last executing test programs:

36.311693692s ago: executing program 1 (id=636):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x4a8800)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x67bd37e9, 0x1f, 0x5, 0x2, 0x3, 0x14000000})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ppoll(&(0x7f0000000240)=[{r1, 0xc4}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x4a8800) (async)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x67bd37e9, 0x1f, 0x5, 0x2, 0x3, 0x14000000}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ppoll(&(0x7f0000000240)=[{r1, 0xc4}], 0x1, 0x0, 0x0, 0x0) (async)

36.207390464s ago: executing program 1 (id=639):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, &(0x7f0000000440)={[{@uid={'uid', 0x3d, 0xee01}}], [{@euid_gt}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}]})
sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCCBRK(r2, 0x5428)
sendfile(r1, r0, 0x0, 0x80000000)

36.202970514s ago: executing program 1 (id=640):
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x55)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x800, 0x0, 0x0, 0x0, 0x18, 0x7, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x11, 0x3, 0xfe, 0x80, 0xf6, 0x4}], 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000200)=""/143, 0x8f}], 0x2, 0x7, 0x562)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000040)={0xffffffffffffff00, 0x0, 0x1, 0x3, 0x1, [0x8000, 0xffffffff, 0x7, 0x4]})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r7, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x6, 0x2, @thr={&(0x7f00000000c0)="49f92bda4fd8169b58f9d85de74a18b532c8a8d20b27008e7dcb4d82b6ac78b1718a6809a8a1806be602f8ebf7f64c9c1cc4ab7e6d0845d0444839a2aa436ca158db655b3800790c9217f4937dfbb8acb9a0ad7a00"/94, &(0x7f0000000140)="af4dd4bdfbe9ee1ea0aed95ce534024a7dbdf883ea56956247a8e7c8e89f3173da79484a32244f332279677878c9d06de9c34c19fa88ed4d1a452f628d208e1291a14d570800cdea24b24ad39abc85d9bf57150f7507f71e8acd4434649838890994535503e618f584d97c4557b8374637a707fc2a4c7d0a382d584ad716e0ee82a44b49467cab400366794578c117482f7dfbeebd0ff0524f7b00000001000000000f7ac04a2f793c9264844cbf77b6cc8664c6dfdd3f94ac717d8a643a94895c0a6a8ba213dc7be791beef0d37e2e777a3d0c504022612d7981fc0dbd55bb6a9b0dc18d43408d1a1fa1740c73a13"}}, &(0x7f0000000280)=<r8=>0x0)
timer_gettime(r8, &(0x7f00000002c0))

36.007025148s ago: executing program 1 (id=645):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x9, 0xffffffff, 0xd6, 0x18, 0x2, "1041e9477080cc300f0fe932714582e84539f7", 0x800, 0x2})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'dvmrp1\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x9, 0x7, 0x2, 0x100, 0xfffffff9, 0x4, 0x7, 0x7, 0x0, 0x9f3, 0xffffffff, 0x8, 0x2, 0xffff8001, 0x0, 0x8001, 0x6596, 0x0, 0xfffffff8, 0x9, 0x6, 0x5}})
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4050)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000180)=""/52)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x4}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="480200001a0007000000000000000000fc020000000000000000000000000000e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000100000000e40c00000000000007000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020)

35.91847973s ago: executing program 1 (id=648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = gettid()
capset(&(0x7f0000000740)={0x20080522, r1}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_INPUT(r4, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb)
lseek(r5, 0x4, 0x4)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4)
ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x45)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r6)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000080)=0x80000000)

35.915527909s ago: executing program 1 (id=649):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents'])
r1 = syz_io_uring_complete(0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@getpolicy={0x74, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x0, 0x4e23, 0xbb77, 0xa, 0x60, 0x80, 0x73, 0x0, r2}, 0x6e6bb0, 0x1}, [@lifetime_val={0x24, 0x9, {0x1, 0x6, 0x1ff, 0x7b5938d5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@getpolicy={0x74, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x0, 0x4e23, 0xbb77, 0xa, 0x60, 0x80, 0x73, 0x0, r2}, 0x6e6bb0, 0x1}, [@lifetime_val={0x24, 0x9, {0x1, 0x6, 0x1ff, 0x7b5938d5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000003c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000340)={0x9, 0x6e})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x80000) (async)
syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x80000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8)
sendto$inet(r7, &(0x7f0000000280)="618d046d7a605f4c38e5cd8358eee66a561a6976dd3c71dd249e3f619fb888234fb9c754", 0x24, 0x4, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

35.854551481s ago: executing program 32 (id=649):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents'])
r1 = syz_io_uring_complete(0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@getpolicy={0x74, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x0, 0x4e23, 0xbb77, 0xa, 0x60, 0x80, 0x73, 0x0, r2}, 0x6e6bb0, 0x1}, [@lifetime_val={0x24, 0x9, {0x1, 0x6, 0x1ff, 0x7b5938d5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@getpolicy={0x74, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x0, 0x4e23, 0xbb77, 0xa, 0x60, 0x80, 0x73, 0x0, r2}, 0x6e6bb0, 0x1}, [@lifetime_val={0x24, 0x9, {0x1, 0x6, 0x1ff, 0x7b5938d5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000003c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000340)={0x9, 0x6e})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x80000) (async)
syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x80000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8)
sendto$inet(r7, &(0x7f0000000280)="618d046d7a605f4c38e5cd8358eee66a561a6976dd3c71dd249e3f619fb888234fb9c754", 0x24, 0x4, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

5.192878281s ago: executing program 2 (id=897):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r2) (async)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
close_range(r0, 0xffffffffffffffff, 0x0)

2.209038738s ago: executing program 2 (id=945):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x3, 0xffffffffffffffff})
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000000ec19ccbd77e799ea43ce39a18975299f9a70ef"], 0x18}}], 0x1, 0x20000000)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.07723673s ago: executing program 2 (id=952):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x3970b8090d64f40c}})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

1.960922513s ago: executing program 4 (id=954):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000140)=0x277, 0x4)
getsockopt$packet_int(r1, 0x107, 0x13, 0x0, &(0x7f0000000240)=0xffffffffffffff94)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

1.960596183s ago: executing program 4 (id=955):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0xfffffffffffffffe, 0x4}, @flat=@weak_handle={0x77682a85, 0xe, 0x2}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

1.960338672s ago: executing program 4 (id=956):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
stat(0x0, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001400e04600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x100f, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0})

1.420028113s ago: executing program 0 (id=967):
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40485404, &(0x7f0000000180)={{0x3}})
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

1.223132856s ago: executing program 2 (id=968):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000100)={0x2, 0x2, 0x10000, 0x8, 0x0, 0x7}) (async)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0x57, 0x2})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0xc) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

1.086638939s ago: executing program 0 (id=974):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400000, &(0x7f00000002c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"})
syz_usb_connect(0x0, 0x32c, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x66, 0xb1, 0x8b, 0x0, 0x7392, 0x7811, 0xcfab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31a, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0x9e, 0x3, 0x9, 0xff, 0xff, 0xff, 0xfd, [], [{{0x9, 0x5, 0xb, 0x10, 0x7ff, 0x8, 0xa2, 0x80, [@generic={0x3e, 0xc, "168924e989eb6d2e0dc45dfc9afccd9ce7e6275a21b758481f4f8b607e9a81902a78f9b1137d9b3b029e1d441b813e6cd86de205c79126995afd36a0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xd, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}, @generic={0xab, 0x5, "55a18f96650b2c7e2bf27a8fba4f68f2cacef2c8474a22650dc7000f0809279deeb96bd9dd00da84ec066523d00e7b1f648418dad80420686bc16c84b73b4f7736d92c3a6629120609cab157fbec4cb0589326688e9d0a3072b2cac0a8392983b63621556780cd4c1e7ff221d6873487c040592b0fd5042c4168fe0dcc95b3cd4bd9e452af999014e5fcf72bd9cf17fa18d802fd7d0f90761c630b2f258f038da905fed1c3455d2536"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x4, 0xf8, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf8, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x7, 0x80, 0x9, [@generic={0xa7, 0x31, "e49df72719bd344be01b5e97fb521de8576827f151471b355bfb542ebb557a1c441a28c66d16598168202d6a106ccb7abf701388546daaa8c586c678ea447c203e87eed6ebf9a904ba5bd7290ef45b99b06f5cf1fad606b49eaf1d6e27106e7d0f772cefd819d2e478386b6024a594e58f089e87d6b4679ba07a656c25bca48a4006f42cfce83229beb467a0f6ad76fc4adcb21c747d0c962e3d58e3cc963f13c79db182ae"}]}}, {{0x9, 0x5, 0x7, 0xf, 0x20, 0x1, 0xdb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xfa, 0x40, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0x1, 0x61}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf49f}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x3, 0x9e, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x9}, @generic={0xfd, 0xb, "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"}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xd, 0x3, 0x5, 0xff, 0x1}, 0x183, &(0x7f0000000740)={0x5, 0xf, 0x183, 0x4, [@generic={0x9f, 0x10, 0x3, "9c8736f686f86045a13a7a24080865f5f98fb9d943c270282895153be4a0800e2f6d88c80a41b8b1426304f66cf121b94589afab1b5854ea29377fa90210695d2d40da825b88d7a9dc5c8a686028f12abf2aae34996a5361a8d56f3b56b2de4043a07c20127a6580d079538c27c58c4f6dabd6eaaf994f5feb8cf01a975f1464f18bc02a7219cf4db0e4b5d48dc4c77e5552036a406379652983293c"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x87d5, 0x0, 0xc, [0xffff30, 0x3fc0]}, @generic={0xc1, 0x10, 0xa, "c4096fe4e5b82900eda4f50a595175fb6563a4ca1b89dfedb5cb8bc4c524897efe76a9b1006415637cedd9e0de0f87bd0e625a38c65660e8ca7187752c68ea4abb60019e2709b70ebd4b9258493113f7328650bc5ce926e7b171f09f00434a749ec720b69add5a014af89efd388a176385b0303a1e4cc6e3afe7f971751a5ef878d3bacfa4fe41d75005bda634271ab6393be6131e2b45ca4874e55a5a8e86274a6dc69dab6bd04c1c5496a7c7779c6c4fff80adca8216a06dd4b75aed76"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x5}]}, 0x3, [{0x31, &(0x7f0000000140)=@string={0x31, 0x3, "6168b3d061dd51108b5655ef24f5020523aab8bb339a27404c996460e485172079848812b80f3082fcbf0c83957857"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4ff}}]})

966.001762ms ago: executing program 2 (id=976):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
lsm_get_self_attr(0x68, 0x0, 0x0, 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

964.595202ms ago: executing program 2 (id=978):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'unlock', ' ', 'mem'}, 0xb)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141)
syz_genetlink_get_family_id$batadv(&(0x7f0000002e00), r2)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0'])
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x0, &(0x7f00000001c0)='~Y\x9a\xa2!\xb7\x03\xba\xb1$E\xb4\xac\x03&7\xb9\xc0\x96\xe8\x1e\x00r\x81N\xc5\x80A\xc1\xc1\xe6\x0f\xc7O7;=z\x19C\x96\xc3\xad\xa2\x8c\x0f\'\xeeiAm~\xd6\xe9$2\xee6.O\'\xa5\xac\x9e\xf1&+S\xbb\xb6\xe1\xbf\xeb\b\xe9\xcd\xe0!7\x9f^X\xea\xdd\x9b\xc1=l\t\xc68\a][\x19N\x82\xe0\xeb\xbeD\\~?\f\xfb\x99\x13w+\xe9\xe4[M\xa4\xdfY\x05MI\xd7}\x84D\xfe+\xb3\xb1\x94\xc3\xe90\xa0U\xa7\xe8\xfc\x85\xb2.G\xb0kG\xf8\x15\x84\x00_J\xea50X\xaar\x98rQ!9]\x00'/172)
r3 = syz_usb_connect$cdc_ncm(0x2, 0xfc, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x90, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x2, 0x1, 0x9, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "66eb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x9, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x36}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x5}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x101, [0x7f, 0x4b29]}, @acm={0x4, 0x24, 0x2, 0xe}, @mdlm_detail={0x5e, 0x24, 0x13, 0xef, "6371c426eafbd35703d015377b9c15259d966d98f77edb0dafbbfae7995815c37a8f2f7a16cfc897e028b80ebde70602b10a0205ef32fb65a851cbaccb846b9c8d98b4c1f5191f293414942658e60539704e0c591257990f0265"}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x7, 0x3, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2e, 0x1, 0x17}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0xfd, 0x6, 0xff, 0x10}, 0xb9, &(0x7f0000000400)={0x5, 0xf, 0xb9, 0x6, [@generic={0x81, 0x10, 0xb, "7493286ef00d9d3775fb484fb8550f8bea5e4a3253c06a8eeebd702bba772693f3c7797f41ab767075d56305719868c2dae4c087a3b25d194afafcb06f075da6efd1db7e5559a1e14cbb2fe65b583f8336b085b79ff41182d88fd0e88514280b6ae6ed704f5f832f3ef6febcc8f676b0dfb8406df1ba0e3ef19cad7912bf"}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x1, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x8b, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "59652db750f9ac8a3e73e2683cfa9fb3"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x7d, 0xa9, 0x5, 0x5}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x61, &(0x7f0000000500)=@string={0x61, 0x3, "2e4863eccb691a545185285179347384acae909760c83d53038661559393f52b9c0abe899f6f76295b685fb4780108917638bfe209d05814f32cbb4cc1ff644e5ab9c64c7acbf677f25724177a31500f5dbd055f2fcc0390e8155e77ca98a5"}}]})
syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40, 0x0, 0x9f, {0x9f, 0x5, "8f7bdf6219b533913a80bee1ccb10bcfe402231231cc831c782de21e528488422a0493dcb5e196f46dc3b08d5bf02f185f9038e6e1dc0903dabb1746b535c7323c5b1849e0b0d27d9d8cbe79be8eec458f4ab91cba2d91edd3bd664844000a705d6740018703829a424b7752938f78e33075960cf64c5fbc028db4562784d77c705e0c720e7f13a2d106e83bf0bd736d7261e05229c954d4e29db375b9"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000740)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x6, [@ptm_cap={0x3}, @generic={0x3e, 0x10, 0x1, "1297a31f0c19fa93f25862e27bbda9e25f23a46940fbedfeb26ee58c5a0789a617e90546b2ed58aa1c08560c764f9c50af170a87740f33321bbb14"}, @ssp_cap={0x10, 0x10, 0xa, 0x68, 0x1, 0x8, 0xf00, 0x5, [0xff3f3f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xa2, 0x3, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2e9738e9361456c9ece54ceadb4f2acb"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2875d9b5dea93d4bf92390a99cb4ddf9"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x17, 0x1, 0x10, 0x6a, "afead459", "1ba26ff5"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x38, 0xf, 0x4, 0x7, 0xfff7}}}, &(0x7f0000002d40)={0x84, &(0x7f0000000880)={0x20, 0x17, 0x7f, "fc4968edbe58bdbf110ca4e452ab54205822f170e06d43ba5debeca35ba2a784f6f4bd2528f5994552eb60db9c4c6f0c99dcd3b36fc054d0f2232df65201593df3ad6fc38de1895d1eafe87116bb4e4b05c60e3cb176a7e8a3a21e53c0608796e9b043a67524c7df08ebfa144d9d19d97a0eddc5137c78a688d31620c2036c"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000029c0)={0x0, 0x8, 0x1}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf0f0]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "bd06"}, &(0x7f0000002b40)={0x40, 0xf, 0x2}, &(0x7f0000002b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "eb4f"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1}, &(0x7f0000002d00)={0x40, 0x21, 0x1, 0x6}})
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
lseek(r4, 0xffffffffffffffff, 0x1)
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020)

653.357507ms ago: executing program 4 (id=984):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r2 = gettid()
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x20, 0x84)
ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000280)=0x3)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000000c0)=""/74, 0x4a}], 0x2)
tkill(r2, 0x8)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x2, 'syz_tun\x00', {0x7}, 0x8})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r6)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000080", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
getsockopt(r10, 0x6, 0xb, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)

589.661018ms ago: executing program 4 (id=985):
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0)

534.26193ms ago: executing program 4 (id=986):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000))
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
pipe(&(0x7f0000000100))
brk(0x55555ede6001) (async)
brk(0x55555ede6001)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000062a000/0x400000)=nil)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) (async)
syz_usb_control_io$sierra_net(r2, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000003c0)={0x20, 0x22, 0x7b, {0x7b, 0x4, "b5209049d9c93c2fc581de180d3575de414b2815394cf767ebaa32db1d89f9e59e9c23e95ec9b52fdd014fcf01380cd652bd60fbf67a2c1dffb823b4f9aa2372e1d2e3fc1795559594aa85e59ddcc7c21bb8cc939ba8fcf1b8168f112fb0b442458c7fc21790fc0fce89d8fdc5d7adacb828bc00f03734c8eb"}}, &(0x7f0000000480)={0x0, 0x3, 0x76, @string={0x76, 0x3, "72a2878f0c023d8eaf4525e6ddec8e03a2e1c4206d3dfd618f844ff0b6ee5acff37bb675fbc3b12a099bc58d7158216f15864d49c258415b51e42abcba004489103c31d4b80498a5606770034d14707fe4c179d36cd1e47d39f8e16ed61ebb8e067c4bceb31a7178071c59a2af6813226472646e"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000500)={0x40, 0x9, 0x3b, "1b404af7a60867c747456fc27696408b92dfac9e3dfd13820e99de2d21e9505eccf31ecb6bcabad8005398728ea6677ac46799e47ab2b9f0ab979d"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x14, {0x12, "3c5ee605afab233af705eb6bacc112b64bce"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x8}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched_retired(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb, 0xf}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
close_range(r6, 0xffffffffffffffff, 0x0)

533.805069ms ago: executing program 0 (id=987):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
write(r0, &(0x7f0000000400)="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", 0x1f000)

532.90947ms ago: executing program 0 (id=988):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
futex(&(0x7f000000cffc), 0x9, 0xfffffffd, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

530.472029ms ago: executing program 0 (id=989):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xb8, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff06, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095954d00d01aa9d1c32ddf60cb5e46ebc4847109dc7e3f503a39b856a4e426bab18cfa8a34263dcba43d5ae4264c323ab6bac30a9d96e2262636856e33e3e18bc5df81", 0x45}], 0x1}}], 0x1, 0xc8000)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000001980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000001400)=ANY=[@ANYBLOB="80051000", @ANYRES16=r3, @ANYBLOB="a7ac26bd7000fbdbdf257a00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x580}, 0x1, 0x0, 0x0, 0x4044854}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000a54000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x1000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r6=>0x0)
syz_open_procfs$pagemap(r6, &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r7, 0x29, 0x50, 0x0, &(0x7f0000000180))

352.561903ms ago: executing program 3 (id=990):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
close_range(r0, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r3])
read$FUSE(r4, &(0x7f00000061c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000001c0)={0x3, 0x0, 0x5, 0xe, 0x16a, &(0x7f0000000940)})
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36)
write$FUSE_OPEN(r8, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, &(0x7f0000000440), 0x40000000, 0x0)
r9 = dup3(r8, r4, 0x0)
fchownat(r9, &(0x7f00000003c0)='./file0\x00', r6, r7, 0x100)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="897b6f0d0b22d4d2e91ba8e3f6970d4854ba7af3092424f413b55431f9c4ad127812cfea0e5fc25ef2ef79d58ab04128b7f5"])
read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0x80000}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000b, 0x13, r11, 0xeb3f3000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1})
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000400)={0x6, 0x2})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r12, 0x40047211, &(0x7f0000000040)=0x8)

140.462867ms ago: executing program 3 (id=991):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
setrlimit(0x8, 0x0)
socket(0x18, 0x3, 0x3a)
fcntl$getown(0xffffffffffffffff, 0x3)
clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001, 0x3})
socket(0x18, 0x3, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
socket(0x8, 0x800, 0x81)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

125.700747ms ago: executing program 3 (id=992):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xc)
openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080))

72.646768ms ago: executing program 3 (id=993):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x441200, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x42)
readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1) (async)
r2 = fcntl$getown(r0, 0x9) (async)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x602, 0x8, 0x2}, 0x18)
sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2d8, 0x2f, 0x20, 0x70bd2c, 0x25dfdbff, {0x16}, [@typed={0x8, 0x9b, 0x0, 0x0, @pid=r2}, @nested={0xcf, 0x10b, 0x0, 0x1, [@nested={0x4, 0x9f}, @generic="d07d1e340ed3485218d4371e2bf7a12d85b56b7327b25095a02d8f0af739c527376c4c7284c8764c5173d00e3b764f401687c1ff2b4382ae1cd29f81f60b6097a20398d1ec2cd9fa6f5c200fbd8d24fc0af8502c1d9bfd7c8a6a644694117851e154e98833eabd69fda3e23343423834f4d7a681b77107593d18b5ad1bc2034f9a8a742751d3057175", @generic="3d3c49ce4ba6fd97095cbe9f5f3166cc713aa54b1a31c4ba525b3146a5dc019233023acacaabf7da7d12407b3e8a9aefbf6afac6e0261495384a58e2162f"]}, @nested={0x28, 0x13c, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x151, 0x0, 0x0, @str='!.$\x00'}, @nested={0x4, 0xb6}, @typed={0x8, 0x50, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x1}]}, @typed={0x4, 0x127}, @generic="fe9f00debc2756008797b94846c2fc884c89cc546fc4876e526df6f11aab207a6638b02617d4746fafbe8dca3e6758419bd4a41bf4d52a9f365808580a487aac216ce82fcd1259ac2441c581557c13febbe1fec9681d63bb6ec5d099e7d6fccc0fe3111cdb0b3a2101ecfb37717f4f82583545f787603b7e09c565bda1fd97b757abbaa429f2276789706df5f5bf2fa8c95cdae91ff974482e2fa67008ac29fa46d4cf763a448183968f5c7188a4", @generic="21f0e57fec5da01c468455dea7be2c1a9d2815ce6bfff42063c9f40c1238e65836c99424e99baac1bdc5270f00fdc5e812349d8f44a76dcff9ddd15898a8d241b86674ceda180d3ebde101ef40e9eac4647d9fa52a14dc79287b1d0f64d2b6a69fcd8694289b7eb2d72c5976d6cdf4c111b103c1bc370c36c9ba4764eaba5bf1b679c6add8d39fb3316daa9cdde94f4dfc6b461e8ca716cb105377b52b5737394568f3271e3f764722be4fecb9c3a71033", @generic="52a697a62c2fcd3cca09400e481805f3828cf29308453950272d6a455c", @nested={0x41, 0x44, 0x0, 0x1, [@nested={0x4, 0x104}, @generic="cd265b8ca1e26fa8f51ae3b4c6a45f75", @generic="3f5dfc819f9922321e", @typed={0x16, 0x80, 0x0, 0x0, @str='+()^G}\xac$@{/#&+{}.\x00'}, @nested={0x4, 0x111}, @nested={0x4, 0x61}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004001) (async)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
mkdirat(r4, &(0x7f00000005c0)='./file0\x00', 0x107) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x40040, 0x0)
ioctl$TIOCNOTTY(r5, 0x5422)
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
fchown(0xffffffffffffffff, r6, r8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs2/custom1\x00', 0x802, 0x0) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000800)=0x17) (async)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000840)=0x4000, 0x4) (async)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000880)={0x80, 0xffc0, 0x83}) (async)
r9 = syz_usb_connect$cdc_ecm(0x4, 0x73, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x8, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x90, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "a0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7b, 0x4, 0x5, 0xc2}, [@acm={0x4}, @obex={0x5}, @mdlm_detail={0xc, 0x24, 0x13, 0x2, "8456c0bcc9a13cca"}, @dmm={0x7, 0x24, 0x14, 0xcb, 0x7e}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x21, 0x8, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x3, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x50, 0x0, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x110, 0x8, 0x24, 0x2, 0xff, 0x85}, 0xf, &(0x7f0000000980)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x77, 0x6, 0x800}]}, 0x3, [{0x55, &(0x7f00000009c0)=@string={0x55, 0x3, "062d2f0aecf2c1016def640979a65ead19f19fce2e1ef47c59e63ed7d8b42a6c509b97e8480c6f732cd60e2b03a34f83e3626208fb5901bae7f123f05798437ed08b87e5ff4e1168430bdfc48f2e30fda55e43"}}, {0x6b, &(0x7f0000000a40)=@string={0x6b, 0x3, "a1d853f8d52b30245c89499cf46a1cfad1066a6edbe48655bf5de4a7a3de644ccc2067b7545e63c8e1ac2cc3db47ca5e148ca05f075e1f3b47671aadf9e88bb44f9269ec5d969e8f9c56ff736833bef68a41444dd08bfa1b834171be2394227c3ad3e823588438e502"}}, {0x42, &(0x7f0000000ac0)=@string={0x42, 0x3, "5d47d085eac6d0eb76841f291a3c35ec9e611c1347025966fb25b21ae26c04bb926d9b03a30589edf9ee6e0007fcb46b080d0ff5d5c068e0d00776b9bf02d44e"}}]})
syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000c40)={0x14, &(0x7f0000000b80)={0x40, 0x4, 0x3b, {0x3b, 0x4, "3a44e2a600778719c9ea22124fc118046d358af761e3352bd516fd5f19b233eef8d9bdd0463f72162faad4162cfa241519ea18d36454573757"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x0, 0x9, 0x4f, "98e8ac51278323c390db56468df98e0102aab559756e152fd99ce90f25d98f957df48d87df7c9968f603f5b0d24719eae744b8c1a0b5de021b08f3fb2c7002eaafb37e5825a52196b5259cf6bd4139"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x80}})
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x1010, r4, 0x80000000) (async)
ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000dc0)={0x2, 0x8, 0x5, 0x0, 0x8dea})
r10 = open$dir(&(0x7f0000000e00)='./file0\x00', 0x12001, 0x10)
readlinkat(r10, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)=""/250, 0xfa) (async)
getgroups(0x2, &(0x7f0000000f80)=[<r11=>r7, r8])
setfsgid(r11) (async)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000fc0)={r2, 0x0, 0x2})
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001040)={'broute\x00', 0x0, 0x0, 0x0, [0xff, 0x666, 0x6, 0xffffffffffff0000, 0x7, 0x80], 0x2, &(0x7f0000001000), 0x0, [{}, {}]}, 0x98)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000001140)={'sit0\x00', &(0x7f0000001100)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast1, 0x2, 0x6}})

72.293188ms ago: executing program 3 (id=994):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = syz_open_procfs(0x0, 0x0)
pread64(r1, 0x0, 0x0, 0x9a)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

71.397208ms ago: executing program 3 (id=995):
r0 = getpid()
clock_getres(0xfffffffffffffffd, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="fe2507005d0900000000000000"], 0x0}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x7c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1e28, 0x3d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xfffffffffffffd8e, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040081)
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r7, &(0x7f0000000480)="532e2eac770767f7429748", 0xb)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_clone(0x10100d00, &(0x7f0000000180)="57e93c904b3b3342b61b650d4bf80cfa48bd8609cf947b9321c9079f6374c206886f34d7bd4e2b5bba50c98fbde92008cf0e4bc311a98be3c6d0af02ca4607de1a7507dbc0f8a1af8d2fc41b0763e5d21412a37bb9be003d02bf0f478aa2c7f4d3bdd7498d52d4fc46f4533210090c222c53a361cdd2a26a7b67704911132d81b6f0fc327078f7f4eb8111d0b5cbd3632b68cb723e8e80f371b79483bebc5651033d7138f2d03f86fa5c4015513b1caece921b10ce4bf83e33c31f20a281d41f69f4850c790f78923106b62ee3e421694809b1", 0xd3, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)="3faa3e7d3ee7ea8a1d730e2d2fd0bb5e3ec59f927b280b9956e69b3bc9bc854c0587d85a0e580a64aadc4b76ddb584")
r8 = syz_pidfd_open(r0, 0x0)
setns(r8, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

0s ago: executing program 0 (id=996):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0x9]})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80c00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4008810}, 0x4040089)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff02000000000000000000000000000100000000010300"], 0x23c}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0)
timer_create(0x3, 0x0, &(0x7f0000000340)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4008000)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r3)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts.
[   20.875426][   T36] audit: type=1400 audit(1757245940.339:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.876493][  T281] cgroup: Unknown subsys name 'net'
[   20.898152][   T36] audit: type=1400 audit(1757245940.339:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.925488][  T281] cgroup: Unknown subsys name 'devices'
[   20.925706][   T36] audit: type=1400 audit(1757245940.369:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.123991][  T281] cgroup: Unknown subsys name 'hugetlb'
[   21.129600][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.262712][   T36] audit: type=1400 audit(1757245940.729:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.286131][   T36] audit: type=1400 audit(1757245940.729:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.295223][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.311009][   T36] audit: type=1400 audit(1757245940.729:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.342467][   T36] audit: type=1400 audit(1757245940.789:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.368122][   T36] audit: type=1400 audit(1757245940.789:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.394282][   T36] audit: type=1400 audit(1757245940.859:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.419836][   T36] audit: type=1400 audit(1757245940.859:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.419919][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.189386][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.196567][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.203790][  T288] bridge_slave_0: entered allmulticast mode
[   22.209970][  T288] bridge_slave_0: entered promiscuous mode
[   22.222104][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.229287][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.236410][  T288] bridge_slave_1: entered allmulticast mode
[   22.242712][  T288] bridge_slave_1: entered promiscuous mode
[   22.262629][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.269672][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.276977][  T289] bridge_slave_0: entered allmulticast mode
[   22.283493][  T289] bridge_slave_0: entered promiscuous mode
[   22.295146][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.302176][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.309390][  T289] bridge_slave_1: entered allmulticast mode
[   22.315618][  T289] bridge_slave_1: entered promiscuous mode
[   22.349999][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.357080][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.364208][  T290] bridge_slave_0: entered allmulticast mode
[   22.370363][  T290] bridge_slave_0: entered promiscuous mode
[   22.379464][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.386519][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.393601][  T290] bridge_slave_1: entered allmulticast mode
[   22.399727][  T290] bridge_slave_1: entered promiscuous mode
[   22.437591][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.444817][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.451885][  T291] bridge_slave_0: entered allmulticast mode
[   22.458254][  T291] bridge_slave_0: entered promiscuous mode
[   22.473452][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.480486][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.487673][  T291] bridge_slave_1: entered allmulticast mode
[   22.493937][  T291] bridge_slave_1: entered promiscuous mode
[   22.587296][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.594348][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.601616][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.608638][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.616759][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.623797][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.631040][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.638053][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.667632][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.674691][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.681966][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.689002][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.713238][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.720276][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.727576][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.734618][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.763527][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.771142][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.779626][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.786910][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.795154][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.802986][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.825806][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.832881][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.840733][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.847786][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.865223][  T289] veth0_vlan: entered promiscuous mode
[   22.885017][  T289] veth1_macvtap: entered promiscuous mode
[   22.893581][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.900610][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.908141][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.915170][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.932045][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.939080][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.946601][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.953622][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.970247][  T288] veth0_vlan: entered promiscuous mode
[   23.001192][  T290] veth0_vlan: entered promiscuous mode
[   23.015262][  T288] veth1_macvtap: entered promiscuous mode
[   23.031854][  T290] veth1_macvtap: entered promiscuous mode
[   23.041484][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.047796][  T291] veth0_vlan: entered promiscuous mode
[   23.079726][  T291] veth1_macvtap: entered promiscuous mode
[   23.134740][  T336] rust_binder: Error in use_page_slow: ESRCH
[   23.134770][  T336] rust_binder: use_range failure ESRCH
[   23.152550][  T336] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   23.160869][  T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   23.166482][  T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.171105][  T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2
[   23.356443][  T349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   23.448435][  T378] raw_sendmsg: syz.3.14 forgot to set AF_INET. Fix it!
[   23.490658][  T380] SELinux:  policydb version -234 does not match my version range 15-33
[   23.520826][  T380] SELinux: failed to load policy
[   23.619121][  T391] exFAT-fs (rnullb0): invalid boot record signature
[   23.633237][  T391] exFAT-fs (rnullb0): failed to read boot sector
[   23.639589][  T391] exFAT-fs (rnullb0): failed to recognize exfat type
[   23.685458][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.694840][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.705020][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.731649][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.741918][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.751298][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.760388][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.769491][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.786037][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.797610][  T398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.808139][  T404] =======================================================
[   23.808139][  T404] WARNING: The mand mount option has been deprecated and
[   23.808139][  T404]          and is ignored by this kernel. Remove the mand
[   23.808139][  T404]          option from the mount to silence this warning.
[   23.808139][  T404] =======================================================
[   23.854440][  T404] binder: Bad value for 'stats'
[   23.882995][  T408] fuse: Bad value for 'fd'
[   23.945710][  T418] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.046608][  T438] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   24.422288][  T334] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   24.572350][  T334] usb 4-1: Using ep0 maxpacket: 32
[   24.579682][  T334] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   24.592569][  T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   24.605662][  T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   24.617108][  T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   24.626460][  T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.635901][  T334] usb 4-1: config 0 descriptor??
[   24.641349][  T438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   24.660384][  T334] hub 4-1:0.0: USB hub found
[   24.699042][  T458] rust_binder: Error while translating object.
[   24.699090][  T458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   24.705328][  T458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:26
[   24.853080][  T334] hub 4-1:0.0: 2 ports detected
[   25.321972][  T476] process 'syz.0.46' launched '/dev/fd/3' with NULL argv: empty string added
[   25.363037][  T485] tmpfs: Unknown parameter '¸#ã%±Q'
[   25.514633][  T505] rust_binder: inc_ref_done called when no active inc_refs
[   25.614323][  T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   25.706516][  T521] fuse: Bad value for 'fd'
[   25.965055][  T535] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   25.968773][   T64] rust_binder: 532: removing orphan mapping 0:24
[   26.010378][   T36] kauditd_printk_skb: 128 callbacks suppressed
[   26.010395][   T36] audit: type=1400 audit(1757250297.468:202): avc:  denied  { nlmsg_read } for  pid=539 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   26.064134][  T544] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.064961][   T36] audit: type=1400 audit(1757250297.528:203): avc:  denied  { read append } for  pid=543 comm="syz.1.67" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   26.095137][   T36] audit: type=1400 audit(1757250297.528:204): avc:  denied  { open } for  pid=543 comm="syz.1.67" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   26.119564][   T36] audit: type=1400 audit(1757250297.528:205): avc:  denied  { ioctl } for  pid=543 comm="syz.1.67" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   26.164213][   T36] audit: type=1400 audit(1757250297.628:206): avc:  denied  { bind } for  pid=551 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.183551][   T36] audit: type=1400 audit(1757250297.628:207): avc:  denied  { mount } for  pid=551 comm="syz.0.70" name="/" dev="ramfs" ino=3823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   26.224979][   T36] audit: type=1400 audit(1757250297.688:208): avc:  denied  { bind } for  pid=556 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.245520][   T36] audit: type=1400 audit(1757250297.708:209): avc:  denied  { setopt } for  pid=556 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.308258][  T548] Bluetooth: hci0: Frame reassembly failed (-84)
[   26.393141][  T334] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[   26.396813][   T36] audit: type=1400 audit(1757250297.858:210): avc:  denied  { create } for  pid=572 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.419062][   T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   26.426628][   T36] audit: type=1400 audit(1757250297.858:211): avc:  denied  { accept } for  pid=572 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.732361][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.882286][   T10] usb 3-1: Using ep0 maxpacket: 32
[   26.888508][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   26.896950][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   26.905600][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   26.914594][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   26.924284][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   26.933945][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   26.946943][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   26.955983][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.964538][   T10] usb 3-1: config 0 descriptor??
[   27.121972][  T582] rust_binder: 36: no such ref 5
[   27.127003][  T582] rust_binder: Write failure EINVAL in pid:36
[   27.171168][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   27.172044][  T334] usb 4-1: USB disconnect, device number 2
[   27.189985][   T10] usb 3-1: USB disconnect, device number 2
[   27.211559][   T10] usblp0: removed
[   27.215111][  T334] rust_binder: 583: removing orphan mapping 0:4120
[   27.238493][  T593] capability: warning: `syz.0.83' uses deprecated v2 capabilities in a way that may be insecure
[   27.672271][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   27.802271][   T10] usb 3-1: device descriptor read/64, error -71
[   28.042292][   T10] usb 3-1: device descriptor read/64, error -71
[   28.120895][  T600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45
[   28.282300][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   28.352786][  T568] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   28.422356][   T10] usb 3-1: device descriptor read/64, error -71
[   28.662285][   T10] usb 3-1: device descriptor read/64, error -71
[   28.772378][   T10] usb usb3-port1: attempt power cycle
[   28.888240][  T604] pimreg: tun_chr_ioctl cmd 1074025677
[   28.893905][  T604] pimreg: linktype set to 780
[   28.899266][  T604] pimreg: tun_chr_ioctl cmd 1074025672
[   28.904851][  T604] pimreg: ignored: set checksum enabled
[   28.966779][  T607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   28.966804][  T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:48
[   29.112379][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   29.145995][   T10] usb 3-1: device descriptor read/8, error -71
[   29.283284][   T10] usb 3-1: device descriptor read/8, error -71
[   29.522332][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   29.755439][  T626] rust_binder: 51: no such ref 0
[   29.942271][   T10] usb 3-1: device not accepting address 6, error -71
[   29.949103][   T10] usb usb3-port1: unable to enumerate USB device
[   30.222289][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   30.242297][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   30.372312][    T9] usb 2-1: Using ep0 maxpacket: 16
[   30.392303][   T10] usb 3-1: Using ep0 maxpacket: 16
[   30.398611][   T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   30.407117][   T10] usb 3-1: config 0 has no interface number 0
[   30.413463][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   30.423712][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   30.443923][   T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   30.454444][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.472320][   T10] usb 3-1: Product: syz
[   30.476639][   T10] usb 3-1: Manufacturer: syz
[   30.484537][   T10] usb 3-1: SerialNumber: syz
[   30.499915][   T10] usb 3-1: config 0 descriptor??
[   30.505174][  T624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   30.513072][  T624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   30.670278][  T633] SELinux:  Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped).
[   30.727062][  T624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   30.741712][  T624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   30.772488][  T638] overlayfs: failed to resolve './file1': -2
[   30.811582][  T645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   30.819414][  T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.838883][  T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.144965][  T656] __nla_validate_parse: 25 callbacks suppressed
[   31.144979][  T656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   31.403031][   T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   31.415420][   T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   31.426135][   T10] asix 3-1:0.251: probe with driver asix failed with error -71
[   31.434883][   T10] usb 3-1: USB disconnect, device number 7
[   31.738126][  T668] 9pnet_fd: Insufficient options for proto=fd
[   31.934438][   T36] kauditd_printk_skb: 29 callbacks suppressed
[   31.934453][   T36] audit: type=1400 audit(1757250303.398:241): avc:  denied  { mount } for  pid=673 comm="syz.2.111" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.963503][   T36] audit: type=1400 audit(1757250303.428:242): avc:  denied  { remount } for  pid=673 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.988858][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   31.996461][   T36] audit: type=1400 audit(1757250303.448:243): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   32.019342][   T36] audit: type=1400 audit(1757250303.488:244): avc:  denied  { append } for  pid=678 comm="syz.2.112" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.043604][   T36] audit: type=1400 audit(1757250303.488:245): avc:  denied  { open } for  pid=678 comm="syz.2.112" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.162279][   T31] usb 4-1: Using ep0 maxpacket: 32
[   32.168715][   T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   32.177410][   T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   32.195986][   T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   32.205344][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   32.215274][   T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   32.225137][   T36] audit: type=1400 audit(1757250303.688:246): avc:  denied  { read write } for  pid=683 comm="syz.2.113" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.225582][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   32.262482][   T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   32.270887][   T36] audit: type=1400 audit(1757250303.688:247): avc:  denied  { ioctl } for  pid=683 comm="syz.2.113" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.271685][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.304979][  T684] fuse: Bad value for 'user_id'
[   32.309854][  T684] fuse: Bad value for 'user_id'
[   32.322654][   T31] usb 4-1: config 0 descriptor??
[   32.383501][   T36] audit: type=1400 audit(1757250303.848:248): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   32.530183][   T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   32.547769][   T31] usb 4-1: USB disconnect, device number 3
[   32.555274][   T31] usblp0: removed
[   32.682294][  T558] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   32.812034][   T36] audit: type=1400 audit(1757250304.268:249): avc:  denied  { getopt } for  pid=657 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   32.842277][  T558] usb 3-1: Using ep0 maxpacket: 32
[   32.848485][  T558] usb 3-1: config 0 has an invalid interface number: 230 but max is 0
[   32.862256][  T558] usb 3-1: config 0 has no interface number 0
[   32.868347][  T558] usb 3-1: config 0 interface 230 has no altsetting 0
[   32.893557][  T558] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   32.912257][  T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.920272][  T558] usb 3-1: Product: syz
[   32.924574][  T558] usb 3-1: Manufacturer: syz
[   32.929193][  T558] usb 3-1: SerialNumber: syz
[   32.934716][  T558] usb 3-1: config 0 descriptor??
[   32.942699][  T558] ums-usbat 3-1:0.230: USB Mass Storage device detected
[   32.962945][  T558] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[   33.034039][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   33.052630][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[   33.060653][    T9] usb 2-1: can't read configurations, error -71
[   33.097877][  T697] rust_binder: Write failure EFAULT in pid:96
[   33.141076][  T699] netlink: 'syz.1.117': attribute type 4 has an invalid length.
[   33.157012][  T699] netlink: 'syz.1.117': attribute type 4 has an invalid length.
[   33.353643][   T36] audit: type=1400 audit(1757250304.818:250): avc:  denied  { write } for  pid=701 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.752288][  T439] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   33.912274][  T439] usb 4-1: Using ep0 maxpacket: 16
[   33.918574][  T439] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   33.926809][  T439] usb 4-1: config 0 has no interface number 0
[   33.933047][  T439] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.944038][  T439] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.953912][  T439] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   33.963067][  T439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.971725][  T439] usb 4-1: config 0 descriptor??
[   34.172282][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   34.342275][    T9] usb 2-1: Using ep0 maxpacket: 32
[   34.348665][    T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   34.357022][    T9] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config
[   34.367498][    T9] usb 2-1: config 0 has no interface number 0
[   34.373797][    T9] usb 2-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   34.387091][    T9] usb 2-1: config 0 interface 184 has no altsetting 0
[   34.395452][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   34.404721][    T9] usb 2-1: New USB device strings: Mfr=1, Product=246, SerialNumber=2
[   34.413028][    T9] usb 2-1: Product: syz
[   34.417304][    T9] usb 2-1: Manufacturer: syz
[   34.421929][    T9] usb 2-1: SerialNumber: syz
[   34.427813][    T9] usb 2-1: config 0 descriptor??
[   34.433904][    T9] smsc75xx v1.0.0
[   34.437678][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   34.448076][    T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[   34.585011][  T439] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0001/input/input4
[   34.600083][  T439] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0001/input/input5
[   34.617142][  T439] uclogic 0003:28BD:0071.0001: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1
[   34.789304][  T735] sock: sock_timestamping_bind_phc: sock not bind to device
[   34.807015][  T737] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.814208][  T737] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.821417][  T737] bridge0: entered promiscuous mode
[   34.826700][  T737] bridge0: entered allmulticast mode
[   34.834185][  T737] Zero length message leads to an empty skb
[   34.840426][  T737] can: request_module (can-proto-0) failed.
[   34.847488][  T737] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   34.959293][    T9] usb 4-1: USB disconnect, device number 4
[   34.991406][  T439] usb 2-1: USB disconnect, device number 5
[   35.071512][  T749] rust_binder: Write failure EINVAL in pid:127
[   35.071855][  T749] rust_binder: validate_parent_fixup: new_min_offset=268435516, sg_entry.length=253
[   35.078199][  T749] rust_binder: Error while translating object.
[   35.087672][  T749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.094173][  T749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[   35.110480][  T751] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0
[   35.119681][  T751] rust_binder: Error while translating object.
[   35.128415][  T751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.134582][  T751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   35.144341][  T751] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.160315][  T752] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0
[   35.160335][  T752] rust_binder: Error while translating object.
[   35.169102][  T752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.175439][  T752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   35.205229][  T757] rust_binder: Got transaction with invalid offset.
[   35.214449][  T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.221132][  T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[   35.240100][  T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137
[   35.321180][  T764] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 82)
[   35.330374][  T764] rust_binder: Error while translating object.
[   35.340918][  T764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.347126][  T764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[   35.357195][  T764] rust_binder: 76: no such ref 1
[   35.371204][  T764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76
[   35.438052][  T769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[   35.511843][  T781] 9pnet_fd: Insufficient options for proto=fd
[   35.543846][  T785] .N: renamed from veth0_to_bond (while UP)
[   35.622317][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   35.773352][    T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   35.782546][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.791471][    T9] usb 4-1: config 0 descriptor??
[   36.272113][  T799] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   36.283235][  T439] rust_binder: 0: removing orphan mapping 0:96
[   36.296124][  T439] rust_binder: 0: removing orphan mapping 96:24
[   36.317113][  T558] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5
[   36.329787][  T558] usb 3-1: USB disconnect, device number 8
[   36.525078][  T812] rust_binder: 811 RLIMIT_NICE not set
[   36.525297][  T811] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   36.537964][  T811] rust_binder: Error while translating object.
[   36.537996][  T811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.544177][  T811] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   36.553749][  T811] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:73
[   36.602671][    T9] usb 4-1: Cannot set autoneg
[   36.615562][    T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[   36.632619][  T439] rust_binder: 810: removing orphan mapping 0:4248
[   36.762719][  T819] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   36.769933][  T819] rust_binder: Write failure EINVAL in pid:80
[   36.780388][  T821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=821 comm=syz.2.158
[   36.799304][  T821] __vm_enough_memory: pid: 821, comm: syz.2.158, bytes: 18014402804453376 not enough memory for the allocation
[   36.821261][  T823] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   36.828959][  T823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.159'.
[   36.947321][   T36] kauditd_printk_skb: 50 callbacks suppressed
[   36.947333][   T36] audit: type=1326 audit(1757250308.408:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1968f8ebe9 code=0x7ffc0000
[   36.976631][   T36] audit: type=1326 audit(1757250308.408:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1968f8ebe9 code=0x7ffc0000
[   37.000306][   T36] audit: type=1326 audit(1757250308.408:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1968f8ec23 code=0x7ffc0000
[   37.023454][   T36] audit: type=1326 audit(1757250308.408:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1968f8eca7 code=0x7ffc0000
[   37.034704][  T826] rust_binder: Error in use_page_slow: ESRCH
[   37.046590][   T36] audit: type=1326 audit(1757250308.408:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1968f4616d code=0x7ffc0000
[   37.046754][  T826] rust_binder: use_range failure ESRCH
[   37.052721][   T36] audit: type=1326 audit(1757250308.408:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1968fc3449 code=0x7ffc0000
[   37.076378][  T826] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   37.090315][   T36] audit: type=1326 audit(1757250308.408:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1968f461d7 code=0x7ffc0000
[   37.135791][  T826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   37.135820][  T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:85
[   37.135844][   T36] audit: type=1326 audit(1757250308.408:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1968f8ebe9 code=0x7ffc0000
[   37.178466][   T36] audit: type=1326 audit(1757250308.408:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1968f8ebe9 code=0x7ffc0000
[   37.201707][   T36] audit: type=1326 audit(1757250308.408:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1968f458e7 code=0x7ffc0000
[   37.279518][  T830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[   37.307515][    T9] usb 4-1: USB disconnect, device number 5
[   37.346997][  T843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90
[   37.347657][  T843] rust_binder: Read failure Err(EFAULT) in pid:90
[   37.663639][  T869] rust_binder: Write failure EFAULT in pid:106
[   37.670151][  T870] rust_binder: Write failure EFAULT in pid:106
[   37.744142][  T875] rust_binder: 90: no such ref 0
[   37.755539][  T875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90
[   37.893871][  T882] syzkaller0: entered promiscuous mode
[   37.908390][  T882] syzkaller0: entered allmulticast mode
[   37.992522][  T329] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   38.052331][  T334] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   38.122297][  T329] usb 3-1: device descriptor read/64, error -71
[   38.196946][  T903] binder: Bad value for 'max'
[   38.202370][  T334] usb 4-1: Using ep0 maxpacket: 8
[   38.208529][  T334] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   38.217726][  T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.226677][  T334] usb 4-1: config 0 descriptor??
[   38.362318][  T329] usb 3-1: device descriptor read/64, error -71
[   38.432538][  T334] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   38.602282][  T329] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   38.667324][  T334] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   38.679755][  T334] asix 4-1:0.0: probe with driver asix failed with error -71
[   38.688312][  T334] usb 4-1: USB disconnect, device number 6
[   38.732316][  T329] usb 3-1: device descriptor read/64, error -71
[   38.796038][  T927] 9pnet_fd: Insufficient options for proto=fd
[   38.936669][  T929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.972286][  T329] usb 3-1: device descriptor read/64, error -71
[   39.042302][  T334] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   39.061898][  T942] bridge_slave_0: mtu less than device minimum
[   39.082411][  T329] usb usb3-port1: attempt power cycle
[   39.193410][  T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.203683][  T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   39.213388][  T334] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   39.222599][  T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   39.230657][  T334] usb 4-1: SerialNumber: syz
[   39.342287][  T558] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   39.432315][  T329] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   39.453983][  T329] usb 3-1: device descriptor read/8, error -71
[   39.494174][  T558] usb 2-1: not running at top speed; connect to a high speed hub
[   39.503816][  T558] usb 2-1: config 7 has an invalid interface number: 85 but max is 0
[   39.511907][  T558] usb 2-1: config 7 has no interface number 0
[   39.518270][  T558] usb 2-1: config 7 interface 85 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[   39.529214][  T558] usb 2-1: config 7 interface 85 has no altsetting 0
[   39.538531][  T334] usb 4-1: 0:2 : does not exist
[   39.542738][  T558] usb 2-1: string descriptor 0 read error: -22
[   39.543559][  T334] usb 4-1: unit 255 not found!
[   39.551593][  T558] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[   39.566025][  T558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.566511][  T334] usb 4-1: USB disconnect, device number 7
[   39.576318][  T558] usb-storage 2-1:7.85: USB Mass Storage device detected
[   39.595110][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.612037][  T329] usb 3-1: device descriptor read/8, error -71
[   39.802012][  T558] rust_binder: 0: removing orphan mapping 0:96
[   39.813457][  T558] rust_binder: 0: removing orphan mapping 96:24
[   39.852308][  T329] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   39.853385][  T967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer.
[   39.883282][  T329] usb 3-1: device descriptor read/8, error -71
[   40.013569][  T329] usb 3-1: device descriptor read/8, error -71
[   40.122391][  T329] usb usb3-port1: unable to enumerate USB device
[   40.130297][  T975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.139258][  T975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.865417][  T984] rust_binder: 150: no such ref 0
[   40.955858][  T996] __vm_enough_memory: pid: 996, comm: syz.2.210, bytes: 18014402804453376 not enough memory for the allocation
[   41.072830][ T1013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   41.072853][ T1013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113
[   41.190920][ T1025] rust_binder: Write failure EFAULT in pid:120
[   41.220234][ T1033] pim6reg1: entered promiscuous mode
[   41.231877][ T1033] pim6reg1: entered allmulticast mode
[   41.306971][ T1036] rust_binder: Error in use_page_slow: ESRCH
[   41.306990][ T1036] rust_binder: use_range failure ESRCH
[   41.313291][ T1036] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   41.318750][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   41.326910][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180
[   41.442295][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   41.622275][    T9] usb 3-1: Using ep0 maxpacket: 16
[   41.628430][    T9] usb 3-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   41.641552][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[   41.648593][    T9] usb 3-1: string descriptor 0 read error: -22
[   41.654854][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40
[   41.663889][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.718264][ T1050] fuse: Bad value for 'fd'
[   42.076805][    T9] usbhid 3-1:1.0: can't add hid device: -71
[   42.086444][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   42.094837][  T558] usb 2-1: USB disconnect, device number 6
[   42.103663][    T9] usb 3-1: USB disconnect, device number 13
[   42.273002][   T36] kauditd_printk_skb: 431 callbacks suppressed
[   42.273018][   T36] audit: type=1400 audit(1757250313.738:742): avc:  denied  { read } for  pid=1087 comm="syz.1.242" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.302020][   T36] audit: type=1400 audit(1757250313.738:743): avc:  denied  { open } for  pid=1087 comm="syz.1.242" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.326409][ T1089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   42.431214][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'.
[   42.471748][   T36] audit: type=1400 audit(1757250313.928:744): avc:  denied  { bind } for  pid=1097 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.490975][   T36] audit: type=1400 audit(1757250313.928:745): avc:  denied  { listen } for  pid=1097 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.529481][   T36] audit: type=1400 audit(1757250313.988:746): avc:  denied  { remount } for  pid=1102 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.549467][   T36] audit: type=1400 audit(1757250314.008:747): avc:  denied  { create } for  pid=1102 comm="syz.3.246" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.572119][   T36] audit: type=1400 audit(1757250314.018:748): avc:  denied  { connect } for  pid=1097 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.591594][   T36] audit: type=1400 audit(1757250314.038:749): avc:  denied  { link } for  pid=1102 comm="syz.3.246" name="file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.618885][ T1107] mmap: syz.2.248 (1107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   42.631533][   T36] audit: type=1400 audit(1757250314.098:750): avc:  denied  { mounton } for  pid=1106 comm="syz.2.248" path="/40/file0" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   42.763528][ T1117] rust_binder: 228: no such ref 0
[   42.772039][ T1117] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   42.781761][ T1117] rust_binder: 228: no such ref 0
[   42.786876][   T36] audit: type=1400 audit(1757250314.248:751): avc:  denied  { write } for  pid=1120 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.862289][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   43.013279][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   43.024033][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   43.035885][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[   43.046900][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   43.061265][    T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   43.072879][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.081075][    T9] usb 4-1: Product: syz
[   43.083353][ T1133] rust_binder: Error in use_page_slow: ESRCH
[   43.085231][ T1133] rust_binder: use_range failure ESRCH
[   43.085467][    T9] usb 4-1: Manufacturer: syz
[   43.091595][ T1133] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false
[   43.096709][    T9] usb 4-1: SerialNumber: syz
[   43.101467][ T1133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   43.112359][    T9] usb 4-1: config 0 descriptor??
[   43.114085][ T1133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:235
[   43.123617][ T1105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   43.145179][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[   43.190382][ T1136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'.
[   43.204297][   T60] bridge_slave_1: left allmulticast mode
[   43.210030][   T60] bridge_slave_1: left promiscuous mode
[   43.217436][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.225318][   T60] bridge_slave_0: left allmulticast mode
[   43.230996][   T60] bridge_slave_0: left promiscuous mode
[   43.236989][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.357914][ T1105] rust_binder: Write failure EFAULT in pid:199
[   43.358285][    T9] usb 4-1: USB disconnect, device number 9
[   43.372585][   T60] veth1_macvtap: left promiscuous mode
[   43.378138][   T60] veth0_vlan: left promiscuous mode
[   43.414410][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.421467][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.428574][ T1150] bridge_slave_0: entered allmulticast mode
[   43.434771][ T1150] bridge_slave_0: entered promiscuous mode
[   43.441011][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.448072][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.455186][ T1150] bridge_slave_1: entered allmulticast mode
[   43.461395][ T1150] bridge_slave_1: entered promiscuous mode
[   43.506423][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.513765][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.521005][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.528035][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.542760][  T926] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   43.550305][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.558169][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.567450][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.574501][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.583372][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.590398][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.613548][ T1150] veth0_vlan: entered promiscuous mode
[   43.623731][ T1150] veth1_macvtap: entered promiscuous mode
[   43.694019][  T926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.706040][  T926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[   43.717147][  T926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.726638][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.734946][  T926] usb 2-1: Product: syz
[   43.739191][  T926] usb 2-1: Manufacturer: syz
[   43.743797][  T926] usb 2-1: SerialNumber: syz
[   43.749395][  T926] usb 2-1: config 0 descriptor??
[   43.911832][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   44.004372][ T1176] fuse: Bad value for 'fd'
[   44.114553][    T9] usb 2-1: USB disconnect, device number 7
[   44.199942][ T1187] fuse: Bad value for 'user_id'
[   44.204868][ T1187] fuse: Bad value for 'user_id'
[   44.704728][ T1192] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   44.704768][ T1192] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   44.712952][ T1192] rust_binder: Read failure Err(EFAULT) in pid:14
[   45.620993][ T1222] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   45.652049][ T1224] rust_binder: 19: no such ref 2
[   45.657091][ T1224] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   45.781716][ T1233] fuseblk: Unknown parameter 'obj_user'
[   45.952357][   T52] Bluetooth: hci0: command 0x1003 tx timeout
[   45.952357][  T568] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.027212][ T1243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208
[   46.096727][ T1253] /dev/loop0: Can't lookup blockdev
[   46.107278][ T1255] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.173912][ T1275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.180687][ T1275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.240776][ T1276] rust_binder: Write failure EFAULT in pid:231
[   46.262284][  T926] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   46.423320][  T926] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   46.431365][  T926] usb 3-1: config 0 has no interface number 0
[   46.437484][  T926] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[   46.448194][  T926] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[   46.461162][  T926] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[   46.470230][  T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.478746][  T926] usb 3-1: config 0 descriptor??
[   46.686931][ T1242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.695491][ T1242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.747568][ T1289] syz.0.310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   46.786397][ T1294] netlink: 388 bytes leftover after parsing attributes in process `syz.0.312'.
[   46.874072][  T926] usb 3-1: string descriptor 0 read error: -71
[   46.882743][  T926] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2
[   46.885703][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.892765][  T926] usb 3-1: USB disconnect, device number 14
[   46.989798][ T1310] x_tables: duplicate underflow at hook 1
[   46.989798][ T1309] x_tables: duplicate underflow at hook 1
[   47.242331][  T329] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   47.322596][  T334] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   47.378335][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   47.378351][   T36] audit: type=1400 audit(1757250318.838:766): avc:  denied  { setopt } for  pid=1324 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   47.413622][  T329] usb 2-1: not running at top speed; connect to a high speed hub
[   47.426485][  T329] usb 2-1: config 6 has an invalid interface number: 200 but max is 2
[   47.438108][  T329] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[   47.446972][  T329] usb 2-1: config 6 has an invalid interface number: 212 but max is 2
[   47.455193][  T329] usb 2-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config
[   47.465523][  T329] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3
[   47.474756][  T329] usb 2-1: config 6 has no interface number 0
[   47.481069][  T329] usb 2-1: config 6 has no interface number 1
[   47.487455][  T329] usb 2-1: config 6 interface 200 altsetting 96 has an invalid descriptor for endpoint zero, skipping
[   47.498717][  T334] usb 4-1: Using ep0 maxpacket: 32
[   47.509735][  T329] usb 2-1: config 6 interface 200 altsetting 96 endpoint 0x5 has invalid wMaxPacketSize 0
[   47.520115][  T329] usb 2-1: config 6 interface 200 altsetting 96 has an invalid descriptor for endpoint zero, skipping
[   47.531360][  T329] usb 2-1: config 6 interface 200 has no altsetting 0
[   47.538288][  T329] usb 2-1: config 6 interface 212 has no altsetting 0
[   47.545445][  T334] usb 4-1: config 0 has an invalid interface number: 137 but max is 0
[   47.555606][  T334] usb 4-1: config 0 has no interface number 0
[   47.561812][  T334] usb 4-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[   47.572004][  T334] usb 4-1: config 0 interface 137 has no altsetting 0
[   47.576476][   T36] audit: type=1400 audit(1757250319.038:767): avc:  denied  { getopt } for  pid=1331 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.579023][  T329] usb 2-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=a3.e0
[   47.608904][  T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.617080][  T329] usb 2-1: Product: Ó¿
[   47.621243][  T329] usb 2-1: Manufacturer: Ъ
[   47.625942][  T329] usb 2-1: SerialNumber: syz
[   47.630739][  T334] usb 4-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37
[   47.639858][  T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.648216][  T334] usb 4-1: Product: syz
[   47.652998][  T334] usb 4-1: Manufacturer: syz
[   47.659565][  T334] usb 4-1: SerialNumber: syz
[   47.665346][  T334] usb 4-1: config 0 descriptor??
[   47.671454][  T334] ftdi_sio 4-1:0.137: FTDI USB Serial Device converter detected
[   47.679787][  T334] usb 4-1: Detected SIO
[   47.684010][  T334] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8
[   47.691817][ T1343] overlayfs: overlapping lowerdir path
[   47.698094][  T334] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   47.863167][  T329] usb 2-1: USB disconnect, device number 8
[   47.878389][  T334] usb 4-1: USB disconnect, device number 10
[   47.888670][  T334] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   47.912338][  T334] ftdi_sio 4-1:0.137: device disconnected
[   48.332289][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   48.404600][ T1359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'.
[   48.475950][ T1363] rust_binder: Error while translating object.
[   48.475974][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   48.482158][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:245
[   48.483493][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.512103][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.521869][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   48.534805][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   48.543879][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.552692][    T9] usb 3-1: config 0 descriptor??
[   48.960316][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[   48.968506][    T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   48.977376][    T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   49.225740][ T1351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.235050][ T1351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.254094][ T1366] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.266431][ T1368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.339'.
[   49.292601][ T1370] fuse: Unknown parameter 'rooÝötmode'
[   49.304921][ T1371] rust_binder: Error in use_page_slow: ESRCH
[   49.304939][ T1371] rust_binder: use_range failure ESRCH
[   49.310933][ T1371] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   49.316981][ T1371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   49.325053][ T1371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:283
[   49.335280][   T10] usb 3-1: USB disconnect, device number 15
[   49.572282][  T334] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   49.722304][  T334] usb 2-1: Using ep0 maxpacket: 32
[   49.728486][  T334] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   49.736683][  T334] usb 2-1: config 0 has no interface number 0
[   49.742792][  T334] usb 2-1: config 0 interface 184 has no altsetting 0
[   49.750916][  T334] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   49.759994][  T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.767994][  T334] usb 2-1: Product: syz
[   49.772135][  T334] usb 2-1: Manufacturer: syz
[   49.776726][  T334] usb 2-1: SerialNumber: syz
[   49.782040][  T334] usb 2-1: config 0 descriptor??
[   49.787690][  T334] smsc75xx v1.0.0
[   50.388613][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   50.399447][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   52.256249][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   52.267195][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   52.276909][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   52.286353][  T334] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[   52.295598][  T334] usb 2-1: USB disconnect, device number 9
[   57.654268][   T36] audit: type=1400 audit(1757250329.118:768): avc:  denied  { mount } for  pid=1401 comm="syz.0.349" name="/" dev="configfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   57.702305][   T36] audit: type=1400 audit(1757250329.118:769): avc:  denied  { search } for  pid=1401 comm="syz.0.349" name="/" dev="configfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   57.730119][   T36] audit: type=1400 audit(1757250329.118:770): avc:  denied  { read } for  pid=1401 comm="syz.0.349" name="/" dev="configfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   57.751657][ T1416] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   57.754684][   T36] audit: type=1400 audit(1757250329.118:771): avc:  denied  { open } for  pid=1401 comm="syz.0.349" path="/" dev="configfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   57.908052][   T36] audit: type=1400 audit(1757250329.368:772): avc:  denied  { mount } for  pid=1430 comm="syz.2.358" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   57.908295][ T1431] tmpfs: Bad value for 'nr_inodes'
[   57.929899][   T36] audit: type=1400 audit(1757250329.368:773): avc:  denied  { remount } for  pid=1430 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   57.979153][   T36] audit: type=1400 audit(1757250329.438:774): avc:  denied  { unmount } for  pid=1150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   58.094457][   T36] audit: type=1400 audit(1757250329.558:775): avc:  denied  { block_suspend } for  pid=1439 comm="syz.2.361" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.212301][   T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[   58.342290][   T10] usb 4-1: device descriptor read/64, error -71
[   58.361671][   T36] audit: type=1400 audit(1757250329.818:776): avc:  denied  { create } for  pid=1466 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   58.582317][   T10] usb 4-1: device descriptor read/64, error -71
[   58.790870][   T36] audit: type=1326 audit(1757250330.248:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1475 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fa98ebe9 code=0x7fc00000
[   58.822422][   T10] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[   58.952289][   T10] usb 4-1: device descriptor read/64, error -71
[   58.982290][  T334] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   59.112314][  T334] usb 2-1: device descriptor read/64, error -71
[   59.192313][   T10] usb 4-1: device descriptor read/64, error -71
[   59.267420][ T1481] 9pnet_fd: Insufficient options for proto=fd
[   59.302399][   T10] usb usb4-port1: attempt power cycle
[   59.337659][ T1483] rust_binder: 82: no such ref 0
[   59.343070][ T1483] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   59.350317][ T1483] rust_binder: 82: no such ref 0
[   59.355386][  T334] usb 2-1: device descriptor read/64, error -71
[   59.367844][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84
[   59.592288][  T334] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   59.642298][   T10] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[   59.673219][   T10] usb 4-1: device descriptor read/8, error -71
[   59.752319][  T334] usb 2-1: device descriptor read/64, error -71
[   59.803271][   T10] usb 4-1: device descriptor read/8, error -71
[   59.881471][ T1511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'.
[   59.899898][ T1514] rust_binder: Error while translating object.
[   59.899934][ T1514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   59.906253][ T1514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113
[   59.992297][  T334] usb 2-1: device descriptor read/64, error -71
[   60.002605][ T1516] rust_binder: Error while translating object.
[   60.007687][ T1516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   60.013904][ T1516] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[   60.023232][ T1516] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:115
[   60.039396][    T9] rust_binder: 1515: removing orphan mapping 0:24
[   60.054518][   T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[   60.083308][   T10] usb 4-1: device descriptor read/8, error -71
[   60.112395][  T334] usb usb2-port1: attempt power cycle
[   60.152258][ T1527] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.213231][   T10] usb 4-1: device descriptor read/8, error -71
[   60.332350][   T10] usb usb4-port1: unable to enumerate USB device
[   60.452298][  T334] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   60.473239][  T334] usb 2-1: device descriptor read/8, error -71
[   60.603251][  T334] usb 2-1: device descriptor read/8, error -71
[   60.842316][  T334] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   60.863260][  T334] usb 2-1: device descriptor read/8, error -71
[   61.000335][  T334] usb 2-1: device descriptor read/8, error -71
[   61.055867][ T1537] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   61.063897][ T1537] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   61.072391][ T1537] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   61.080330][ T1537] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   61.112413][  T334] usb usb2-port1: unable to enumerate USB device
[   61.149737][ T1545] kvm: MONITOR instruction emulated as NOP!
[   61.315245][ T1547] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[   61.315265][ T1547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   61.323252][ T1547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:284
[   61.428683][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[   61.458383][ T1567] 9pnet_fd: Insufficient options for proto=fd
[   61.512303][  T334] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   61.662308][  T334] usb 3-1: Using ep0 maxpacket: 8
[   61.669241][  T334] usb 3-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config
[   61.675188][ T1576] netlink: 'syz.1.404': attribute type 5 has an invalid length.
[   61.679844][  T334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.687289][ T1576] netlink: 'syz.1.404': attribute type 5 has an invalid length.
[   61.697988][  T334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   61.704034][ T1576] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.404'.
[   61.713203][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.730463][  T334] usb 3-1: Product: syz
[   61.734715][  T334] usb 3-1: Manufacturer: syz
[   61.739366][  T334] usb 3-1: SerialNumber: syz
[   61.762833][ T1584] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   61.770901][ T1585] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   61.921298][ T1595] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.921670][ T1595] rust_binder: Error in use_page_slow: ESRCH
[   61.928176][ T1595] rust_binder: use_range failure ESRCH
[   61.934486][ T1595] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   61.940045][ T1595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   61.949184][ T1595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:318
[   61.968678][ T1597] fuseblk: Unknown parameter '
¤ádhURû_úþ!³þ´Áïë2âÚ'
[   61.994210][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.003080][ T1599] rust_binder: Error in use_page_slow: ESRCH
[   62.009608][ T1599] rust_binder: use_range failure ESRCH
[   62.021077][ T1601] netlink: 'syz.3.412': attribute type 4 has an invalid length.
[   62.021264][ T1599] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   62.034636][ T1599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   62.042884][ T1599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:323
[   62.071124][ T1606] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.071711][ T1605] incfs: iterate_incfs_dir / -22
[   62.161991][ T1615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293
[   62.162700][ T1615] rust_binder: Read failure Err(EFAULT) in pid:293
[   62.203258][  T334] usb 3-1: 0:2 : does not exist
[   62.217678][  T334] usb 3-1: USB disconnect, device number 16
[   62.227663][ T1394] udevd[1394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.264339][ T1620] syz.3.418 (1620): attempted to duplicate a private mapping with mremap.  This is not supported.
[   62.462122][ T1647] proc: Bad value for 'gid'
[   62.595070][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   62.654078][ T1665] devpts: called with bogus options
[   62.673654][ T1667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.677214][ T1670] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   62.683352][ T1667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.690408][ T1671] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   62.734291][    T9] usb 4-1: device descriptor read/64, error -71
[   62.850026][ T1712] overlayfs: failed to clone upperpath
[   62.883515][ T1717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'.
[   62.902353][  T334] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   62.972278][    T9] usb 4-1: device descriptor read/64, error -71
[   63.063385][  T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.074700][  T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.084786][  T334] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   63.093991][  T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.104338][  T334] usb 2-1: config 0 descriptor??
[   63.212291][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   63.362293][    T9] usb 4-1: device descriptor read/64, error -71
[   63.491413][ T1726] netlink: 'syz.2.452': attribute type 4 has an invalid length.
[   63.499357][ T1726] netlink: 'syz.2.452': attribute type 6 has an invalid length.
[   63.507048][ T1726] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.452'.
[   63.513322][  T334] hid-led 0003:0FC5:B080.0003: item fetching failed at offset 1/3
[   63.524173][  T334] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -22
[   63.540684][ T1733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'.
[   63.602373][    T9] usb 4-1: device descriptor read/64, error -71
[   63.663548][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   63.663562][   T36] audit: type=1400 audit(1757250335.128:794): avc:  denied  { remount } for  pid=1737 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   63.712794][    T9] usb usb4-port1: attempt power cycle
[   63.719886][ T1667] syzkaller0: entered promiscuous mode
[   63.725387][ T1667] syzkaller0: entered allmulticast mode
[   63.731972][  T334] usb 2-1: USB disconnect, device number 14
[   64.052316][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   64.073249][    T9] usb 4-1: device descriptor read/8, error -71
[   64.175011][ T1742] rust_binder: Error while translating object.
[   64.175046][ T1742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.181266][ T1742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170
[   64.223222][    T9] usb 4-1: device descriptor read/8, error -71
[   64.482293][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   64.503305][    T9] usb 4-1: device descriptor read/8, error -71
[   64.532305][  T334] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   64.633271][    T9] usb 4-1: device descriptor read/8, error -71
[   64.682265][  T334] usb 3-1: Using ep0 maxpacket: 32
[   64.688448][  T334] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   64.696910][  T334] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   64.705550][  T334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   64.714511][  T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   64.724149][  T334] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   64.733787][  T334] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   64.746752][  T334] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   64.752384][    T9] usb usb4-port1: unable to enumerate USB device
[   64.755860][  T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.770526][  T334] usb 3-1: config 0 descriptor??
[   64.872175][   T36] audit: type=1400 audit(1757250336.328:795): avc:  denied  { read } for  pid=1759 comm="syz.1.464" laddr=fe80::12 lport=58 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.934847][ T1763] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.935590][ T1763] rust_binder: Error in use_page_slow: ESRCH
[   64.942030][ T1763] rust_binder: use_range failure ESRCH
[   64.948047][ T1763] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   64.953539][ T1763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   64.961531][ T1763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372
[   64.978519][  T334] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   65.000588][  T334] usb 3-1: USB disconnect, device number 17
[   65.007451][  T334] usblp0: removed
[   65.097711][   T36] audit: type=1400 audit(1757250336.558:796): avc:  denied  { setopt } for  pid=1769 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   65.097821][ T1770] rust_binder: Error in use_page_slow: ESRCH
[   65.117624][ T1770] rust_binder: use_range failure ESRCH
[   65.123686][ T1770] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   65.129187][ T1770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   65.137186][ T1770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:379
[   65.156378][ T1772] futex_wake_op: syz.1.468 tries to shift op by -1; fix this program
[   65.175637][   T36] audit: type=1400 audit(1757250336.638:797): avc:  denied  { accept } for  pid=1771 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.175900][ T1772] rust_binder: Write failure EFAULT in pid:381
[   65.245331][ T1782] veth0: entered allmulticast mode
[   65.432290][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   65.444623][  T334] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   65.454511][ T1789] devpts: called with bogus options
[   65.460072][ T1789] __vm_enough_memory: pid: 1789, comm: syz.3.474, bytes: 18014402804453376 not enough memory for the allocation
[   65.505464][ T1791] rust_binder: 315: no such ref 4
[   65.510526][ T1791] rust_binder: Write failure EINVAL in pid:315
[   65.523006][ T1796] veth1: entered allmulticast mode
[   65.535786][ T1795] veth1: left allmulticast mode
[   65.570811][ T1808] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   65.602309][    T9] usb 3-1: Using ep0 maxpacket: 32
[   65.608545][    T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   65.617354][    T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   65.622298][  T334] usb 2-1: Using ep0 maxpacket: 32
[   65.626064][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   65.633580][  T334] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   65.642077][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   65.650724][  T334] usb 2-1: config 0 has no interface number 0
[   65.658071][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   65.667489][  T334] usb 2-1: config 0 interface 184 has no altsetting 0
[   65.674451][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   65.682668][  T334] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   65.693530][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   65.703082][  T334] usb 2-1: New USB device strings: Mfr=245, Product=1, SerialNumber=3
[   65.711493][ T1813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   65.719897][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.720378][  T334] usb 2-1: Product: syz
[   65.730229][    T9] usb 3-1: config 0 descriptor??
[   65.737539][  T334] usb 2-1: Manufacturer: syz
[   65.741701][ T1813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:327
[   65.746503][  T334] usb 2-1: SerialNumber: syz
[   65.753846][ T1813] SELinux: security_context_str_to_sid () failed with errno=-22
[   65.760987][  T334] usb 2-1: config 0 descriptor??
[   65.773668][ T1813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.777292][ T1815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   65.777421][ T1816] SELinux: security_context_str_to_sid () failed with errno=-22
[   65.784701][  T334] smsc75xx v1.0.0
[   65.793681][ T1815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:327
[   65.841273][ T1820] rust_binder: Error while translating object.
[   65.850565][ T1820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   65.856828][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333
[   65.867901][ T1820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1820 comm=syz.3.484
[   66.022388][ T1830] bridge0: port 3(ip6gretap0) entered blocking state
[   66.029417][ T1830] bridge0: port 3(ip6gretap0) entered disabled state
[   66.036362][ T1830] ip6gretap0: entered allmulticast mode
[   66.042470][ T1830] ip6gretap0: entered promiscuous mode
[   66.048106][ T1830] bridge0: port 3(ip6gretap0) entered blocking state
[   66.054799][ T1830] bridge0: port 3(ip6gretap0) entered forwarding state
[   66.179882][    T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   66.200360][    T9] usb 3-1: USB disconnect, device number 18
[   66.206701][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   66.207339][    T9] usblp0: removed
[   66.218025][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[   66.231287][  T334] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   66.241550][  T334] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61
[   66.696559][ T1848] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   66.950073][   T36] audit: type=1400 audit(1757250338.408:798): avc:  denied  { execute } for  pid=1861 comm="syz.3.498" path="/memory.events.local" dev="ramfs" ino=13764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   66.996770][ T1878] ªªªªªª<_¥m]€LÏÂ: renamed from lo
[   67.003288][   T36] audit: type=1400 audit(1757250338.468:799): avc:  denied  { relabelfrom } for  pid=1879 comm="syz.3.504" name="" dev="pipefs" ino=13790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   67.073845][   T36] audit: type=1400 audit(1757250338.538:800): avc:  denied  { ioctl } for  pid=1886 comm="syz.3.507" path="socket:[13250]" dev="sockfs" ino=13250 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   67.116105][   T36] audit: type=1400 audit(1757250338.578:801): avc:  denied  { bind } for  pid=1893 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.135532][   T36] audit: type=1400 audit(1757250338.578:802): avc:  denied  { name_bind } for  pid=1893 comm="syz.3.509" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   67.156682][   T36] audit: type=1400 audit(1757250338.578:803): avc:  denied  { node_bind } for  pid=1893 comm="syz.3.509" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   67.872305][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   68.023407][    T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   68.032663][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.041325][    T9] usb 3-1: config 0 descriptor??
[   68.147152][ T1968] overlayfs: failed to resolve './file0': -2
[   68.153913][ T1968] overlayfs: failed to resolve './file0': -2
[   68.160501][ T1968] overlayfs: failed to resolve './file0': -2
[   68.168071][ T1968] overlayfs: failed to resolve './file0': -2
[   68.177979][  T334] usb 2-1: USB disconnect, device number 15
[   68.187356][ T1968] overlayfs: failed to resolve './file0': -2
[   68.196791][ T1968] overlay: Unknown parameter '@'
[   68.214071][ T1968] overlay: Unknown parameter '@'
[   68.227684][ T1968] overlay: Unknown parameter ''
[   68.237948][ T1968] overlay: Unknown parameter ''
[   68.253110][ T1968] overlay: Unknown parameter ''
[   68.276841][ T1968] overlay: Unknown parameter ''
[   68.329909][ T1990] netlink: 72 bytes leftover after parsing attributes in process `syz.0.536'.
[   68.754620][    T9] usb 3-1: Cannot set autoneg
[   68.770158][    T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   68.788862][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   68.788878][   T36] audit: type=1400 audit(1757250340.248:805): avc:  denied  { append } for  pid=1999 comm="syz.2.539" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   68.790296][    T9] usb 3-1: USB disconnect, device number 19
[   68.824960][   T36] audit: type=1400 audit(1757250340.298:806): avc:  denied  { read } for  pid=1999 comm="syz.2.539" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   68.847914][   T36] audit: type=1400 audit(1757250340.298:807): avc:  denied  { open } for  pid=1999 comm="syz.2.539" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   68.898867][   T36] audit: type=1400 audit(1757250340.358:808): avc:  denied  { watch watch_reads } for  pid=2002 comm="syz.0.540" path="/169" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   69.420969][ T2034] rust_binder: Error while translating object.
[   69.421004][ T2034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   69.427430][ T2034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207
[   69.472309][    T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   69.633554][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   69.641569][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[   69.650476][    T9] usb 2-1: config 13 has an invalid interface number: 90 but max is 0
[   69.658844][    T9] usb 2-1: config 13 has no interface number 0
[   69.665169][    T9] usb 2-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[   69.678364][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7
[   69.687475][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.695505][    T9] usb 2-1: Product: syz
[   69.699745][    T9] usb 2-1: Manufacturer: syz
[   69.704401][    T9] usb 2-1: SerialNumber: syz
[   69.739746][ T2044] overlayfs: failed to resolve './file1': -2
[   69.824779][ T2059] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   69.910636][ T2027] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.910801][ T2027] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.921290][    T9] usb 2-1: USB disconnect, device number 16
[   69.944182][ T1572] udevd[1572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.90/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   70.222314][  T558] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   70.340774][   T36] audit: type=1400 audit(1757250341.798:809): avc:  denied  { getopt } for  pid=2082 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.375091][  T558] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   70.385607][  T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.388738][ T2089] 9pnet_fd: Insufficient options for proto=fd
[   70.393921][  T558] usb 3-1: Product: syz
[   70.404130][  T558] usb 3-1: Manufacturer: syz
[   70.408972][  T558] usb 3-1: SerialNumber: syz
[   70.478191][ T2098] netlink: 104 bytes leftover after parsing attributes in process `syz.0.569'.
[   70.494189][ T2101] netlink: 328 bytes leftover after parsing attributes in process `syz.0.570'.
[   70.816482][ T2114] SELinux: security_context_str_to_sid () failed with errno=-22
[   70.898289][ T2118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=568208745 (2272834980 ns) > initial count (932309172 ns). Using initial count to start timer.
[   70.915954][ T2118] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   70.989969][ T2120] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.095412][ T2120] rust_binder: Error in use_page_slow: ESRCH
[   71.102095][ T2120] rust_binder: use_range failure ESRCH
[   71.108108][ T2120] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   71.113637][ T2120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   71.121622][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:412
[   71.121914][   T36] audit: type=1326 audit(1757250342.578:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23efb8ebe9 code=0x7fc00000
[   71.343677][ T2131] netlink: 'syz.0.581': attribute type 58 has an invalid length.
[   71.459488][   T36] audit: type=1400 audit(1757250342.918:811): avc:  denied  { accept } for  pid=2150 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.479905][   T36] audit: type=1400 audit(1757250342.948:812): avc:  denied  { accept } for  pid=2150 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   71.840549][ T2161] mmap: syz.1.593 (2161): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   71.901382][ T2164] tipc: Enabling of bearer <eth:&,> rejected, failed to enable media
[   72.152294][  T334] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   72.312265][  T334] usb 2-1: Using ep0 maxpacket: 32
[   72.318646][  T334] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   72.328150][  T334] usb 2-1: config 1 has no interface number 1
[   72.335810][  T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   72.345052][  T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.353142][  T334] usb 2-1: Product: syz
[   72.357426][  T334] usb 2-1: Manufacturer: syz
[   72.362040][  T334] usb 2-1: SerialNumber: syz
[   72.569449][   T36] audit: type=1400 audit(1757250344.028:813): avc:  denied  { name_bind } for  pid=2166 comm="syz.1.595" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   72.641913][   T36] audit: type=1400 audit(1757250344.098:814): avc:  denied  { write } for  pid=2166 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   72.835457][ T2189] devpts: called with bogus options
[   72.849744][  T558] usb 3-1: USB disconnect, device number 20
[   72.880942][ T2196] overlayfs: failed to clone upperpath
[   72.895919][ T2199] 9pnet_fd: Insufficient options for proto=fd
[   73.683647][  T558] rust_binder: 0: removing orphan mapping 0:96
[   73.694451][  T558] rust_binder: 0: removing orphan mapping 96:24
[   73.727991][ T2238] IPv6: NLM_F_CREATE should be specified when creating new route
[   73.897382][ T2270] netlink: 'syz.0.628': attribute type 11 has an invalid length.
[   74.739804][   T36] audit: type=1400 audit(1757250346.198:815): avc:  denied  { mount } for  pid=2274 comm="syz.0.630" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   74.907022][  T334] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[   74.915025][  T334] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   74.915308][ T2280] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.923621][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.930068][  T334] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes
[   74.945886][  T334] usb 2-1: USB disconnect, device number 17
[   74.981553][ T2281] rust_binder: Error in use_page_slow: ESRCH
[   74.981572][ T2281] rust_binder: use_range failure ESRCH
[   74.987613][ T2281] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   74.993158][ T2281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   75.001145][ T2281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:421
[   75.321287][   T36] audit: type=1326 audit(1757250346.778:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.0.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3471f8ebe9 code=0x0
[   75.469910][ T2296] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[   75.484251][ T2296] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[   75.536657][   T36] audit: type=1400 audit(1757250346.998:817): avc:  denied  { setattr } for  pid=2300 comm="syz.2.638" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   75.653885][ T2313] fuse: Unknown parameter '0x0000000000000006'
[   75.702089][ T2322] cgroup: Unknown subsys name 'measure'
[   75.702966][ T2320] fuse: Unknown parameter '000000000000000000000x0000000000000005fd'
[   75.717312][ T2320] fuse: Unknown parameter '000000000000000000000x0000000000000005fd'
[   75.728697][ T2320] fuse: Unknown parameter '000000000000000000000x0000000000000005fd'
[   75.983280][ T2336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'.
[   76.042473][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.049514][ T2337] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.056589][ T2337] bridge_slave_0: entered allmulticast mode
[   76.062972][ T2337] bridge_slave_0: entered promiscuous mode
[   76.069273][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.076384][ T2337] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.084959][ T2337] bridge_slave_1: entered allmulticast mode
[   76.091733][ T2337] bridge_slave_1: entered promiscuous mode
[   76.101085][   T12] bridge_slave_1: left allmulticast mode
[   76.106775][   T12] bridge_slave_1: left promiscuous mode
[   76.112771][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.120191][   T12] bridge_slave_0: left allmulticast mode
[   76.125908][   T12] bridge_slave_0: left promiscuous mode
[   76.131505][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.217723][   T12] veth1_macvtap: left promiscuous mode
[   76.223281][   T12] veth0_vlan: left promiscuous mode
[   76.242292][  T558] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   76.275529][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.282611][ T2337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.289871][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.296905][ T2337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.318873][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.326434][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.335776][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.342856][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.352508][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.359570][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.381928][ T2337] veth0_vlan: entered promiscuous mode
[   76.392150][ T2337] veth1_macvtap: entered promiscuous mode
[   76.422299][  T558] usb 3-1: Using ep0 maxpacket: 8
[   76.430629][  T558] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   76.449920][   T36] audit: type=1400 audit(1757250347.908:818): avc:  denied  { load_policy } for  pid=2347 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   76.470022][  T558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.472653][ T2348] SELinux: failed to load policy
[   76.479675][  T558] usb 3-1: config 0 descriptor??
[   76.693236][  T558] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   77.248662][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.758054][ T2418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'.
[   77.768335][ T2418] netlink: 'syz.3.675': attribute type 4 has an invalid length.
[   77.809756][ T2423] overlayfs: failed to clone upperpath
[   77.817935][ T2423] netlink: 2 bytes leftover after parsing attributes in process `syz.3.677'.
[   77.922737][ T2434] 9pnet_fd: Insufficient options for proto=fd
[   78.314585][  T558] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[   78.325341][  T558] asix 3-1:0.0: probe with driver asix failed with error -71
[   78.333814][  T558] usb 3-1: USB disconnect, device number 21
[   78.966122][ T2476] rust_binder: Error while translating object.
[   78.966185][ T2476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   78.975172][ T2476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262
[   78.997149][   T36] audit: type=1400 audit(1757250350.458:819): avc:  denied  { create } for  pid=2489 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   79.068365][ T2502] netlink: 'syz.3.704': attribute type 4 has an invalid length.
[   79.083056][ T2502] netlink: 'syz.3.704': attribute type 4 has an invalid length.
[   79.124047][ T2506] overlayfs: failed to clone upperpath
[   79.164174][   T36] audit: type=1400 audit(1757250350.628:820): avc:  denied  { ioctl } for  pid=2509 comm="syz.3.707" path="socket:[16563]" dev="sockfs" ino=16563 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   79.322297][  T568] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   79.326279][   T52] Bluetooth: hci0: command 0x1003 tx timeout
[   79.343303][ T2517] input: syz1 as /devices/virtual/input/input9
[   79.540740][   T36] audit: type=1400 audit(1757250350.998:821): avc:  denied  { write } for  pid=2524 comm="syz.4.712" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   79.566361][   T36] audit: type=1400 audit(1757250350.998:822): avc:  denied  { open } for  pid=2524 comm="syz.4.712" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   79.643341][   T36] audit: type=1400 audit(1757250351.108:823): avc:  denied  { read } for  pid=2529 comm="syz.4.713" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   79.667361][   T36] audit: type=1400 audit(1757250351.108:824): avc:  denied  { open } for  pid=2529 comm="syz.4.713" path="/12/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   79.671935][ T2532] 9pnet_fd: Insufficient options for proto=fd
[   79.748226][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   79.748244][   T36] audit: type=1400 audit(1757250351.208:826): avc:  denied  { wake_alarm } for  pid=2537 comm="syz.3.716" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.776225][ T2538] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   79.785266][ T2538] overlayfs: missing 'lowerdir'
[   79.842331][ T2553] exFAT-fs (rnullb0): invalid boot record signature
[   79.849041][ T2553] exFAT-fs (rnullb0): failed to read boot sector
[   79.856367][ T2553] exFAT-fs (rnullb0): failed to recognize exfat type
[   79.917252][ T2562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[   79.932284][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   80.000294][ T2581] overlayfs: failed to clone upperpath
[   80.093301][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.112316][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.122050][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.142429][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.151755][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.162479][    T9] usb 3-1: config 0 descriptor??
[   80.465655][ T2585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.733'.
[   80.543594][ T2589] capability: warning: `syz.0.734' uses 32-bit capabilities (legacy support in use)
[   80.554421][ T2590] netlink: 'syz.3.735': attribute type 1 has an invalid length.
[   80.569396][    T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   80.592528][    T9] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   80.663186][ T2608] 9pnet_fd: Insufficient options for proto=fd
[   80.792787][   T36] audit: type=1400 audit(1757250352.258:827): avc:  denied  { map } for  pid=2613 comm="syz.0.742" path="pipe:[16851]" dev="pipefs" ino=16851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   80.903210][ T2632] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   80.926735][    T9] usb 3-1: USB disconnect, device number 22
[   81.454488][   T36] audit: type=1400 audit(1757250352.918:828): avc:  denied  { connect } for  pid=2639 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   81.526748][ T2647] incfs: ino conflict with backing FS 1
[   81.563873][ T2652] netlink: 'syz.3.753': attribute type 4 has an invalid length.
[   81.754583][   T36] audit: type=1400 audit(1757250353.218:829): avc:  denied  { listen } for  pid=2692 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.813020][ T2706] overlayfs: failed to clone upperpath
[   81.819107][ T2706] fuseblk: Bad value for 'fd'
[   82.032323][  T334] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   82.162275][  T334] usb 3-1: device descriptor read/64, error -71
[   82.196332][   T36] audit: type=1400 audit(1757250353.658:830): avc:  denied  { create } for  pid=2714 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   82.402289][  T334] usb 3-1: device descriptor read/64, error -71
[   82.652281][  T334] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   82.782281][  T334] usb 3-1: device descriptor read/64, error -71
[   83.022275][  T334] usb 3-1: device descriptor read/64, error -71
[   83.062285][  T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   83.132478][  T334] usb usb3-port1: attempt power cycle
[   83.223258][  T329] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[   83.236812][  T329] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.262300][  T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   83.282269][  T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   83.293783][  T329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.306966][  T329] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.307744][   T36] audit: type=1400 audit(1757250354.768:831): avc:  denied  { setattr } for  pid=2748 comm="syz.3.784" name="PACKET" dev="sockfs" ino=17309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   83.316186][  T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.348172][  T329] usb 5-1: config 0 descriptor??
[   83.353436][ T2742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   83.472285][  T334] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   83.493361][  T334] usb 3-1: device descriptor read/8, error -71
[   83.633583][  T334] usb 3-1: device descriptor read/8, error -71
[   83.762403][  T329] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd
[   83.770988][  T329] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   83.781134][  T329] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   83.796671][  T329] usb 5-1: USB disconnect, device number 2
[   83.892345][  T334] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   83.913373][  T334] usb 3-1: device descriptor read/8, error -71
[   83.983508][ T2775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'.
[   83.992382][ T2775] ip6gretap0: left allmulticast mode
[   83.997658][ T2775] ip6gretap0: left promiscuous mode
[   84.002960][ T2775] bridge0: port 3(ip6gretap0) entered disabled state
[   84.010013][ T2775] bridge_slave_1: left allmulticast mode
[   84.015791][ T2775] bridge_slave_1: left promiscuous mode
[   84.021390][ T2775] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.029009][ T2775] bridge_slave_0: left allmulticast mode
[   84.034910][ T2775] bridge_slave_0: left promiscuous mode
[   84.043398][  T334] usb 3-1: device descriptor read/8, error -71
[   84.049749][ T2775] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.137845][   T36] audit: type=1400 audit(1757250355.598:832): avc:  denied  { create } for  pid=2778 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   84.152310][  T329] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.165039][  T334] usb usb3-port1: unable to enumerate USB device
[   84.191673][ T2783] netlink: 'syz.3.795': attribute type 16 has an invalid length.
[   84.199449][ T2783] netlink: 55946 bytes leftover after parsing attributes in process `syz.3.795'.
[   84.737672][ T2805] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   84.743235][ T2808] netlink: 'syz.0.805': attribute type 4 has an invalid length.
[   84.754029][   T36] audit: type=1400 audit(1757250356.208:833): avc:  denied  { map } for  pid=2809 comm="syz.4.806" path="socket:[18110]" dev="sockfs" ino=18110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   84.765498][ T2808] netlink: 17 bytes leftover after parsing attributes in process `syz.0.805'.
[   84.793319][   T36] audit: type=1400 audit(1757250356.208:834): avc:  denied  { accept } for  pid=2809 comm="syz.4.806" path="socket:[18110]" dev="sockfs" ino=18110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.293997][ T2827] fuseblk: Invalid rootmode
[  102.368107][ T2841] tipc: Started in network mode
[  102.374117][ T2841] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  102.398734][ T2841] tipc: Enabled bearer <udp:syz1>, priority 10
[  102.413376][ T2841] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[  102.627098][   T36] audit: type=1400 audit(1757250374.088:835): avc:  denied  { bind } for  pid=2894 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  102.838897][ T2902] netlink: 'syz.4.834': attribute type 13 has an invalid length.
[  102.847591][ T2901] rust_binder: Failed to allocate buffer. len:192, is_oneway:false
[  102.847609][ T2901] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  102.855552][ T2901] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  102.866606][  T558] rust_binder: 2900: removing orphan mapping 0:96
[  102.899088][ T2904] syzkaller0: entered promiscuous mode
[  102.904596][ T2904] syzkaller0: entered allmulticast mode
[  102.992568][ T2909] overlayfs: missing 'lowerdir'
[  103.000119][ T2909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'.
[  103.292298][  T558] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.442336][  T558] usb 5-1: Using ep0 maxpacket: 32
[  103.448579][  T558] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  103.456882][  T558] usb 5-1: config 0 has no interface number 0
[  103.462987][  T558] usb 5-1: config 0 interface 184 has no altsetting 0
[  103.471153][  T558] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  103.480395][  T558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.488420][  T558] usb 5-1: Product: syz
[  103.492591][  T558] usb 5-1: Manufacturer: syz
[  103.497181][  T558] usb 5-1: SerialNumber: syz
[  103.502268][  T558] usb 5-1: config 0 descriptor??
[  103.508816][  T558] smsc75xx v1.0.0
[  103.522350][  T334] tipc: Node number set to 4269801494
[  103.652294][  T334] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[  103.691722][   T36] audit: type=1400 audit(1757250375.148:836): avc:  denied  { connect } for  pid=2929 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  103.773045][ T2940] wireguard: wg2: Could not create IPv4 socket
[  103.803674][  T334] usb 3-1: unable to get BOS descriptor or descriptor too short
[  103.812115][  T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[  103.822465][  T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  103.844151][  T334] usb 3-1: string descriptor 0 read error: -22
[  103.850431][  T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  103.859638][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.871906][ T2921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  103.880279][ T2921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.238305][   T36] audit: type=1400 audit(1757250375.698:837): avc:  denied  { watch } for  pid=2957 comm="syz.3.853" path="/246/file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  104.512339][  T558] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  104.725633][  T558] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  104.739271][  T558] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  104.749095][  T558] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  104.759980][  T558] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  104.771686][  T558] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  104.784390][  T558] usb 5-1: USB disconnect, device number 4
[  105.137961][ T3000] incfs: Options parsing error. -22
[  105.143231][ T3000] incfs: mount failed -22
[  105.289840][   T36] audit: type=1400 audit(1757250376.748:838): avc:  granted  { setsecparam } for  pid=3004 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  105.311027][ T3007] rust_binder: Got transaction with invalid offset.
[  105.311073][ T3007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  105.312061][   T36] audit: type=1400 audit(1757250376.748:839): avc:  granted  { setsecparam } for  pid=3004 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  105.321125][ T3007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[  105.367910][   T36] audit: type=1326 audit(1757250376.828:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3015 comm="syz.4.870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d8e58ebe9 code=0x0
[  105.671873][ T3024] /dev/loop0: Can't lookup blockdev
[  106.240945][ T3043] rust_binder: Error while translating object.
[  106.240992][ T3043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.247303][ T3043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[  106.283339][ T3054] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  106.292698][ T3054] rust_binder: Error while translating object.
[  106.301607][ T3054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.308140][ T3054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147
[  106.328032][ T3058] fuse: Unknown parameter 'Ø'
[  106.375499][  T329] usb 3-1: USB disconnect, device number 27
[  106.440770][ T3079] fuse: Unknown parameter 'group_idþ00000000000000000000'
[  106.462272][ T3079] pim6reg1: entered promiscuous mode
[  106.467639][ T3079] pim6reg1: entered allmulticast mode
[  106.732322][  T334] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  106.842287][  T329] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  106.872275][  T334] usb 5-1: device descriptor read/64, error -71
[  106.992278][  T329] usb 3-1: Using ep0 maxpacket: 32
[  106.998433][  T329] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  107.006777][  T329] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  107.017932][  T329] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  107.027056][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.033793][ T3098] overlayfs: failed to resolve './file0': -2
[  107.036968][  T329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.052493][  T329] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.065592][  T329] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  107.074848][  T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.083381][  T329] usb 3-1: config 0 descriptor??
[  107.122263][  T334] usb 5-1: device descriptor read/64, error -71
[  107.183689][ T3105] netlink: 57 bytes leftover after parsing attributes in process `syz.3.901'.
[  107.289726][  T329] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  107.306902][  T329] usb 3-1: USB disconnect, device number 28
[  107.317690][  T329] usblp0: removed
[  107.372314][  T334] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  107.502302][  T334] usb 5-1: device descriptor read/64, error -71
[  107.612350][  T329] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  107.742298][  T334] usb 5-1: device descriptor read/64, error -71
[  107.748570][  T329] usb 3-1: device descriptor read/64, error -71
[  107.829063][ T3131] netlink: 'syz.3.909': attribute type 4 has an invalid length.
[  107.850352][ T3136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'.
[  107.859363][  T334] usb usb5-port1: attempt power cycle
[  107.992290][  T329] usb 3-1: device descriptor read/64, error -71
[  108.202297][  T334] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  108.223331][  T334] usb 5-1: device descriptor read/8, error -71
[  108.232375][  T329] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  108.353373][  T334] usb 5-1: device descriptor read/8, error -71
[  108.362302][  T329] usb 3-1: device descriptor read/64, error -71
[  108.592421][  T334] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  108.602314][  T329] usb 3-1: device descriptor read/64, error -71
[  108.613256][  T334] usb 5-1: device descriptor read/8, error -71
[  108.643678][ T3156] netlink: 'syz.0.919': attribute type 2 has an invalid length.
[  108.712436][  T329] usb usb3-port1: attempt power cycle
[  108.743913][  T334] usb 5-1: device descriptor read/8, error -71
[  108.852379][  T334] usb usb5-port1: unable to enumerate USB device
[  109.052279][  T329] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  109.073374][  T329] usb 3-1: device descriptor read/8, error -71
[  109.208397][  T329] usb 3-1: device descriptor read/8, error -71
[  109.233382][ T3186] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  109.280449][ T3201] netlink: 'syz.3.935': attribute type 58 has an invalid length.
[  109.290059][ T3201] netlink: 'syz.3.935': attribute type 58 has an invalid length.
[  109.299031][ T3201] netlink: 'syz.3.935': attribute type 58 has an invalid length.
[  109.347882][   T36] audit: type=1400 audit(1757250380.808:841): avc:  denied  { create } for  pid=3213 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  109.452298][  T329] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  109.473275][  T329] usb 3-1: device descriptor read/8, error -71
[  109.518837][ T3222] FAT-fs (rnullb0): bogus number of reserved sectors
[  109.521703][ T3224] overlayfs: failed to clone lowerpath
[  109.527266][ T3222] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  109.576393][ T3235] netlink: 'syz.0.948': attribute type 4 has an invalid length.
[  109.585139][ T3234] netlink: 'syz.0.948': attribute type 4 has an invalid length.
[  109.593370][ T3229] fuse: Unknown parameter 'ÿÿ0x0000000000000006'
[  109.612767][  T329] usb 3-1: device descriptor read/8, error -71
[  109.698704][   T36] audit: type=1326 audit(1757250381.158:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3247 comm="syz.2.952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f8ad8ebe9 code=0x0
[  109.722384][  T329] usb usb3-port1: unable to enumerate USB device
[  109.778400][ T3254] rust_binder: Error while translating object.
[  109.778437][ T3254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  109.784649][ T3254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:174
[  109.806137][ T3256] random: crng reseeded on system resumption
[  109.806141][   T36] audit: type=1400 audit(1757250381.268:843): avc:  denied  { write } for  pid=3255 comm="syz.4.956" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  109.833778][ T3256] Restarting kernel threads ... 
[  109.844080][   T36] audit: type=1400 audit(1757250381.298:844): avc:  denied  { ioctl } for  pid=3255 comm="syz.4.956" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  109.844249][ T3256] done.
[  110.122279][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  110.251535][ T3281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.965'.
[  110.261774][   T36] audit: type=1400 audit(1757250381.718:845): avc:  denied  { create } for  pid=3280 comm="syz.0.965" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  110.284017][    T9] usb 5-1: config 0 has an invalid interface number: 40 but max is 0
[  110.292111][    T9] usb 5-1: config 0 has no interface number 0
[  110.305107][    T9] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=de.fa
[  110.314323][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.323928][    T9] usb 5-1: config 0 descriptor??
[  110.530990][    T9] usb 5-1: string descriptor 0 read error: -71
[  110.543918][    T9] ftdi_sio 5-1:0.40: FTDI USB Serial Device converter detected
[  110.551848][    T9] ftdi_sio ttyUSB0: unknown device type: 0xdefa
[  110.563595][    T9] usb 5-1: USB disconnect, device number 9
[  110.571502][    T9] ftdi_sio 5-1:0.40: device disconnected
[  110.642680][   T36] audit: type=1400 audit(1757250382.108:846): avc:  denied  { sqpoll } for  pid=3300 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  110.671751][ T3304] overlayfs: missing 'lowerdir'
[  110.678460][   T36] audit: type=1400 audit(1757250382.138:847): avc:  denied  { setattr } for  pid=3303 comm="syz.3.973" name="file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  110.703464][   T36] audit: type=1400 audit(1757250382.168:848): avc:  denied  { read } for  pid=3303 comm="syz.3.973" name="file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  110.727196][   T36] audit: type=1400 audit(1757250382.168:849): avc:  denied  { mounton } for  pid=3303 comm="syz.3.973" path="/298/bus/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  110.901409][ T3327] 9pnet_fd: Insufficient options for proto=fd
[  111.022289][    T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  111.152326][    T9] usb 3-1: device descriptor read/64, error -71
[  111.213372][ T3342] netlink: 'syz.0.989': attribute type 4 has an invalid length.
[  111.221053][ T3342] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.989'.
[  111.402304][    T9] usb 3-1: device descriptor read/64, error -71
[  111.416113][   T36] audit: type=1400 audit(1757250382.878:850): avc:  denied  { mounton } for  pid=3343 comm="syz.3.990" path="/306/file0" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  111.416142][ T3344] fuse: Bad value for 'group_id'
[  111.439247][  T578] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  111.444163][ T3344] fuse: Bad value for 'group_id'
[  111.513953][ T3346] fuse: Bad value for 'group_id'
[  111.518899][ T3346] fuse: Bad value for 'group_id'
[  111.593352][  T578] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  111.602590][  T578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.611007][  T578] usb 5-1: config 0 descriptor??
[  111.629543][ T3348] overlayfs: failed to clone upperpath
[  111.652285][    T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  111.782279][    T9] usb 3-1: device descriptor read/64, error -71
[  111.849209][ T3336] ------------[ cut here ]------------
[  111.854727][ T3336] WARNING: CPU: 0 PID: 3336 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[  111.864988][ T3336] Modules linked in:
[  111.868987][ T3336] CPU: 0 UID: 0 PID: 3336 Comm: syz.4.986 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5
[  111.880480][ T3336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.890578][ T3336] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[  111.897073][ T3336] Code: 7e 3b e8 14 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 f1 0b 6a 00 <0f> 0b e9 e4 fc ff ff e8 e5 0b 6a 00 0f 0b e9 0e fd ff ff e8 d9 0b
[  111.916734][ T3336] RSP: 0018:ffffc900007df9c0 EFLAGS: 00010293
[  111.923032][ T3336] RAX: ffffffff811bd81f RBX: ffff8881193ea180 RCX: ffff88811a5bb900
[  111.931023][ T3336] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  111.939030][ T3336] RBP: ffffc900007dfc70 R08: ffff88811a5bb907 R09: 1ffff110234b7720
[  111.947296][ T3336] R10: dffffc0000000000 R11: ffffed10234b7721 R12: ffff8881173a1000
[  111.955313][ T3336] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881193ea1f8
[  111.963305][ T3336] FS:  00007f9d8f4b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  111.972344][ T3336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.978968][ T3336] CR2: 000000005200000c CR3: 0000000126638000 CR4: 00000000003526b0
[  111.986974][ T3336] Call Trace:
[  111.990313][ T3336]  <TASK>
[  111.993264][ T3336]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  111.999254][ T3336]  ? __futex_wait+0x218/0x2a0
[  112.003954][ T3336]  ? __cfi_wait_rcu_exp_gp+0x10/0x10
[  112.009243][ T3336]  ? ioctl_has_perm+0x1aa/0x4d0
[  112.014101][ T3336]  ? __cfi_autoremove_wake_function+0x10/0x10
[  112.020183][ T3336]  ? ioctl_has_perm+0x3e0/0x4d0
[  112.025053][ T3336]  ? has_cap_mac_admin+0xd0/0xd0
[  112.029990][ T3336]  ? synchronize_rcu+0x77/0x2e0
[  112.034875][ T3336]  ? __cfi_synchronize_rcu+0x10/0x10
[  112.040175][ T3336]  ? futex_wait+0x29a/0x7a0
[  112.044942][ T3336]  ? __kasan_check_write+0x18/0x20
[  112.050059][ T3336]  kvm_vcpu_ioctl+0x96f/0xee0
[  112.054756][ T3336]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  112.059961][ T3336]  ? do_futex+0x309/0x500
[  112.064307][ T3336]  ? __cfi_do_futex+0x10/0x10
[  112.068981][ T3336]  ? __se_sys_brk+0x5fc/0xf50
[  112.073671][ T3336]  ? __fget_files+0x2c5/0x340
[  112.078349][ T3336]  ? bpf_lsm_file_ioctl+0xd/0x20
[  112.083305][ T3336]  ? security_file_ioctl+0x34/0xd0
[  112.088421][ T3336]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  112.093650][ T3336]  __se_sys_ioctl+0x132/0x1b0
[  112.098325][ T3336]  __x64_sys_ioctl+0x7f/0xa0
[  112.102925][ T3336]  x64_sys_call+0x1878/0x2ee0
[  112.107616][ T3336]  do_syscall_64+0x58/0xf0
[  112.112019][ T3336]  ? clear_bhb_loop+0x50/0xa0
[  112.116753][ T3336]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  112.122684][ T3336] RIP: 0033:0x7f9d8e58ebe9
[  112.127467][ T3336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.147090][ T3336] RSP: 002b:00007f9d8f4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.155618][ T3336] RAX: ffffffffffffffda RBX: 00007f9d8e7c6090 RCX: 00007f9d8e58ebe9
[  112.163620][ T3336] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  112.171592][ T3336] RBP: 00007f9d8e611e19 R08: 0000000000000000 R09: 0000000000000000
[  112.179683][ T3336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.187678][ T3336] R13: 00007f9d8e7c6128 R14: 00007f9d8e7c6090 R15: 00007ffff9573258
[  112.195676][ T3336]  </TASK>
[  112.198693][ T3336] ---[ end trace 0000000000000000 ]---
[  112.206236][  T578] usb 5-1: Cannot read MAC address
[  112.211439][  T578] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  112.332285][    T9] usb 3-1: device descriptor read/64, error -71
[  112.442442][    T9] usb usb3-port1: attempt power cycle
[  112.624070][   T10] usb 5-1: USB disconnect, device number 10
[  112.782357][    T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  112.803430][    T9] usb 3-1: device descriptor read/8, error -71
[  112.933367][    T9] usb 3-1: device descriptor read/8, error -71
[  113.172288][    T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  113.193312][    T9] usb 3-1: device descriptor read/8, error -71
[  113.323292][    T9] usb 3-1: device descriptor read/8, error -71
[  113.432376][    T9] usb usb3-port1: unable to enumerate USB device