  T383] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   47.220172][  T383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.231204][  T383] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   47.240244][  T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.249039][  T383] usb 2-1: config 0 descriptor??
[   47.379433][   T36] audit: type=1400 audit(1755978466.416:6805): avc:  denied  { write } for  pid=1299 comm="syz.0.320" name="/" dev="incremental-fs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.402276][   T36] audit: type=1400 audit(1755978466.425:6806): avc:  denied  { add_name } for  pid=1299 comm="syz.0.320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.423103][   T36] audit: type=1400 audit(1755978466.425:6807): avc:  denied  { create } for  pid=1299 comm="syz.0.320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   47.443398][   T36] audit: type=1400 audit(1755978466.425:6808): avc:  denied  { associate } for  pid=1299 comm="syz.0.320" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   47.457937][ T1300] SELinux: failed to load policy
[   47.526918][ T1303] rust_binder: Error while translating object.
[   47.527012][ T1303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   47.539944][ T1303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:168
[   47.596113][ T1314] Invalid ELF header magic: != ELF
[   47.624637][ T1321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[   47.685050][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.693795][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.703451][  T383] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   47.714226][  T383] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input11
[   47.747743][ T1319] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   47.796693][  T383] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   47.882997][ T1339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.889820][ T1339] rust_binder: Write failure EFAULT in pid:196
[   48.146567][ T1272] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.153377][  T369] usb 2-1: USB disconnect, device number 11
[   48.302894][ T1353] 9pnet_fd: Insufficient options for proto=fd
[   49.512719][ T1399] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.582169][ T1406] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.583502][ T1407] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   49.597363][ T1407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194
[   49.657248][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[   49.693191][ T1417] /dev/sg0: Can't lookup blockdev
[   49.698596][ T1417] /dev/sg0: Can't lookup blockdev
[   49.781761][ T1424] binder: Unknown parameter 'context�'
[   49.844718][ T1426] overlayfs: failed to resolve './file1': -2
[   50.108488][ T1444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[   50.149291][  T902] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   50.302851][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   50.310981][  T902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.322437][  T902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.332297][  T902] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   50.341359][  T902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.350024][  T902] usb 1-1: config 0 descriptor??
[   50.894584][ T1464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[   50.998331][  T902] usb 1-1: language id specifier not provided by device, defaulting to English
[   51.142770][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   51.142790][   T36] audit: type=1400 audit(2000000001.318:6827): avc:  denied  { read } for  pid=1480 comm="syz.3.381" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   51.156719][ T1484] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   51.177733][ T1484] netlink: 'syz.2.382': attribute type 2 has an invalid length.
[   51.187100][   T36] audit: type=1400 audit(2000000001.365:6828): avc:  denied  { bind } for  pid=1483 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   51.207519][   T36] audit: type=1400 audit(2000000001.365:6829): avc:  denied  { name_bind } for  pid=1483 comm="syz.2.382" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   51.228451][   T36] audit: type=1400 audit(2000000001.365:6830): avc:  denied  { node_bind } for  pid=1483 comm="syz.2.382" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   51.433249][ T1497] fuse: Bad value for 'fd'
[   51.436181][ T1498] fuse: Bad value for 'fd'
[   51.576094][ T1502] netlink: 1 bytes leftover after parsing attributes in process `syz.3.388'.
[   51.657190][   T36] audit: type=1400 audit(2000000001.795:6831): avc:  denied  { map } for  pid=1431 comm="syz.0.366" path="socket:[8061]" dev="sockfs" ino=8061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   51.659214][ T1432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.689909][ T1432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.700390][ T1432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.708904][ T1432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.718075][  T902] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71
[   51.727252][  T902] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71
[   51.735490][  T902] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71
[   51.743708][  T902] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[   51.751221][  T902] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71
[   51.761469][  T902] usb 1-1: USB disconnect, device number 9
[   51.967238][ T1515] rust_binder: Write failure EFAULT in pid:212
[   52.002845][ T1517] support for cryptoloop has been removed.  Use dm-crypt instead.
[   52.037551][   T36] audit: type=1400 audit(2000000002.150:6832): avc:  denied  { mounton } for  pid=1518 comm="syz.2.393" path="/proc/216/task" dev="proc" ino=9605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   52.143657][   T36] audit: type=1400 audit(2000000002.253:6833): avc:  denied  { create } for  pid=1527 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   52.222531][ T1534] overlayfs: missing 'workdir'
[   52.274064][   T36] audit: type=1326 audit(2000000002.374:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5628b8ebe9 code=0x7ffc0000
[   52.313172][   T36] audit: type=1326 audit(2000000002.374:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5628b8ebe9 code=0x7ffc0000
[   52.338296][   T36] audit: type=1326 audit(2000000002.402:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5628b8ebe9 code=0x7ffc0000
[   52.523562][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   52.524542][ T1451] Bluetooth: hci0: command 0x1003 tx timeout
[   52.555660][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   52.585901][ T1561] syz.1.410: attempt to access beyond end of device
[   52.585901][ T1561] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0
[   52.599003][ T1561] EXT4-fs (loop1): unable to read superblock
[   52.711519][    T9] usb 3-1: device descriptor read/64, error -71
[   52.927201][ T1573] rust_binder: Error in use_page_slow: ESRCH
[   52.927230][ T1573] rust_binder: use_range failure ESRCH
[   52.933482][ T1573] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   52.938983][ T1573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   52.958667][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249
[   52.983474][    T9] usb 3-1: device descriptor read/64, error -71
[   53.261545][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   53.310513][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.368500][   T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   53.411302][    T9] usb 3-1: device descriptor read/64, error -71
[   53.540846][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.551005][   T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.560675][   T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   53.569946][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   53.578085][   T31] usb 2-1: SerialNumber: syz
[   53.578277][ T1592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'.
[   53.678674][    T9] usb 3-1: device descriptor read/64, error -71
[   53.699826][ T1609] netlink: 9 bytes leftover after parsing attributes in process `syz.3.427'.
[   53.709236][ T1609] gretap0: entered promiscuous mode
[   53.716417][ T1609] netlink: 5 bytes leftover after parsing attributes in process `syz.3.427'.
[   53.726278][ T1609] 0��{X��: renamed from gretap0
[   53.732063][ T1609] 0��{X��: left promiscuous mode
[   53.737302][ T1609] 0��{X��: entered allmulticast mode
[   53.743700][ T1609] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   53.762097][ T1609] netlink: 'syz.3.427': attribute type 1 has an invalid length.
[   53.769842][ T1609] netlink: 'syz.3.427': attribute type 2 has an invalid length.
[   53.796388][    T9] usb usb3-port1: attempt power cycle
[   53.816013][ T1585] process 'syz.1.418' launched './file1' with NULL argv: empty string added
[   53.982306][   T31] usb 2-1: 0:2 : does not exist
[   53.989108][   T31] usb 2-1: unit 5: unexpected type 0x0a
[   53.996302][   T31] usb 2-1: USB disconnect, device number 12
[   54.006695][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.159977][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   54.182546][    T9] usb 3-1: device descriptor read/8, error -71
[   54.215426][ T1614] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   54.222756][ T1614] rust_binder: Write failure EINVAL in pid:217
[   54.321366][    T9] usb 3-1: device descriptor read/8, error -71
[   54.547681][ T1634] futex_wake_op: syz.3.436 tries to shift op by -1; fix this program
[   54.563443][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257
[   54.577776][ T1637] syz.3.437 uses obsolete (PF_INET,SOCK_PACKET)
[   54.593861][ T1637] netlink: 'syz.3.437': attribute type 4 has an invalid length.
[   54.602546][ T1637] netlink: 'syz.3.437': attribute type 4 has an invalid length.
[   54.609461][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   54.642732][    T9] usb 3-1: device descriptor read/8, error -71
[   54.781329][    T9] usb 3-1: device descriptor read/8, error -71
[   54.908613][    T9] usb usb3-port1: unable to enumerate USB device
[   55.194684][ T1652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   55.194720][ T1652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:225
[   55.284833][   T31] rust_binder: 1620: removing orphan mapping 0:24
[   55.475921][   T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   55.570851][ T1665] rust_binder: 264: no such ref 0
[   55.631218][ T1666] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   55.637049][   T45] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[   55.638611][ T1666] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   55.647113][   T45] usb 1-1: config 0 has no interface number 1
[   55.659846][   T45] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   55.669744][   T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   55.681313][   T45] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[   55.690395][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   55.698397][   T45] usb 1-1: SerialNumber: syz
[   55.703832][   T45] usb 1-1: config 0 descriptor??
[   55.709969][   T45] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[   55.716975][   T45] usb 1-1: No valid video chain found.
[   55.785631][   T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   55.924646][   T31] usb 3-1: device descriptor read/64, error -71
[   55.932852][   T45] usb 1-1: USB disconnect, device number 10
[   56.121294][ T1713] overlayfs: failed to clone upperpath
[   56.181335][   T31] usb 3-1: device descriptor read/64, error -71
[   56.438042][   T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   56.577093][   T31] usb 3-1: device descriptor read/64, error -71
[   56.726828][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   56.748169][  T902] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   56.833743][   T31] usb 3-1: device descriptor read/64, error -71
[   56.888547][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.899511][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   56.908595][  T902] usb 1-1: Using ep0 maxpacket: 8
[   56.913703][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.922662][    T9] usb 2-1: config 0 descriptor??
[   56.930381][  T902] usb 1-1: unable to get BOS descriptor or descriptor too short
[   56.939551][  T902] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[   56.949408][  T902] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[   56.959229][  T902] usb 1-1: config 12 interface 0 has no altsetting 0
[   56.962365][   T31] usb usb3-port1: attempt power cycle
[   56.967919][  T902] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   56.983638][  T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.991711][  T902] usb 1-1: Product: syz
[   56.996003][  T902] usb 1-1: Manufacturer: syz
[   57.000627][  T902] usb 1-1: SerialNumber: syz
[   57.227035][  T902] usb 1-1: selecting invalid altsetting 0
[   57.236456][  T902] snd-usb-audio 1-1:12.0: probe with driver snd-usb-audio failed with error -12
[   57.248441][  T902] usb 1-1: USB disconnect, device number 11
[   57.258308][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   57.336422][   T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   57.358363][    T9] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[   57.359557][   T31] usb 3-1: device descriptor read/8, error -71
[   57.370562][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input12
[   57.447697][    T9] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   57.519319][   T31] usb 3-1: device descriptor read/8, error -71
[   57.775904][   T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   57.777789][ T1743] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   57.791955][ T1743] rust_binder: Write failure EINVAL in pid:231
[   57.793498][ T1715] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.800942][   T31] usb 3-1: device descriptor read/8, error -71
[   57.821312][   T36] kauditd_printk_skb: 56 callbacks suppressed
[   57.821330][   T36] audit: type=1400 audit(2000000007.564:6893): avc:  denied  { write } for  pid=1744 comm="syz.0.476" path="socket:[10014]" dev="sockfs" ino=10014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.822460][   T45] usb 2-1: USB disconnect, device number 13
[   57.989983][   T31] usb 3-1: device descriptor read/8, error -71
[   58.032648][   T36] audit: type=1400 audit(2000000007.760:6894): avc:  denied  { watch_reads } for  pid=1749 comm="syz.3.478" path="/237" dev="tmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   58.034130][ T1750] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[   58.068360][ T1750] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[   58.106627][   T31] usb usb3-port1: unable to enumerate USB device
[   58.118151][ T1752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.479'.
[   58.234790][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   58.407080][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.425191][    T9] usb 1-1: config 0 has no interfaces?
[   58.431743][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   58.440926][    T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   58.459268][    T9] usb 1-1: Manufacturer: syz
[   58.465007][    T9] usb 1-1: config 0 descriptor??
[   58.574498][ T1768] fuse: Bad value for 'user_id'
[   58.579567][ T1768] fuse: Bad value for 'user_id'
[   58.648687][ T1776] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.687362][   T10] usb 1-1: USB disconnect, device number 12
[   58.697216][   T36] audit: type=1400 audit(2000000008.386:6895): avc:  denied  { append } for  pid=1747 comm="syz.0.477" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.924284][   T36] audit: type=1400 audit(2000000008.592:6896): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   58.949931][ T1797] binder: Unknown parameter 'fscontext?}'
[   59.036947][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   59.197426][    T9] usb 3-1: Using ep0 maxpacket: 8
[   59.203696][    T9] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[   59.211985][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   59.220119][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.230268][    T9] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   59.239287][    T9] usb 3-1: config 0 has no interface number 0
[   59.245422][    T9] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.258594][    T9] usb 3-1: config 0 interface 150 has no altsetting 0
[   59.265514][    T9] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[   59.274594][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.283980][    T9] usb 3-1: config 0 descriptor??
[   59.315037][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   59.329892][   T36] audit: type=1400 audit(2000000008.976:6897): avc:  denied  { execute } for  pid=1809 comm="syz.0.499" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   59.475449][   T10] usb 2-1: Using ep0 maxpacket: 8
[   59.486949][   T10] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[   59.495170][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   59.518431][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.528555][   T10] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   59.538035][   T10] usb 2-1: config 0 has no interface number 0
[   59.544655][   T10] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.559042][   T10] usb 2-1: config 0 interface 150 has no altsetting 0
[   59.565895][   T10] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[   59.574971][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.583792][   T10] usb 2-1: config 0 descriptor??
[   59.731113][   T36] audit: type=1400 audit(2000000009.340:6898): avc:  denied  { ioctl } for  pid=1819 comm="syz.3.501" path="socket:[10192]" dev="sockfs" ino=10192 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   59.800846][ T1830] overlayfs: failed to clone upperpath
[   59.897258][ T1838] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   60.025009][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.033373][ T1803] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   60.039857][ T1803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   60.048263][ T1803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:294
[   60.059149][   T45] usb 2-1: USB disconnect, device number 14
[   60.426717][   T36] audit: type=1326 audit(2000000009.995:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36158ebe9 code=0x7fc00000
[   60.450109][   T36] audit: type=1326 audit(2000000010.004:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd36158ebe9 code=0x7fc00000
[   60.737469][   T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   60.900618][   T31] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[   60.909787][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.917783][   T31] usb 1-1: Product: syz
[   60.922014][   T31] usb 1-1: Manufacturer: syz
[   60.926776][   T31] usb 1-1: SerialNumber: syz
[   60.994943][   T36] audit: type=1400 audit(2000000010.537:6901): avc:  denied  { create } for  pid=1860 comm="syz.3.513" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[   61.015251][   T36] audit: type=1400 audit(2000000010.537:6902): avc:  denied  { remount } for  pid=1860 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   61.373778][   T31] usb 1-1: USB disconnect, device number 13
[   61.507611][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   61.669037][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.689351][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.711118][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   61.720203][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   61.742810][   T10] usb 2-1: SerialNumber: syz
[   61.868150][   T45] usb 3-1: USB disconnect, device number 25
[   61.932452][ T1874] rust_binder: Error while translating object.
[   61.932491][ T1874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   61.939134][ T1874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:250
[   61.974955][   T10] usb 2-1: 0:2 : does not exist
[   61.992587][ T1880] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.997042][   T10] usb 2-1: unit 14 not found!
[   62.019481][   T10] usb 2-1: USB disconnect, device number 15
[   62.030861][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.106134][ T1888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252
[   62.126833][ T1890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.143872][ T1889] tipc: Resetting bearer <eth:syzkaller0>
[   62.157034][ T1889] tipc: Disabling bearer <eth:syzkaller0>
[   62.359987][ T1909] syz.2.528 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   62.371659][ T1909] netlink: 'syz.2.528': attribute type 4 has an invalid length.
[   62.379449][ T1909] netlink: 17 bytes leftover after parsing attributes in process `syz.2.528'.
[   62.390879][ T1909] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.446275][ T1910] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   62.452982][ T1910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253
[   62.909903][ T1935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'.
[   63.518392][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   63.678826][    T9] usb 3-1: Using ep0 maxpacket: 32
[   63.685502][    T9] usb 3-1: config index 0 descriptor too short (expected 2340, got 36)
[   63.694066][    T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   63.711899][    T9] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 5
[   63.722642][    T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=edda, bcdDevice= 5.46
[   63.731708][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.739886][    T9] usb 3-1: Product: syz
[   63.744103][    T9] usb 3-1: Manufacturer: syz
[   63.748708][    T9] usb 3-1: SerialNumber: syz
[   63.956920][   T45] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[   64.089231][   T36] kauditd_printk_skb: 5533 callbacks suppressed
[   64.089251][   T36] audit: type=1326 audit(2000000013.426:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.2.543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b9dd8ebe9 code=0x0
[   64.177266][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[   64.190173][   T45] usb 1-1: not running at top speed; connect to a high speed hub
[   64.191553][ T1970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.199060][   T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 34879, setting to 1023
[   64.219645][ T1972] rust_binder: 317: no such ref 0
[   64.221001][   T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   64.234087][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.242338][   T45] usb 1-1: Product: syz
[   64.242809][ T1970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.247182][   T45] usb 1-1: Manufacturer: syz
[   64.259385][   T45] usb 1-1: SerialNumber: syz
[   64.292756][ T1973] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   64.300103][ T1973] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   64.486199][    T9] usb 3-1: USB disconnect, device number 26
[   64.492510][   T45] usb 1-1: 2:1: invalid format type 0xaf4f is detected, processed as PCM
[   64.501064][   T45] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   64.524494][   T45] usb 1-1: USB disconnect, device number 14
[   65.050637][ T1976] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.105122][ T1977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269
[   65.957998][ T1986] overlay: Unknown parameter 'uid>18446744073709551615'
[   65.991214][ T1990] fuse: Unknown parameter '0x000000000000000300000000000000000008'
[   66.037256][ T2000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[   66.057381][   T36] audit: type=1400 audit(2000000015.268:12437): avc:  denied  { search } for  pid=1987 comm="syz.1.551" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   66.089129][   T36] audit: type=1400 audit(2000000015.286:12438): avc:  denied  { write } for  pid=1987 comm="syz.1.551" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   66.118642][   T45] rust_binder: 1998: removing orphan mapping 0:4216
[   66.470633][   T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   66.632274][   T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.643848][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   66.654917][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   66.664901][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   66.677881][   T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   66.687140][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.697121][   T45] usb 1-1: config 0 descriptor??
[   66.879607][ T2030] rust_binder: Got transaction with invalid offset.
[   66.879685][ T2030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   66.886424][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330
[   66.934812][   T36] audit: type=1400 audit(2000000016.081:12439): avc:  denied  { read append } for  pid=2039 comm="syz.1.571" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   66.969129][   T36] audit: type=1400 audit(2000000016.081:12440): avc:  denied  { open } for  pid=2039 comm="syz.1.571" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   67.077453][ T2056] netlink: 'syz.3.576': attribute type 3 has an invalid length.
[   67.085186][ T2056] netlink: 944 bytes leftover after parsing attributes in process `syz.3.576'.
[   67.105848][ T2059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:335
[   67.171352][   T45] usbhid 1-1:0.0: can't add hid device: -71
[   67.192592][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   67.201564][   T45] usb 1-1: USB disconnect, device number 15
[   67.726167][   T36] audit: type=1400 audit(2000000016.820:12441): avc:  denied  { connect } for  pid=2086 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   67.752663][ T2087] FAT-fs (rnullb0): bogus number of reserved sectors
[   67.759470][ T2087] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   67.770413][   T36] audit: type=1400 audit(2000000016.866:12442): avc:  denied  { execute } for  pid=2086 comm="syz.0.586" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   67.848284][ T2099] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.150015][    T9] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[   68.221613][   T36] audit: type=1400 audit(2000000017.287:12443): avc:  denied  { getattr } for  pid=2123 comm="syz.0.601" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.234681][ T2124] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36
[   68.243869][ T2124] rust_binder: Error while translating object.
[   68.252705][ T2124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   68.259111][ T2124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303
[   68.299730][    T9] usb 3-1: device descriptor read/64, error -71
[   68.399772][ T2129] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.455335][ T2130] tipc: Started in network mode
[   68.466754][ T2130] tipc: Node identity c, cluster identity 4711
[   68.473242][ T2130] tipc: Node number set to 12
[   68.478763][ T2130] rust_binder: Write failure EINVAL in pid:307
[   68.478975][ T2130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307
[   68.577887][    T9] usb 3-1: device descriptor read/64, error -71
[   68.845275][    T9] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[   68.984333][    T9] usb 3-1: device descriptor read/64, error -71
[   69.069878][   T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   69.103857][ T2149] overlayfs: failed to clone upperpath
[   69.231419][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.242430][   T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   69.243956][    T9] usb 3-1: device descriptor read/64, error -71
[   69.251528][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.270007][   T45] usb 2-1: config 0 descriptor??
[   69.279369][ T2151] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.279781][ T2151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   69.286618][ T2151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311
[   69.372608][   T36] audit: type=1400 audit(2000000018.362:12444): avc:  denied  { write } for  pid=2155 comm="syz.0.611" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   69.391238][ T2156] 9pnet_fd: Insufficient options for proto=fd
[   69.405081][    T9] usb usb3-port1: attempt power cycle
[   69.430583][   T36] audit: type=1400 audit(2000000018.409:12445): avc:  denied  { map } for  pid=2158 comm="syz.0.612" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   69.513996][   T36] audit: type=1400 audit(2000000018.493:12446): avc:  denied  { watch watch_reads } for  pid=2161 comm="syz.0.613" path="/" dev="ramfs" ino=13062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   69.514619][ T2162] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.648073][ T2164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322
[   69.705957][   T45] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[   69.724917][   T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input14
[   69.775878][    T9] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[   69.798456][    T9] usb 3-1: device descriptor read/8, error -71
[   69.811389][   T45] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   69.921875][   T36] audit: type=1400 audit(2000000018.876:12447): avc:  denied  { getopt } for  pid=2145 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   69.937485][    T9] usb 3-1: device descriptor read/8, error -71
[   70.159040][  T902] usb 2-1: USB disconnect, device number 16
[   70.203767][    T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[   70.226288][    T9] usb 3-1: device descriptor read/8, error -71
[   70.365254][    T9] usb 3-1: device descriptor read/8, error -71
[   70.482192][    T9] usb usb3-port1: unable to enumerate USB device
[   70.505790][   T36] audit: type=1400 audit(2000000019.428:12448): avc:  denied  { append } for  pid=2179 comm="syz.0.618" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.570528][ T2183] netlink: 182 bytes leftover after parsing attributes in process `syz.3.619'.
[   70.623733][ T2195] netlink: 'syz.0.624': attribute type 27 has an invalid length.
[   70.688573][ T2199] input: syz0 as /devices/virtual/input/input15
[   70.785091][   T36] audit: type=1400 audit(2000000019.680:12449): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   70.818981][ T2220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:355
[   70.833797][ T2222] fuse: Unknown parameter '��	'
[   70.848928][ T2222] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   70.848954][ T2222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   70.857104][ T2222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:357
[   70.868048][ T2208] 9pnet_fd: Insufficient options for proto=fd
[   70.990956][ T2249] __vm_enough_memory: pid: 2249, comm: syz.1.643, bytes: 18014402804453376 not enough memory for the allocation
[   71.013067][   T36] audit: type=1400 audit(2000000019.895:12450): avc:  denied  { ioctl } for  pid=2250 comm="syz.1.644" path="socket:[12172]" dev="sockfs" ino=12172 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.038235][   T36] audit: type=1400 audit(2000000019.923:12451): avc:  denied  { getopt } for  pid=2250 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.059312][   T36] audit: type=1400 audit(2000000019.942:12452): avc:  denied  { map } for  pid=2250 comm="syz.1.644" path="socket:[13309]" dev="sockfs" ino=13309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.083376][   T36] audit: type=1400 audit(2000000019.942:12453): avc:  denied  { read } for  pid=2250 comm="syz.1.644" path="socket:[13309]" dev="sockfs" ino=13309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.124116][   T36] audit: type=1400 audit(2000000019.989:12454): avc:  denied  { map } for  pid=2257 comm="syz.2.646" path="socket:[12218]" dev="sockfs" ino=12218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   71.244646][ T2259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14136 sclass=netlink_route_socket pid=2259 comm=syz.2.646
[   71.469972][   T36] audit: type=1400 audit(2000000020.325:12455): avc:  denied  { mount } for  pid=2271 comm="syz.2.650" name="/" dev="pstore" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   71.471565][ T2272] binder: Unknown parameter 'fscontext?}'
[   71.508721][  T526] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   71.679828][  T526] usb 2-1: Using ep0 maxpacket: 32
[   71.686469][  T526] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   71.707286][  T526] usb 2-1: config 0 has no interface number 0
[   71.717172][ T2281] pim6reg1: entered promiscuous mode
[   71.722532][ T2281] pim6reg1: entered allmulticast mode
[   71.728216][  T526] usb 2-1: config 0 interface 184 has no altsetting 0
[   71.740938][  T526] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   71.750234][  T526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.758442][  T526] usb 2-1: Product: syz
[   71.762828][  T526] usb 2-1: Manufacturer: syz
[   71.767522][  T526] usb 2-1: SerialNumber: syz
[   71.772887][  T526] usb 2-1: config 0 descriptor??
[   71.787677][  T526] smsc75xx v1.0.0
[   71.873438][ T2293] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[   71.892304][ T2296] netlink: 'syz.3.658': attribute type 4 has an invalid length.
[   71.970355][ T2300] overlayfs: overlapping lowerdir path
[   72.037992][  T526] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   72.063149][  T526] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   72.083905][  T526] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   72.097026][  T526] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[   72.107208][ T2308] netlink: 88 bytes leftover after parsing attributes in process `syz.1.661'.
[   72.123281][  T526] usb 2-1: USB disconnect, device number 17
[   72.365616][ T2316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   72.365648][ T2316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:395
[   72.524866][   T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   72.545504][ T2327] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   72.607478][ T2324] rust_binder: 403: no such ref 2
[   72.680524][    T9] rust_binder: 2323: removing orphan mapping 0:112
[   72.687191][    T9] rust_binder: 2323: removing orphan mapping 112:8
[   72.697430][   T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   72.706582][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.715662][   T31] usb 3-1: config 0 descriptor??
[   72.884552][ T2335] rust_binder: Error in use_page_slow: ESRCH
[   72.884584][ T2335] rust_binder: use_range failure ESRCH
[   72.890659][ T2335] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   72.896158][ T2335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   72.904114][ T2335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411
[   73.091160][ T2338] /dev/loop0: Can't lookup blockdev
[   73.106550][ T2338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[   73.224290][ T2353] overlayfs: disabling nfs_export due to verity=require
[   73.231376][ T2353] overlayfs: failed to clone upperpath
[   73.401265][ T2375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380
[   73.941675][   T31] usb 3-1: Cannot set autoneg
[   73.956394][   T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   73.971480][   T31] usb 3-1: USB disconnect, device number 31
[   74.257265][ T2418] /dev/rnullb0: Can't open blockdev
[   74.275247][ T2420] rust_binder: Error while translating object.
[   74.275272][ T2420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   74.281618][ T2420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:320
[   74.304069][ T2424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1144 sclass=netlink_route_socket pid=2424 comm=syz.2.704
[   74.544430][ T2453] overlayfs: failed to resolve './file0': -2
[   74.632130][   T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   74.654841][ T2468] 9pnet_fd: Insufficient options for proto=fd
[   74.793835][   T31] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[   74.804138][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   74.817110][   T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   74.826205][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.834838][   T31] usb 3-1: config 0 descriptor??
[   74.839866][  T526] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   74.848641][   T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   74.921049][  T383] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[   75.007887][  T526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.018914][  T526] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   75.028233][  T526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.037082][  T526] usb 2-1: config 0 descriptor??
[   75.071682][   T31] usb 3-1: USB disconnect, device number 32
[   75.113677][  T383] usb 1-1: unable to get BOS descriptor or descriptor too short
[   75.135830][  T383] usb 1-1: unable to read config index 0 descriptor/start: -71
[   75.143491][  T383] usb 1-1: can't read configurations, error -71
[   75.184377][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.184410][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.198261][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.198291][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.215286][ T2497] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   75.215404][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.230605][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.230632][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.237993][ T2481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2481 comm=syz.3.722
[   75.243738][ T2495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.258989][ T2481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11942 sclass=netlink_route_socket pid=2481 comm=syz.3.722
[   75.299559][ T2505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=2505 comm=syz.3.727
[   75.765942][   T31] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[   75.927494][   T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   75.938537][   T31] usb 3-1: config 1 interface 0 has no altsetting 0
[   75.946755][   T31] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40
[   75.956313][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.964558][   T31] usb 3-1: Product: Ђ
[   75.968703][   T31] usb 3-1: Manufacturer: ᐁ
[   75.974856][   T31] usb 3-1: SerialNumber: syz
[   75.980905][ T2528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   76.026530][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   76.026549][   T36] audit: type=1326 audit(2000000024.579:12466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5628b8ebe9 code=0x0
[   76.204569][   T36] audit: type=1400 audit(2000000024.747:12467): avc:  denied  { create } for  pid=2527 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   76.229078][   T31] usbhid 3-1:1.0: can't add hid device: -71
[   76.235245][   T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   76.244609][   T31] usb 3-1: USB disconnect, device number 33
[   76.290082][  T383] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[   76.429128][  T383] usb 1-1: device descriptor read/64, error -71
[   76.685853][  T383] usb 1-1: device descriptor read/64, error -71
[   76.780634][ T2559] pim6reg1: entered promiscuous mode
[   76.786168][ T2559] pim6reg1: entered allmulticast mode
[   76.803641][  T383] usb usb1-port1: attempt power cycle
[   77.167390][  T383] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[   77.189694][  T383] usb 1-1: device descriptor read/8, error -71
[   77.328757][  T383] usb 1-1: device descriptor read/8, error -71
[   77.584465][  T383] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[   77.606803][  T383] usb 1-1: device descriptor read/8, error -71
[   77.746540][  T383] usb 1-1: device descriptor read/8, error -71
[   77.765231][ T2573] can0: slcan on ttyS3.
[   77.769757][   T36] audit: type=1400 audit(2000000026.215:12468): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   77.802180][   T36] audit: type=1400 audit(2000000026.215:12469): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.824197][   T36] audit: type=1400 audit(2000000026.215:12470): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.831230][  T526] usbhid 2-1:0.0: can't add hid device: -71
[   77.846577][   T36] audit: type=1400 audit(2000000026.215:12471): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.868952][  T526] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   77.876843][ T2573] can0 (unregistered): slcan off ttyS3.
[   77.887287][  T383] usb usb1-port1: unable to enumerate USB device
[   77.896338][   T36] audit: type=1400 audit(2000000026.215:12472): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.907204][  T526] usb 2-1: USB disconnect, device number 18
[   77.920810][   T36] audit: type=1400 audit(2000000026.252:12473): avc:  denied  { read } for  pid=2578 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.949080][   T36] audit: type=1400 audit(2000000026.252:12474): avc:  denied  { open } for  pid=2578 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.997466][   T36] audit: type=1400 audit(2000000026.252:12475): avc:  denied  { getattr } for  pid=2578 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.418677][  T526] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   78.580422][  T526] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.591544][  T526] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   78.603134][  T526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   78.614311][  T526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   78.627018][  T526] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.636327][  T526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.644548][  T526] usb 2-1: Product: syz
[   78.648816][  T526] usb 2-1: Manufacturer: syz
[   78.653457][  T526] usb 2-1: SerialNumber: syz
[   78.659498][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.676151][  T526] cdc_mbim 2-1:1.0: skipping garbage
[   78.708857][ T2639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2639 comm=syz.3.762
[   78.721889][ T2640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2640 comm=syz.3.762
[   78.890062][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.897279][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   79.158136][ T2658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'.
[   79.176055][ T2658] 9pnet_fd: Insufficient options for proto=fd
[   79.547544][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   79.554967][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   79.562227][  T526] cdc_mbim 2-1:1.0: setting rx_max = 16384
[   79.810402][ T2670] netlink: 'syz.2.771': attribute type 25 has an invalid length.
[   79.887792][ T2675] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.888099][ T2675] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   80.428556][ T2716] 9pnet_fd: Insufficient options for proto=fd
[   81.069835][ T2729] fuse: Invalid gid '00000000000037777777777'
[   81.186640][ T2733] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   81.392339][  T902] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   81.445819][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   81.565684][  T902] usb 1-1: config 3 has an invalid interface number: 107 but max is 2
[   81.573952][  T902] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   81.582711][  T902] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   81.591525][  T902] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   81.600355][  T902] usb 1-1: config 3 has an invalid interface number: 19 but max is 2
[   81.608573][  T902] usb 1-1: config 3 has an invalid interface number: 159 but max is 2
[   81.616775][  T902] usb 1-1: config 3 has no interface number 0
[   81.623012][   T10] usb 3-1: Using ep0 maxpacket: 16
[   81.628225][  T902] usb 1-1: config 3 has no interface number 1
[   81.634312][  T902] usb 1-1: config 3 has no interface number 2
[   81.640588][  T902] usb 1-1: config 3 interface 107 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   81.651630][  T902] usb 1-1: config 3 interface 107 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   81.662698][  T902] usb 1-1: config 3 interface 107 altsetting 4 endpoint 0x7 has an invalid bInterval 255, changing to 7
[   81.673943][  T902] usb 1-1: config 3 interface 107 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[   81.684801][  T902] usb 1-1: config 3 interface 107 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[   81.694723][  T902] usb 1-1: config 3 interface 107 altsetting 4 bulk endpoint 0xE has invalid maxpacket 32
[   81.704763][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.715815][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.725646][  T902] usb 1-1: config 3 interface 107 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16
[   81.735681][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   81.748680][  T902] usb 1-1: config 3 interface 107 altsetting 4 endpoint 0xF has an invalid bInterval 0, changing to 7
[   81.759725][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   81.768846][  T902] usb 1-1: config 3 interface 19 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[   81.779610][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.788509][  T902] usb 1-1: config 3 interface 159 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[   81.799660][  T902] usb 1-1: config 3 interface 159 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[   81.810936][   T10] usb 3-1: config 0 descriptor??
[   81.816036][  T902] usb 1-1: config 3 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   81.827098][  T902] usb 1-1: config 3 interface 159 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[   81.838879][  T902] usb 1-1: config 3 interface 159 altsetting 2 has a duplicate endpoint with address 0xA, skipping
[   81.849668][  T902] usb 1-1: config 3 interface 159 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[   81.860655][  T902] usb 1-1: config 3 interface 159 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[   81.871551][  T902] usb 1-1: config 3 interface 159 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64
[   81.882603][  T902] usb 1-1: config 3 interface 107 has no altsetting 0
[   81.889444][  T902] usb 1-1: config 3 interface 19 has no altsetting 0
[   81.896174][  T902] usb 1-1: config 3 interface 159 has no altsetting 0
[   81.904695][  T902] usb 1-1: New USB device found, idVendor=1608, idProduct=0305, bcdDevice=b8.89
[   81.913830][  T902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.921886][  T902] usb 1-1: Product: 頒ႁ麲愆⯑ꍨ實빊㘯䳓녉䛊㋕逬╆奬⸮놂㝶䨄瓖ꨵ᭖߁扚迊ࡥ搔Ò裧䒰췿﫴གྷ瘷ࠚ써살㱩젼඼쀸룆윊酛坢縭ᚢ䞍鬿蜷맴
[   81.939761][  T902] usb 1-1: Manufacturer: х
[   81.944324][  T902] usb 1-1: SerialNumber: 瀿
[   81.952381][ T2731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   81.959914][ T2731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   82.181314][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   82.181332][   T36] audit: type=1326 audit(2000000030.338:12486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.3.800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5628b8ebe9 code=0x0
[   82.210511][   T36] audit: type=1326 audit(2000000030.338:12487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.0.792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd36158ebe9 code=0x0
[   82.275202][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input19
[   82.296352][   T10] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   82.642782][ T2733] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[   83.102067][   T36] audit: type=1400 audit(2000000031.198:12488): avc:  denied  { map } for  pid=2765 comm="syz.3.803" path="socket:[15791]" dev="sockfs" ino=15791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   84.363949][   T36] audit: type=1400 audit(2000000032.376:12489): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   84.387077][  T902] usb 1-1: USB disconnect, device number 20
[   84.411942][ T2793] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.414289][  T369] usb 3-1: USB disconnect, device number 34
[   84.447764][ T2800] netlink: 104 bytes leftover after parsing attributes in process `syz.3.818'.
[   84.505361][ T2813] rust_binder: Write failure EFAULT in pid:415
[   84.513047][ T2811] capability: warning: `syz.3.822' uses 32-bit capabilities (legacy support in use)
[   84.775344][ T2821] deleting an unspecified loop device is not supported.
[   84.775938][   T36] audit: type=1400 audit(2000000032.759:12490): avc:  denied  { read write } for  pid=2820 comm="syz.2.825" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.784198][ T2823] rust_binder: Read failure Err(EAGAIN) in pid:421
[   84.807430][   T36] audit: type=1400 audit(2000000032.759:12491): avc:  denied  { open } for  pid=2820 comm="syz.2.825" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.838728][   T36] audit: type=1400 audit(2000000032.759:12492): avc:  denied  { ioctl } for  pid=2820 comm="syz.2.825" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.879758][ T2825] rust_binder: Read failure Err(EFAULT) in pid:425
[   84.893568][ T2828] FAULT_INJECTION: forcing a failure.
[   84.893568][ T2828] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.914012][ T2828] CPU: 0 UID: 0 PID: 2828 Comm: syz.2.827 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   84.914048][ T2828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.914068][ T2828] Call Trace:
[   84.914076][ T2828]  <TASK>
[   84.914086][ T2828]  __dump_stack+0x21/0x30
[   84.914128][ T2828]  dump_stack_lvl+0x10c/0x190
[   84.914153][ T2828]  ? __cfi_dump_stack_lvl+0x10/0x10
[   84.914184][ T2828]  dump_stack+0x19/0x20
[   84.914213][ T2828]  should_fail_ex+0x3d9/0x530
[   84.914246][ T2828]  should_fail+0xf/0x20
[   84.914272][ T2828]  should_fail_usercopy+0x1e/0x30
[   84.914287][ T2828]  _copy_from_user+0x22/0xb0
[   84.914304][ T2828]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x491/0xa290
[   84.914356][ T2828]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   84.914448][ T2828]  ? is_bpf_text_address+0x17b/0x1a0
[   84.914471][ T2828]  ? kernel_text_address+0xa9/0xe0
[   84.914504][ T2828]  ? is_bpf_text_address+0x17b/0x1a0
[   84.914527][ T2828]  ? kernel_text_address+0xa9/0xe0
[   84.914553][ T2828]  ? __kernel_text_address+0x11/0x40
[   84.914571][ T2828]  ? unwind_get_return_address+0x51/0x90
[   84.914589][ T2828]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   84.914617][ T2828]  ? arch_stack_walk+0x10b/0x170
[   84.914673][ T2828]  ? is_bpf_text_address+0x17b/0x1a0
[   84.914698][ T2828]  ? kernel_text_address+0xa9/0xe0
[   84.914717][ T2828]  ? __kernel_text_address+0x11/0x40
[   84.914736][ T2828]  ? unwind_get_return_address+0x51/0x90
[   84.914756][ T2828]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   84.914791][ T2828]  ? arch_stack_walk+0x10b/0x170
[   84.914839][ T2828]  ? __kasan_check_write+0x18/0x20
[   84.914861][ T2828]  ? _raw_spin_lock+0x8c/0x120
[   84.914884][ T2828]  ? __cfi__raw_spin_lock+0x10/0x10
[   84.914928][ T2828]  ? stack_depot_save_flags+0x38/0x800
[   84.914963][ T2828]  ? _raw_spin_unlock+0x45/0x60
[   84.914991][ T2828]  ? rust_helper_spin_unlock+0x19/0x30
[   84.915024][ T2828]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   84.915071][ T2828]  ? __kasan_slab_alloc+0x73/0x90
[   84.915094][ T2828]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   84.915132][ T2828]  ? security_inode_alloc+0x51/0x200
[   84.915164][ T2828]  ? inode_init_always_gfp+0x756/0x9e0
[   84.915183][ T2828]  ? proc_pid_make_inode+0x25/0x140
[   84.915200][ T2828]  ? proc_pident_instantiate+0x6d/0x2c0
[   84.915224][ T2828]  ? proc_tid_base_lookup+0x2f/0x40
[   84.915255][ T2828]  ? do_filp_open+0x1c6/0x3e0
[   84.915280][ T2828]  ? do_sys_openat2+0x12c/0x1c0
[   84.915309][ T2828]  ? __x64_sys_openat+0x13a/0x170
[   84.915329][ T2828]  ? x64_sys_call+0xe69/0x2ee0
[   84.915352][ T2828]  ? do_syscall_64+0x58/0xf0
[   84.915379][ T2828]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   84.915416][ T2828]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   84.915458][ T2828]  ? avc_has_perm_noaudit+0x268/0x360
[   84.915480][ T2828]  ? __asan_memcpy+0x5a/0x80
[   84.915503][ T2828]  ? avc_has_perm_noaudit+0x286/0x360
[   84.915535][ T2828]  ? avc_has_perm+0x144/0x220
[   84.915564][ T2828]  ? __cfi_avc_has_perm+0x10/0x10
[   84.915595][ T2828]  ? selinux_file_open+0x457/0x610
[   84.915618][ T2828]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   84.915640][ T2828]  ? avc_has_extended_perms+0x7c7/0xdd0
[   84.915663][ T2828]  ? __asan_memcpy+0x5a/0x80
[   84.915698][ T2828]  ? avc_has_extended_perms+0x921/0xdd0
[   84.915727][ T2828]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   84.915766][ T2828]  ? do_vfs_ioctl+0xeda/0x1e30
[   84.915783][ T2828]  ? arch_stack_walk+0x10b/0x170
[   84.915807][ T2828]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   84.915838][ T2828]  ? _parse_integer+0x2e/0x40
[   84.915871][ T2828]  ? ioctl_has_perm+0x384/0x4d0
[   84.915897][ T2828]  ? has_cap_mac_admin+0xd0/0xd0
[   84.915916][ T2828]  ? proc_fail_nth_write+0x17e/0x210
[   84.915937][ T2828]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   84.915963][ T2828]  ? selinux_file_ioctl+0x6e0/0x1360
[   84.915990][ T2828]  ? vfs_write+0x8ba/0xe80
[   84.916008][ T2828]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   84.916033][ T2828]  ? __cfi_vfs_write+0x10/0x10
[   84.916052][ T2828]  ? __kasan_check_write+0x18/0x20
[   84.916074][ T2828]  ? mutex_unlock+0x8b/0x240
[   84.916097][ T2828]  ? __cfi_mutex_unlock+0x10/0x10
[   84.916136][ T2828]  ? __fget_files+0x2c5/0x340
[   84.916161][ T2828]  ? __fget_files+0x2c5/0x340
[   84.916184][ T2828]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   84.916218][ T2828]  ? __se_sys_ioctl+0x114/0x1b0
[   84.916235][ T2828]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   84.916262][ T2828]  __se_sys_ioctl+0x132/0x1b0
[   84.916288][ T2828]  __x64_sys_ioctl+0x7f/0xa0
[   84.916311][ T2828]  x64_sys_call+0x1878/0x2ee0
[   84.916344][ T2828]  do_syscall_64+0x58/0xf0
[   84.916365][ T2828]  ? clear_bhb_loop+0x50/0xa0
[   84.916380][ T2828]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   84.916405][ T2828] RIP: 0033:0x7f4b9dd8ebe9
[   84.916435][ T2828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.916455][ T2828] RSP: 002b:00007f4b9ec40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.916482][ T2828] RAX: ffffffffffffffda RBX: 00007f4b9dfb5fa0 RCX: 00007f4b9dd8ebe9
[   84.916499][ T2828] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   84.916511][ T2828] RBP: 00007f4b9ec40090 R08: 0000000000000000 R09: 0000000000000000
[   84.916522][ T2828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.916532][ T2828] R13: 00007f4b9dfb6038 R14: 00007f4b9dfb5fa0 R15: 00007ffd9b8f9ac8
[   84.916565][ T2828]  </TASK>
[   85.008069][  T526] cdc_mbim 2-1:1.0: setting tx_max = 16384
[   85.367188][ T2843] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.382982][  T526] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[   85.444445][ T2844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445
[   85.452519][  T526] wwan wwan0: port wwan0mbim0 attached
[   85.513277][  T526] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 4e:87:e2:cd:d1:3e
[   85.652841][    C1] ------------[ cut here ]------------
[   85.658413][    C1] WARNING: CPU: 1 PID: 30 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0
[   85.658767][  T148] 8021q: adding VLAN 0 to HW filter on device wwan0
[   85.667708][    C1] Modules linked in:
[   85.678244][    C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   85.689761][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   85.699886][    C1] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[   85.705833][    C1] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 81 26 ee 05 00 0f 85 be 00 00 00 c6 05 74 26 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[   85.725501][    C1] RSP: 0018:ffffc900001f7820 EFLAGS: 00010246
[   85.731608][    C1] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000
[   85.739643][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900001f78d8
[   85.747674][    C1] RBP: ffffc900001f7958 R08: ffffc900001f78d7 R09: 0000000000000000
[   85.755722][    C1] R10: ffffc900001f78c0 R11: fffff5200003ef1b R12: ffffc900001f7860
[   85.763744][    C1] R13: dffffc0000000000 R14: 1ffff9200003ef08 R15: 0000000000000000
[   85.771774][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   85.780754][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.787368][    C1] CR2: 000055d9f5b36300 CR3: 000000011eba2000 CR4: 00000000003526b0
[   85.795386][    C1] Call Trace:
[   85.798701][    C1]  <TASK>
[   85.801687][    C1]  ? handle_softirqs+0x1ab/0x630
[   85.806676][    C1]  ? run_ksoftirqd+0x20/0x30
[   85.811337][    C1]  ? kthread+0x2c7/0x370
[   85.815636][    C1]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   85.821427][    C1]  ___kmalloc_large_node+0x9c/0x1d0
[   85.826671][    C1]  __kmalloc_large_node_noprof+0x1e/0xe0
[   85.832357][    C1]  __kmalloc_node_track_caller_noprof+0x262/0x440
[   85.838821][    C1]  ? kasan_save_alloc_info+0x40/0x50
[   85.844150][    C1]  ? __alloc_skb+0x144/0x370
[   85.848815][    C1]  kmalloc_reserve+0x380/0x500
[   85.853631][    C1]  __alloc_skb+0x144/0x370
[   85.858091][    C1]  __netdev_alloc_skb+0x108/0x420
[   85.863146][    C1]  ? __cfi___netdev_alloc_skb+0x10/0x10
[   85.868738][    C1]  ? kasan_save_alloc_info+0x40/0x50
[   85.874065][    C1]  ? __kasan_kmalloc+0x96/0xb0
[   85.878872][    C1]  rx_submit+0x110/0x8e0
[   85.883158][    C1]  rx_alloc_submit+0xaa/0x140
[   85.887879][    C1]  usbnet_bh+0x76c/0x990
[   85.892235][    C1]  usbnet_bh_tasklet+0x20/0x30
[   85.897037][    C1]  tasklet_action_common+0x235/0x630
[   85.902351][    C1]  tasklet_action+0x28/0x30
[   85.906920][    C1]  handle_softirqs+0x1ab/0x630
[   85.911850][    C1]  run_ksoftirqd+0x20/0x30
[   85.916302][    C1]  smpboot_thread_fn+0x490/0x8c0
[   85.921311][    C1]  kthread+0x2c7/0x370
[   85.925436][    C1]  ? __cfi_smpboot_thread_fn+0x10/0x10
[   85.930942][    C1]  ? __cfi_kthread+0x10/0x10
[   85.935562][    C1]  ret_from_fork+0x67/0xa0
[   85.940032][    C1]  ? __cfi_kthread+0x10/0x10
[   85.944670][    C1]  ret_from_fork_asm+0x1a/0x30
[   85.949471][    C1]  </TASK>
[   85.952508][    C1] ---[ end trace 0000000000000000 ]---