last executing test programs:

25.489206452s ago: executing program 0 (id=435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x1814800, 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x2, 0x0, 0x1000000})
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000})
fsync(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r3 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r3, r2, 0x0, 0xffffffff)

25.328882638s ago: executing program 0 (id=436):
setregid(0xffffffffffffffff, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4)
write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\x00'/10, 0x3a, '](\xdb\x96\r\xde\xf9.\x9a\x98\x00\x00\x00\x00', 0x3a, './file0'}, 0x3f)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d5b51eec02b6beb85fd97c51db73e64148bec2745eb7b2f1956d8119177b14876f1e243664a787d60b68dbdad1003de4ba84c8d801b495c16ca4e0876b4908ca1a3d3b97caa21c82aec56bee4ca3ea72de334874a17ed25bd0ff681568c8bd9af09838dc0b900"/124, @ANYRESHEX=r0, @ANYBLOB=',ignoreqv,debug=0x0000000000000003,version=9p2000.u,access=client,posixacl,version=9p2000,directio,posixacl,dont_hash,obj_role=/dev/rnullb0\x00,fowner<', @ANYRESDEC=r2, @ANYBLOB=',obj_role=/dev/rnullb0\x00,fowner<', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef=/dev/rnullb0\x00,defcontext=user_u,\x00'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000030d000/0x400000)=nil)
madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17)

25.317007139s ago: executing program 0 (id=437):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x3, 0xc4, 0x2, 0x401}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
inotify_add_watch(r1, &(0x7f0000000600)='./file0\x00', 0xa4000880)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x13)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f00000008c0)={0x6a8e02, 0x1e2, 0x19}, 0x18)
unshare(0x2040400)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='cpuset\x00')
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r5, 0x300, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x194, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x110a}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/20, 0x14, 0x0, 0x24}, @fda={0x66646185, 0x6, 0x2, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/250, 0xfa, 0x2, 0x35}, @fda={0x66646185, 0x9, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x28, 0x48}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002700)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000002680)=""/121, 0x79, 0x0, 0x30}, @fda={0x66646185, 0xa, 0x1, 0x34}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x7, 0x2, 0x5}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x19}}, &(0x7f0000000580)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, 0x0})

25.300448941s ago: executing program 0 (id=438):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
socket(0x2, 0x2, 0x1) (async)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c010, 0x0, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r2, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) (async)
ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getuid() (async)
r6 = getuid()
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r6, &(0x7f0000000280)={0xfffffffffffffe00, 0x0, 0x1}) (async)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r6, &(0x7f0000000280)={0xfffffffffffffe00, 0x0, 0x1})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x2000)
recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000001800)=""/215, 0xd7}, {&(0x7f0000004500)=""/4089, 0xff9}, {&(0x7f0000003500)=""/4087, 0xff7}, {&(0x7f0000000040)=""/159, 0x9f}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000600)=""/257, 0x101}], 0x9}}], 0x1, 0x40000100, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xf4c}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x40000000, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async)
sendmsg$key(r8, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)

25.221146379s ago: executing program 0 (id=439):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000)
syz_clone(0x41004800, &(0x7f00000000c0)="ce319a3e16db5a10009b3e96420fea4ebc30a8823c86ebb1e7eaed3322f66fba4e3f76f709356e22e84e6896a7c8305b4810af6247ae92f8992fb0537484bc18a056acbec2aeedd127ea09800d2c98684604324eb4417f47e91491f370904ce34261e330a2dc8a1fd306be68b3aadf6b6f71ca71398bf2f808104734a683b9d5a80ac04515b25a7e299f7f323772340d64ba4ad93128a06428ddfb7bfd55", 0xffffffffffffffdb, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="6744006e82a362cf117561297746ee49f5fa92e510bea8216a3652db4154a8f3dc1f0f67b3286a")
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
poll(&(0x7f00000000c0)=[{r2, 0x280}], 0x1, 0x5)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
close_range(r0, r0, 0x0)

25.20648798s ago: executing program 0 (id=440):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ec0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4$unix(r1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
io_setup(0xb, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
pwritev2(r0, &(0x7f0000000400), 0x0, 0x8, 0x3, 0x18)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xfffd, 0x1, 0x6, 0x2}]}, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0)
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ec0)) (async)
accept4$unix(r1, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async)
io_setup(0xb, &(0x7f0000000080)) (async)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
syz_usb_disconnect(r3) (async)
pwritev2(r0, &(0x7f0000000400), 0x0, 0x8, 0x3, 0x18) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xfffd, 0x1, 0x6, 0x2}]}, 0x10) (async)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0) (async)
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) (async)

25.160957595s ago: executing program 32 (id=440):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ec0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4$unix(r1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
io_setup(0xb, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
pwritev2(r0, &(0x7f0000000400), 0x0, 0x8, 0x3, 0x18)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xfffd, 0x1, 0x6, 0x2}]}, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0)
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ec0)) (async)
accept4$unix(r1, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async)
io_setup(0xb, &(0x7f0000000080)) (async)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
syz_usb_disconnect(r3) (async)
pwritev2(r0, &(0x7f0000000400), 0x0, 0x8, 0x3, 0x18) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xfffd, 0x1, 0x6, 0x2}]}, 0x10) (async)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r3, 0x4004550e, 0x0) (async)
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) (async)

10.379972004s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

8.513247778s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6.533519644s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.639342242s ago: executing program 2 (id=539):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) (async)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x9, 0x0, 0x6, 0x4}}, 0x20) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0x5) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r9, r3, 0x0, 0xffffffff)

4.559039329s ago: executing program 1 (id=542):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
syncfs(r0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

4.497359705s ago: executing program 1 (id=543):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32)

4.466846008s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.52539214s ago: executing program 1 (id=544):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x400000, 0x3}, 0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e27, 0x0, @loopback, 0x5}}, 0x0, 0x0, 0x5, 0x0, "00ec2ff093289349bb89de25b87376f64276337642b890d33cb5b5b423d46229bc1c7ac135fee1b32aa3b47debd38b6d889a8c98030000000000000000000000000000000000000300"}, 0xd8)
close_range(r2, 0xffffffffffffffff, 0x10000000000000)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.523654471s ago: executing program 2 (id=545):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000)
r1 = socket$inet6(0xa, 0x3, 0xa5)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001c0001"], 0x1c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = getuid()
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000540)=0x1000400, 0x4)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x4000)=nil)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="1f22516bc6bf1424b01fb27cddfd966265f4e52587258fb2b5bb17209b55093c676926414551f2c036d3c4a8580e7e567f324adc556c5233dda0527f60854394dc4c399bb787cbeb18ae59c5fc811ce451227f6576468eab66e981de17c503f96bc6b75fd2abfe5f01408905cd3fc34cbc09e1ff2be2a739a610d3655bd14fb5b81fbc1d685f04aff346c260c24441a7b3", 0x91}, {&(0x7f0000000280)="2c2187db91680bda78563781963c069b796ced0972daa910c1e8c12757c692ac88e00dd024b9dfb6406185e77a22d5c8ab92b818f2594b05f975c071a5bb70e7d95dc59730aa3a15949510b925a6ed5edebf6914d8834380cc7005acb11a108c08d183ee21237ed7a68695fd96cdc69bf9b5a16ccdb02d0d4a7f3ebe6fb7d4d337af8635259fe68541c44d47e614ff78d29baa5ef551c9fb8c10c97b4ca3c6b69f4e3eaee15bda612bc918c7c33734bcd39a59c00bd30764e1d13aadd104187af4bd5cd212eb6033f2acc902ce760b3f273c6e", 0xd3}, {&(0x7f0000000380)="305865d1847e32ee38c01e767d3374b27bf2a20233e79f71101396cb78e3a0340b10d8522da1a3cd0296705bb8da5a01801930ac1182834bad186457af06d650390ca90194048596f14897131da47fd04286496b6b55498408caab87a01f90346df7f37c61a7250d4aa0f958b64d247e329f2a73d94f3679d4b4544adc106a2a108fb1b9eb17aebc7a3ae977dcc13e851fe92a17861def3cefed76f910cda231b5f49e3356e7f1de0b485160efc9a8b2ff8490388858a9c277d29f6122ef28d4a19a2a81a84eaca52fca0d317fc614475b02d10b66c8c877c3297affae7dfdc33479fbba359d0354ef01a16bbf3a", 0xee}], 0x3, &(0x7f00000005c0)="8eca635ad02370de3a09e20df1c5683e31880e2ef7b49b9364b7ee2323d00ecbad6e0debe7592f7e121136b406385ad4012158b31aea4d6680e8fe5684f3b36c951ce609eedc69b91e3b47d189b3c67c9a4d9162a402b0235ff30316f0572f51d1adfaffca3cf6c3f395721ee408d510c50db7285f2b8334ad52c0472f639ac8c943321ac7e12ab200fd08a993e6def5e36b1a8d866f4c01d5dc266d79760488e5e93b8154b557f3a7d6804e9be896e1d2eb3edee482e878ce84c9358682e7f555241bd10ac6a6b6db0979e223f3b7f9fa50aa2e1419aa512f65f8539962ea36303b3bcdf59a040e897746584a57c72772d7", 0xf2, 0x24000800}, 0x40022)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001180)=@updpolicy={0x12a0, 0x19, 0x4, 0x70bd25, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e22, 0x7, 0x2, 0x20, 0x20, 0x67, r7, r4}, {0x10000, 0x0, 0x7d8f, 0x80, 0x400, 0x0, 0x5, 0x1}, {0x9, 0xfa4, 0x6, 0x7}, 0x1, 0x6e6bb4, 0x1, 0x1, 0x1, 0x2}, [@extra_flags={0x8, 0x18, 0x130}, @etimer_thresh={0x8, 0xc, 0x9}, @algo_comp={0xa7, 0x3, {{'lzs\x00'}, 0x2f8, "697c4a9f6e8d68862adf3786f5644135b828a52224c6647c18b3ab82a8e28ef3274d7c40a5a88f609a71e3934cacfdc80042aeb6d6006d4451c34dd11104c21c93f787cbc74b3f681b4ca8e2df1d92b9ebe8ef5872cf2c65695921f9adf77e"}}, @sec_ctx={0x4f, 0x8, {0x4b, 0x8, 0x0, 0x0, 0x43, "33754b5dec474687308d2f49f082ea270aa18e99e47fb622412467a0f7cea74be13dc7e31e5640bf6f01f3d1b1edd1cbae8e40b5310a268f7b10f90e9fad9e924c736f"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd2d, 0x70bd26, 0x70bd2d, 0x800, [0x8]}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd26, 0xda}}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@private2, 0x2, 0x55, 0x7}}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in=@multicast1, 0xa, 0x4, 0x68}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @algo_aead={0x104c, 0x12, {{'ccm(blowfish-asm)\x00'}, 0x8000, 0x100, "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"}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4810)
clock_gettime(0x0, &(0x7f0000000000))

2.467293906s ago: executing program 1 (id=547):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
io_setup(0x2007, &(0x7f0000000980)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
shutdown(r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000040)={0x8080000, 0x10000, 0x3, 0x0, 0x7fff})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x8}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeee0000, 0xdddd0000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xeeee0000, 0x8, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0x2, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x2, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0x10, 0x5, 0xb, 0x7, 0x1, 0x34, 0x6, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]})
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.409457562s ago: executing program 3 (id=548):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0)
ioctl$TIOCMSET(r1, 0x5418, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r3 = userfaultfd(0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) (async, rerun: 32)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) (rerun: 64)

2.290081134s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

195.608191ms ago: executing program 1 (id=549):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
pipe(&(0x7f00000004c0)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r4, 0x5432, 0x0)
ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800})

192.429991ms ago: executing program 2 (id=550):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000000000)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
fstat(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$FUSE_ENTRY(r1, &(0x7f00000020c0)={0x90, 0xffffffffffffffda, 0x0, {0x5, 0x1, 0x0, 0x8, 0xcff, 0x4, {0x2, 0x2, 0x0, 0x480b, 0x1, 0x6, 0x0, 0x4, 0x3f, 0x4000, 0x7, r3, r5, 0xfff, 0x7f}}}, 0x90)
write$FUSE_GETXATTR(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r2, {0x2}}, 0x18)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000021c0)={0x10, 0x0, {0x100, @usage=0x8, 0x0, 0xb9, 0x7f000000, 0x7, 0x3, 0x8, 0xc, @struct={0x38e5bb72, 0x5}, 0x6, 0xc3b1, [0x1ff, 0xfffffffffffffffa, 0xffffffffffffffff, 0xf2, 0x1ff, 0x7]}, {0x800000000000, @usage=0x2, <r6=>0x0, 0x3ba, 0xf, 0x8, 0x59, 0x1000, 0x421, @usage=0xfffffffffffffffe, 0x100, 0x1, [0x34e463e9, 0x200, 0x100, 0x8000000000000000]}, {0x9, @struct={0x9, 0xfffffff8}, 0x0, 0x8, 0xdacb, 0x80000001, 0x14, 0x820a, 0x46d, @usage=0x7e, 0x2, 0x4, [0x101, 0x2, 0x400, 0xffffffff, 0xfffffffffffffffa, 0x4]}, {0xff, 0x7, 0x3aa5a7fc}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000025c0)={r6, 0x7, 0xb, 0x1})
mount$9p_fd(0x0, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), 0x10000, &(0x7f0000002a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002ac0)={{r1}, 0x0, 0x1, @unused=[0x6, 0x1, 0xb, 0x4], @name="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"})
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003ac0), 0x460081, 0x0)
timer_create(0x2, &(0x7f0000003bc0)={0x0, 0x27, 0x2, @thr={&(0x7f0000003b00)="9d0fff0f0c4b92f611ede959ba56b22da225df7415b1088976a7f9a96373e3db709fd4d631579d963379b4", &(0x7f0000003b40)="ad8d8029237c942d605e259558aa0280513f909ce7bc06d8b59e8ba448e5d4b37fe1b7f9249eb234a5e2f5c8aefd4f4575f30fa45134f5f894d170df04461136a1ffb1ba20bd07abf80510289b1a50a48b"}}, &(0x7f0000003c00)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000003c40)={{0x77359400}}, &(0x7f0000003c80))
r9 = openat(r7, &(0x7f0000003cc0)='./file0\x00', 0x200000, 0x8)
r10 = accept$inet(r7, &(0x7f0000003d00)={0x2, 0x0, @initdev}, &(0x7f0000003d40)=0x10)
ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000003d80))
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000003dc0)={0xd, 0x2})
r11 = getpgrp(r4)
ioprio_set$pid(0x2, r11, 0x2007)
recvmmsg(r1, &(0x7f000000a600)=[{{&(0x7f0000003e00)=@l2, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003e80)=""/4, 0x4}], 0x1}, 0x800}, {{&(0x7f0000003f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r12=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003f80)=""/197, 0xc5}, {&(0x7f0000004080)=""/225, 0xe1}, {&(0x7f0000004180)=""/95, 0x5f}, {&(0x7f0000004200)=""/45, 0x2d}, {&(0x7f0000004240)=""/214, 0xd6}], 0x5, &(0x7f00000043c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000053c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007840)=[{&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/39, 0x27}, {&(0x7f0000007480)=""/126, 0x7e}, {&(0x7f0000007500)=""/88, 0x58}, {&(0x7f0000007580)=""/34, 0x22}, {&(0x7f00000075c0)=""/186, 0xba}, {&(0x7f0000007680)=""/170, 0xaa}, {&(0x7f0000007740)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000007900)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007980)=""/244, 0xf4}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000007dc0)=[{&(0x7f0000007ac0)}, {&(0x7f0000007b00)=""/120, 0x78}, {&(0x7f0000007b80)=""/231, 0xe7}, {&(0x7f0000007c80)=""/58, 0x3a}, {&(0x7f0000007cc0)=""/68, 0x44}, {&(0x7f0000007d40)=""/126, 0x7e}], 0x6}, 0xe0e}, {{&(0x7f0000007e40)=@nfc_llcp, 0x80, &(0x7f00000093c0)=[{&(0x7f0000007ec0)=""/198, 0xc6}, {&(0x7f0000007fc0)=""/4096, 0x1000}, {&(0x7f0000008fc0)=""/193, 0xc1}, {&(0x7f00000090c0)=""/110, 0x6e}, {&(0x7f0000009140)=""/200, 0xc8}, {&(0x7f0000009240)=""/198, 0xc6}, {&(0x7f0000009340)=""/110, 0x6e}], 0x7, &(0x7f0000009440)=""/247, 0xf7}, 0x2}, {{&(0x7f0000009540)=@nfc_llcp, 0x80, &(0x7f0000009c00)=[{&(0x7f00000095c0)=""/124, 0x7c}, {&(0x7f0000009640)=""/231, 0xe7}, {&(0x7f0000009740)=""/7, 0x7}, {&(0x7f0000009780)=""/191, 0xbf}, {&(0x7f0000009840)=""/254, 0xfe}, {&(0x7f0000009940)=""/68, 0x44}, {&(0x7f00000099c0)=""/41, 0x29}, {&(0x7f0000009a00)=""/202, 0xca}, {&(0x7f0000009b00)=""/36, 0x24}, {&(0x7f0000009b40)=""/156, 0x9c}], 0xa, &(0x7f0000009cc0)=""/1, 0x1}, 0xfff}, {{&(0x7f0000009d00)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000a480)=[{&(0x7f0000009d80)=""/40, 0x28}, {&(0x7f0000009dc0)=""/219, 0xdb}, {&(0x7f0000009ec0)=""/125, 0x7d}, {&(0x7f0000009f40)=""/131, 0x83}, {&(0x7f000000a000)=""/252, 0xfc}, {&(0x7f000000a100)=""/178, 0xb2}, {&(0x7f000000a1c0)=""/231, 0xe7}, {&(0x7f000000a2c0)=""/60, 0x3c}, {&(0x7f000000a300)=""/194, 0xc2}, {&(0x7f000000a400)=""/102, 0x66}], 0xa, &(0x7f000000a540)=""/145, 0x91}}], 0x8, 0x10102, &(0x7f000000a800)={0x77359400})
link(&(0x7f000000a840)='./file0\x00', &(0x7f000000a880)='./file0\x00')
ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f000000a8c0)={0x6, 0x3, 0x1})
sendfile(r0, r1, &(0x7f000000a900)=0x800, 0xe63)
r13 = syz_kvm_add_vcpu$x86(0x0, &(0x7f000000aa00)={0x0, &(0x7f000000a940)=[@code={0xa, 0x58, {"64410fc7b26600000040d2046500000000660f383c2b66b834010f00d04583c6fd0f01c2450f23823e0f38072f66baf80cb88053458def66bafc0cb89df50000efc481da2a6ab2"}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @in_dx={0x82, 0x20, {0xd147, 0x2}}], 0x98})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
clock_gettime(0x0, &(0x7f000000aa40)={<r14=>0x0, <r15=>0x0})
timerfd_settime(r1, 0x2, &(0x7f000000aa80)={{r14, r15+10000000}}, &(0x7f000000aac0))
read(r12, &(0x7f000000ab00)=""/215, 0xd7)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f000000ac00)={{{@in=@loopback, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f000000ad00)=0xe8)

191.161021ms ago: executing program 3 (id=551):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) (async)
syz_usb_connect(0x0, 0x322, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xce, 0x9c, 0x39, 0x40, 0x1bc7, 0x1061, 0xe6ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x310, 0x2, 0x81, 0x4, 0x0, 0x5, [{{0x9, 0x4, 0xf2, 0xa, 0x9, 0x2, 0xe, 0x0, 0xe, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "03539b9436"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x1ff, 0x4, 0x45}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x81, 0x0, [0xc7, 0x0, 0x400, 0xffff, 0x783]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x4}]}, @hid_hid={0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xc66}}], [{{0x9, 0x5, 0x1, 0xc, 0x40, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0xd, 0x228, 0x3, 0x0, 0x4, [@generic={0x76, 0xf, "fd91852719737ddfb1f3428dce19db85937bbb93430c53ee6f80341a87e4659e8e59ceffda8296f79a3e85b89a1d0c29140e0d43361e460e0e2d9c17bca32cacc76eea7330143cf27e957e07d84945c3b8fbaf19c0cac7f6533caa67f534113ed11e6b9d5d62face5f521e6d60c8edc8cbd85fc8"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x7, 0xe}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x5, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x1c6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x0, 0xa, 0x670, 0xf2, 0x88, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x4, 0x7, 0x4, [@generic={0xa0, 0x5, "90fcff75e928493ca3a720efcd37bfaa936d8d5a5634a1567108f5fe1d4c0072282e6c0ee928e0c266c382021467d63ae4edb5422518e34e67ecd4c6b9cc91cd2d29d03bd47da8a7ebed9655af4a9a22aade3b4164f36501ddb549c007d7b807ec96ccda5f41382f443af1332f1919ed0aa8ab35ce692886058e0f4feef0c0d1eb2cb175b077f4e3bed52b82bc01b46359aa65986a9b39f6e06b865e971f"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x9, 0x24, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x7, 0x5, 0x6, [@generic={0x32, 0x21, "aee93821ad03ceb7db5a368f96741945d5f5acb89a2b784c667d809c50eee46a5c63c3870cbe7e2606bf84150385f494"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x10}]}}, {{0x9, 0x5, 0xb, 0x3, 0x450, 0x9, 0x2, 0xd}}]}}, {{0x9, 0x4, 0x42, 0x18, 0x1, 0xff, 0x4, 0x62, 0x5, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x3a, 0x2, 0x7, [@generic={0xeb, 0x3, "e0f1ea01aed4d9724fa9cdf98364b3be6311d0aad7eba72562978d17809dba5cd54c4cbb8109dc93d6589a84549ed8076bc85bda0c2c78f4f4f799537add4daf72513e98281812f922ab93c5674fa2839960e14ea75961fc7024f7d85b0829f6ce5bef6262721f01650be941fff31844da98b794a7550db5ed7eaa2e4c2f0588223e909076b5289304ce5d5c169fdea1f80d85d3a837d06f93d8616e080ec3d64d7299fed78f7e7134dfa2aeda1684fda06e62ff617d3b289835aacb95024369f30ca88e6ddaefd84ecbb8bc0fcc0ce67849a40c672f3d420c83dc57a3c05e8c535fb0ff5541ed4f7e"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0xdc, 0xd3, 0x3, 0x40, 0x6}, 0x219, &(0x7f0000000540)={0x5, 0xf, 0x219, 0x6, [@generic={0xee, 0x10, 0x2, "50a79d85362ce054a7d27f4bb0b6d449dff4f8f15073041adbe7aad4428e98d957f40c50bca46cd7b2ccc4d636df0213ccfba43093b34cf003161a23fe6edff60d9e26ab5320b46de658bdbd9762f6e6cff71d526d394da0a496bb6c2ff71587140f95a43efc5cebe2996a7e2bd3a1016346df816c94ad8a6f73f911153662f9f4caeaa3c4dcccff979461923c64a7a6ca116770f9a52c5a6c0150b1a9ce6058d7fef8747bc2111d45ed44f60d4fa9e773a8f87c52444b3c1153c47b8df213a6fc5ea7915cc3f79cfd12f176b6ebb7d1fda7257a7258b247fde2becb03753f34c26c593503970a68d39801"}, @ptm_cap={0x3}, @generic={0xc9, 0x10, 0xa, "37dd2ad67c1d1c7fdc27cdebef97a92fe4c9da12d6d20129456b73ed58970061f3f29fea6fddaf045fcd461421e0ab538aaff3e79f368de2d05a1dc5cfc4eb926df5b69ceb127792ef84bff3fdcdaa780a0502f5befc9a7ed7bcd2f1c6b875125378834cfbfed95a77f33742328a78272f010fa53b29ea59443762dee3ef1cc21d32f05385351347ccdb46f340fc6ff79466b6591d34da48b399cfc3da42714304c14cf0f770ef6abc333303952c74d990fb0b3844ae0044c9eea8f9106ca54e8130b08fc874"}, @generic={0x4d, 0x10, 0x3, "1fada5e5481a996e6a64592fea202bd007de62cb57cffe6b1b00398c392a6afb7eb4f9e38c91eaabbdd4500116ad97c2cdd6712b2f40129f2d03360a078ce10223207c0f2bf68e392ce8"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x6, 0x4f4c}]}, 0x1, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x425}}]}) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x64ebf22}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8080)
mkdirat$cgroup(r0, &(0x7f0000000900)='syz0\x00', 0x1ff)
mkdirat$cgroup(r0, &(0x7f0000000940)='syz1\x00', 0x1ff) (async, rerun: 64)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000009c0)={@host}) (async)
r4 = signalfd(r3, &(0x7f0000000a00)={[0x3]}, 0x8)
ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000a40))
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001300)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000000ac0)={0x7e0, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xa, 0x8, 0x4, 0xbe9}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x50, 0xfa, "3d4952b4b9da9e6a9c76378e5b9c64c3d370dfa42cac3fa4bb7ac3d25f9a018b6e5b77d71b18317fe8269ce4261ed16f3073b6edf8006799b48f6223a495c00951d1d614a4f8778ee3e06c52"}, @NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, 'T'}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x9d, 0xfc, "c5319ddd1e3c08ce7faa5657605ff7e17e06788e1abb221ac7ce8705a2df7ebe82aece1d26f5b497dcfbcee6c2ede0995d3607add614b50ab62f9689855696d613413ee7042a32220fa57b04f44c8d72daaee32383d7d9b9595f689fbd59ac25682e163a31a1c93b7abe418d91d8d29e4f1bf2f9ac8eed68db33186a7f02205c59788d081fc25f53c9ba8b98e4c82fb0abfc72665e82a7947f"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xe2, 0xfa, "b779491111e968cb91d0c5c869805488235baee2e6abb4b70de8c4be956c7d16f026f334c13e8bdfddb9e6690eb7f978cc422792751a194c271d2edf16aaf47255524e1181cfa0ba230208f47bb6b282a0b4c1b6988afdbe9f67978e1ddfdf44c01d5c79497f771687ce5002cf33a6db14750e56d748207071f47c12a40d1a69450dd56ad0b57a06af2ec7e0be74eb7618e2a3d1e08a7c68869ec2308510f1569e7f82dc29ea6b30717318ac1ebad48251750b1223a47cab21f0b81b2b770a3b75e2fe0f11bcd7e7413d7859904aedfecfb821dd51ebd586a08d31a080bc"}, @NL80211_ATTR_FILS_ERP_RRK={0xb7, 0xfc, "1cc6464193c6a847e0040f21bd31bc3b68778ddb966ca59bde7baf92bfda0e152d81c2c5bc06cb09b3106a35299595dc3a43dcce122f699bf7c006e0ca76cb6770792b3351ca10a3a9ace04ad11ef1e398213de345beece9a5e02371d3f2802126b17781efd8771c8ba7e03d0bd89bc43fd865db0e03f4842a553428e86800fe00eb3eb7983ed13305556e3ae124e030ea2923a4c3c6720c7c9306057615007cb24e1f3b89a373653840f24188167c05dd87a3"}, @NL80211_ATTR_FILS_ERP_RRK={0x73, 0xfc, "20988f0bd8ecf5a3b69e2060fe2ca610f163e7ddb9dbd3de7eea67c1a0a5f365b78006202f94481af1242602795118130df610b403fdb9312b84a56e46e057d74fcd9bcdedde1691e8c8d054874f1e801a1a36a8a8d15d69267c76d71c4bfedeb6175160a536e66d8a8732569a61f2"}], @NL80211_ATTR_IE={0x252, 0x2a, [@random_vendor={0xdd, 0x51, "e6db222d5bc325b6d879994c63c637a576bd9a0f9fc0416d951021d2c3235a54d8555e4cbb4913c4050558d7d93eb442ecebf76fdda2b419558c20e4395002c8ba309dd63b82e276dd8598b654eaadada7"}, @random={0x6, 0xcc, "dd5884964be7aab4a24c9f5dfd67a0826b5e61d558a26f7608015da93080c3760bd2489ea87596cb9a4759b783890f2db34793d728fdd47e42c676100b423222a33843cd8f847fa0743e87f88c4a86f03623053a3324525695713511a374270c93947b2e866b903a61951b7f8bf5252d763b1e896dcd6fac3233d336269eccc3c6e57d71bfbfa00e504e6e17b7d42e7270b8b62a85fb47d456eee9f0c969b9b23969c76cb7598bea35a8220fb68c69338dca3f73f26fa2c6ce1c5fa5b5546fa3d749516e4117237afc5e2840"}, @perr={0x84, 0xc1, {0x4, 0xb, [{{0x0, 0x1}, @device_b, 0xffff8001, @value=@device_b, 0x2e}, {{0x0, 0x1}, @device_b, 0x101, @value, 0x18}, {{}, @device_a, 0x2, @void, 0xe}, {{}, @broadcast, 0x2d1, @void, 0xd}, {{0x0, 0x1}, @device_a, 0xa, @value, 0x3b}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x20}, {{0x0, 0x1}, @device_a, 0x7f, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_b, 0xffffffff, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_b, 0xd7b3, @value, 0x32}, {{}, @broadcast, 0x5249fa72, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x30}]}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0x8}}, @ssid={0x0, 0x1d, @random="2d239a266b3c633ffd8ca33c3fa4373084d3ffeb4a51e5775fc05b18a3"}, @random_vendor={0xdd, 0x39, "df659c11f10570f3e2e02f248768c07b8330b3011d1cc506a2d285265c2e59d83e645fadac4867c7fa0e6d7a5f13f483d69bae248556e757dd"}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0xe2, 0x7, 0x6, 0x101}}]}, @NL80211_ATTR_IE={0xab, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xf8, 0x8, @device_b, 0x1, @value=@broadcast, 0x3ff, 0x3, @device_a, 0x400000}}, @preq={0x82, 0x67, {{0x1}, 0x0, 0x5, 0x3, @device_b, 0xd, @void, 0xfb6, 0x2, 0x7, [{{}, @broadcast, 0xcbb}, {{}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0xbe4}, {{}, @broadcast, 0xfffffff8}, {{}, @device_b, 0x1}, {{0x1}, @device_a, 0xfffffbff}]}}, @rann={0x7e, 0x15, {{0x0, 0x68}, 0x7, 0xd, @broadcast, 0x4, 0x5, 0x4}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "e32d75133903be67925013084550c609d9a62bfe65b66e442ecdd38430581c9457e6a3141e8f1f20a88c4b2c0522a86c20d44de248d0dfa5924c86eea438a1953f89c87df2c4236820185051de17a077cb49e45ca87f3272e26e9e23e7a200de8c764b05ee3ddb6add5da45bf8f90fd56b8438e315fe45f3c303c7b467dc1847520c394dc078b0335881f583977ebb9b719f646610eefc598760aff006a4da25209d2ea2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "0f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1ff}, @NL80211_ATTR_FILS_ERP_REALM={0xf4, 0xfa, "d41a8ac6fdfbe64e733147a7f264b67f9e7e98539cebd019a01da3fe4462a1706fdf4c4f8a5f74de8beefc52270c929be8f2c42556836ded6ceb39c7c29766fea0a4c81c966b0bbc5a4423b5b092e7ccc24dcce447b5b29b70685c96a5f6b0c0b48db78d04e713a65e78aaf21bc97bf80a863f7372af15d0468a82c9733d427f61b5836c30cded26875f8be7a06ffc29b7d09a9f416b76d0480bd9eff0a870fc74a3ba53c1b7006c7dbc8a0ebbf1e9cf2a0c37c87642ed0bd4112a06e0216faf536473d0a2808f8b6f029fcecd575a400c69454028e82038a868caa2765dd5ed523a3bd38f6389c469e66894bd51f789"}]]}, 0x7e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async, rerun: 32)
write$UHID_CREATE2(r0, &(0x7f0000001340)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0xfffd, 0x1, 0x401, 0x5, 0xf, "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"}}, 0x1118) (async, rerun: 32)
close_range(r4, r0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0)
read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0x2020) (async)
openat$cgroup_procs(r0, &(0x7f0000004500)='tasks\x00', 0x2, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000004640)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2692, 0x59}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x40804)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x24, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r6 = open_tree(r0, &(0x7f0000004780)='./file0\x00', 0x1)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x4008002}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x28, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @val={0xc, 0x99, {0x100, 0x4d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x11)
syz_clone(0x40000, &(0x7f00000048c0)="08bde2ae5d8069d96e6fae8c1c1019a3f85d46d7b2bf853c375e46c46def413cefc0a11a84e92343273fb3375492b29162b4a5e26e75bf9274fb2a37f533f7b5fbd7f53f6cd16670e6cbd723128995f9cb331a9e181c89fa8fed2cdcbc2d28b1183b6fb36661e10927d297414ed4b2ce7f5af9e2ff1e61f1ad51f5978cc846b20c057f916a7caef722f4269720b3c06224ea9c4f2e6c48ac8d8059c47d20f2d98a06c0a995f03fcca71ae507f840632f74", 0xb1, &(0x7f0000004980), &(0x7f00000049c0), &(0x7f0000004a00)="8ac8231804e55c48cb0db661738cf73f6527d0ffd23fabb05f007cd3c8d25332e0721b4507788fcf332d81311abeabff87742b8912faaff41960553d56077db0654320397130360b8e2b0f4030901d321330775bdad23ff85277afbd10177c30bf4b4c30e38bdcd039c539d52d2764e6ec6126f510bd64072fa61a06dce789a7446fdd425bd4e3cb1d3f8bfa0eefc2641b6e3f684f8ee77fcc1dec35363eaddb3aba7aed0c917bd7f1e1e7d8e805565b842d0e823752e9732b912747f7e3bf3cfcd47aba6b84361fed235517158e49761165ff02") (async, rerun: 32)
fadvise64(r4, 0xffffffffffffffff, 0x3c2, 0x1) (async, rerun: 32)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000004b00)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000004bc0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000004c80)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async)
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000006080)={&(0x7f0000004cc0), 0xc, &(0x7f0000006040)={&(0x7f0000004d40)={0x12e0, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random={0xd8, 0xfa, "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"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfd1a}, @NL80211_ATTR_IE={0x11, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0xc4}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x851}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_IE={0x117d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb9, 0x40}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0x1003, {0x8, 0x2, 0x9, "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"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x64, 0x9, @device_b, 0x1, @value=@broadcast, 0xb5, 0x3, @broadcast, 0x7}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x3, 0x0, {0x1, 0x8, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x31, 0x3d}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x3, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x4, 0xd5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0xf4, "1d5e5ace8530416bb065da51cd715519eae4ec10a530806bdc9294889561f5858435eb2269f19a415e61b5056799d5c45764dd964b8b5c1bf1016afa617f3ea8a0d39f5a8715ba69dc2b8f273825e7759d23a446e12492f824e3211ed570c21a1acfb794baef8b6535113fabc857388acbe6010bccfdaa481735db98abcbc2eb26463bf606be56954961eed6cde71211767867c4c52c30d20e22e0e6cd1a6e5b90b9f257875eb202145622bf4d35de9aae346b7ee6f3fbcb6f71b12f2f1e3663b87eeefa49a5a798ecfa10e89041b74da346eb375e493c4aa071188e16e4358136e0caacc0d5571789b93b52d94dcb73d75b935b"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ad9f3e80d87d"}, @NL80211_ATTR_MAC={0xa}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010)

181.452852ms ago: executing program 1 (id=552):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x0, @empty}}}, 0x108)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0xbe244759ad1237bc, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f00000002c0)={0xdb, 0x0, 0x2})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r5 = epoll_create1(0x0)
epoll_wait(r5, &(0x7f0000000840), 0x0, 0x7)
write$cgroup_pid(r2, 0x0, 0x1)
fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10)
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}})
socket(0x1d, 0x4, 0x2)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x2804cdc, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r8 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r10=>0x0})
r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x280300, 0x0)
sendto$packet(r11, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0x12, 0x44, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

105.300079ms ago: executing program 2 (id=553):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x100a, 0x0, 0x13}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/182, 0xb6, 0x1, 0x3b}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

104.37856ms ago: executing program 3 (id=554):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

104.22381ms ago: executing program 2 (id=555):
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
setresuid(r0, r0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1b)
ioctl$TCSETA(r1, 0x5406, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x8, 0x3)
prlimit64(r2, 0xe, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)

91.634741ms ago: executing program 3 (id=556):
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x381000, &(0x7f0000000380)=ANY=[])
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r5, 0x4, 0x42000)
read$FUSE(r5, &(0x7f0000001400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x7, 0x1408800, 0x9, 0x9, 0x81, 0xe3, 0x0, 0x0, 0x10, 0x2ea8}}, 0x50)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4464c2)
r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r9=>0x0, <r10=>0x0})
ppoll(&(0x7f0000000140)=[{r0, 0x462}, {r1, 0x1100}, {r2, 0x283}, {r3, 0x20}, {r4, 0xd6e0}, {0xffffffffffffffff, 0x4716}, {r7, 0x208}, {r8, 0x2}], 0x8, &(0x7f0000000200)={r9, r10+10000000}, &(0x7f0000000240)={[0x5]}, 0x8)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
listen(r11, 0x5)

91.023221ms ago: executing program 2 (id=557):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
unshare(0x24020400)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) (async)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2) (async, rerun: 64)
cachestat(r1, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x1, 0xa4, &(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRES8=r4, @ANYBLOB="06"], 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (async)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1)

73.998572ms ago: executing program 3 (id=558):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
setuid(r2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140001800e0001006574683a7801726d30df43b5"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r8, 0x0, 0x1)
sendfile(r7, r6, 0x0, 0xffffffff)
mknodat$null(r7, &(0x7f0000000000)='./file0\x00', 0x800, 0x103)

5.026759ms ago: executing program 3 (id=559):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = syz_io_uring_setup(0x64a1, &(0x7f0000000040)={0x0, 0x3cae, 0x2000, 0x6, 0x1da}, &(0x7f00000000c0), &(0x7f0000000100))
r2 = mmap$IORING_OFF_SQES(&(0x7f000059b000/0x1000)=nil, 0x1000, 0x4, 0x10010, r1, 0x10000000)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000221000/0x2000)=nil, 0x2000})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75040006003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0xa)
fchdir(r7)
sendmmsg$unix(r6, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r8, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000302000000020395be0a32f319a8dcf3730008000000000000"], 0x0, 0x0}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
timer_settime(r9, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240))
r10 = gettid()
ptrace(0x10, r10)

0s ago: executing program 4 (id=441):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0xffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts.
[   23.254918][   T36] audit: type=1400 audit(1760395340.020:64): avc:  denied  { mounton } for  pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.256420][  T283] cgroup: Unknown subsys name 'net'
[   23.277952][   T36] audit: type=1400 audit(1760395340.020:65): avc:  denied  { mount } for  pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.305493][   T36] audit: type=1400 audit(1760395340.050:66): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.305695][  T283] cgroup: Unknown subsys name 'devices'
[   23.509431][  T283] cgroup: Unknown subsys name 'hugetlb'
[   23.515090][  T283] cgroup: Unknown subsys name 'rlimit'
[   23.610336][   T36] audit: type=1400 audit(1760395340.380:67): avc:  denied  { setattr } for  pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.634367][   T36] audit: type=1400 audit(1760395340.380:68): avc:  denied  { mounton } for  pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.659535][   T36] audit: type=1400 audit(1760395340.380:69): avc:  denied  { mount } for  pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.663094][  T285] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   23.692258][   T36] audit: type=1400 audit(1760395340.460:70): avc:  denied  { relabelto } for  pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.718390][   T36] audit: type=1400 audit(1760395340.460:71): avc:  denied  { write } for  pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.719839][  T283] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.744456][   T36] audit: type=1400 audit(1760395340.490:72): avc:  denied  { read } for  pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.778924][   T36] audit: type=1400 audit(1760395340.490:73): avc:  denied  { open } for  pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.000356][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.008411][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.016499][  T292] bridge_slave_0: entered allmulticast mode
[   25.023562][  T292] bridge_slave_0: entered promiscuous mode
[   25.036242][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.044589][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.052303][  T292] bridge_slave_1: entered allmulticast mode
[   25.059160][  T292] bridge_slave_1: entered promiscuous mode
[   25.083235][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.090742][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.097954][  T291] bridge_slave_0: entered allmulticast mode
[   25.104691][  T291] bridge_slave_0: entered promiscuous mode
[   25.119648][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.127006][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.134454][  T291] bridge_slave_1: entered allmulticast mode
[   25.141308][  T291] bridge_slave_1: entered promiscuous mode
[   25.147853][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.155185][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.162513][  T290] bridge_slave_0: entered allmulticast mode
[   25.169008][  T290] bridge_slave_0: entered promiscuous mode
[   25.183939][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.191151][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.198306][  T290] bridge_slave_1: entered allmulticast mode
[   25.204600][  T290] bridge_slave_1: entered promiscuous mode
[   25.241069][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.248837][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.256333][  T293] bridge_slave_0: entered allmulticast mode
[   25.263194][  T293] bridge_slave_0: entered promiscuous mode
[   25.284535][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.292425][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.300230][  T293] bridge_slave_1: entered allmulticast mode
[   25.306758][  T293] bridge_slave_1: entered promiscuous mode
[   25.469591][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.476922][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.484246][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.491483][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.502802][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.510339][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.517958][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.526086][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.540283][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.547964][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.555811][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.563384][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.576039][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.583595][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.591045][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.598119][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.642906][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.651186][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.658680][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.666028][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.673495][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.681296][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.688777][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.696210][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.719487][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.726745][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.738878][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.746121][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.756873][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.764355][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.774720][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.782122][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.791272][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.798475][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.810234][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.817411][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.832297][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.839600][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.853520][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.861234][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.909105][  T292] veth0_vlan: entered promiscuous mode
[   25.925031][  T290] veth0_vlan: entered promiscuous mode
[   25.946691][  T292] veth1_macvtap: entered promiscuous mode
[   25.962409][  T291] veth0_vlan: entered promiscuous mode
[   25.971381][  T293] veth0_vlan: entered promiscuous mode
[   25.979427][  T290] veth1_macvtap: entered promiscuous mode
[   26.001232][  T291] veth1_macvtap: entered promiscuous mode
[   26.023181][  T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   26.041024][  T293] veth1_macvtap: entered promiscuous mode
[   26.123799][  T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   26.123882][  T340] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   26.132640][  T342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.134382][  T340] rust_binder: Read failure Err(EFAULT) in pid:2
[   26.161017][  T344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'.
[   26.207347][  T346] SELinux: security_context_str_to_sid () failed with errno=-22
[   26.242617][  T350] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.265627][  T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   26.265665][  T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:6
[   26.313584][  T355] netlink: 'syz.2.10': attribute type 4 has an invalid length.
[   26.332024][  T355] netlink: 'syz.2.10': attribute type 6 has an invalid length.
[   26.339974][  T355] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.10'.
[   26.347017][   T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.357163][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.388615][  T362] fuse: Bad value for 'fd'
[   26.488725][  T368] kvm: kvm [367]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xd00000000000
[   26.500440][  T368] kvm: kvm [367]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xd00000000000
[   26.506779][   T65] usb 4-1: Using ep0 maxpacket: 16
[   26.510363][  T368] kvm: kvm [367]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xd00000000000
[   26.517493][   T65] usb 4-1: unable to get BOS descriptor or descriptor too short
[   26.534519][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.534534][   T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   26.555850][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   26.562019][  T358] rust_binder: Read failure Err(EFAULT) in pid:8
[   26.565382][   T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   26.567051][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   26.575696][   T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   26.599011][   T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.607183][   T10] usb 1-1: Manufacturer: syz
[   26.621812][   T65] usb 4-1: Product: syz
[   26.626135][   T65] usb 4-1: Manufacturer: syz
[   26.626479][   T10] usb 1-1: config 0 descriptor??
[   26.635883][   T65] usb 4-1: SerialNumber: syz
[   26.638717][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   26.853508][  T335] rust_binder: Error while translating object.
[   26.853547][  T335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   26.862083][  T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2
[   26.940411][   T65] usb 4-1: cannot find UAC_HEADER
[   26.954876][   T10] usb 1-1: USB disconnect, device number 2
[   26.968441][   T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   26.979586][  T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   26.979925][   T65] usb 4-1: USB disconnect, device number 2
[   27.036823][   T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.186748][   T46] usb 3-1: Using ep0 maxpacket: 32
[   27.192517][   T46] usb 3-1: too many configurations: 15, using maximum allowed: 8
[   27.202605][   T46] usb 3-1: unable to read config index 0 descriptor/start: -61
[   27.210314][   T46] usb 3-1: can't read configurations, error -61
[   27.346810][   T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   27.496730][   T46] usb 3-1: Using ep0 maxpacket: 32
[   27.502551][   T46] usb 3-1: too many configurations: 15, using maximum allowed: 8
[   27.512978][   T46] usb 3-1: unable to read config index 0 descriptor/start: -61
[   27.521609][   T46] usb 3-1: can't read configurations, error -61
[   27.530119][   T46] usb usb3-port1: attempt power cycle
[   27.736737][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   27.876957][   T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   27.886932][   T10] usb 4-1: Using ep0 maxpacket: 16
[   27.893175][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.904371][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   27.907190][   T46] usb 3-1: Using ep0 maxpacket: 32
[   27.919685][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   27.923735][   T46] usb 3-1: too many configurations: 15, using maximum allowed: 8
[   27.931753][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.942518][   T46] usb 3-1: unable to read config index 0 descriptor/start: -61
[   27.948558][   T10] usb 4-1: config 0 descriptor??
[   27.965211][   T46] usb 3-1: can't read configurations, error -61
[   28.016731][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.055514][  T421] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   28.067605][  T421] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   28.076172][  T421] rust_binder: Write failure EFAULT in pid:31
[   28.076457][  T421] tmpfs: Unknown parameter 'quota'
[   28.098111][   T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   28.127316][   T46] usb 3-1: Using ep0 maxpacket: 32
[   28.133603][   T46] usb 3-1: too many configurations: 15, using maximum allowed: 8
[   28.143368][   T46] usb 3-1: unable to read config index 0 descriptor/start: -61
[   28.151684][   T46] usb 3-1: can't read configurations, error -61
[   28.158819][   T46] usb usb3-port1: unable to enumerate USB device
[   28.176700][    T9] usb 2-1: Using ep0 maxpacket: 16
[   28.183339][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.193752][    T9] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64
[   28.203778][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[   28.212205][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   28.221782][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.230071][    T9] usb 2-1: Product: syz
[   28.234575][    T9] usb 2-1: Manufacturer: syz
[   28.239610][    T9] usb 2-1: SerialNumber: syz
[   28.245527][  T397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   28.257831][  T425] exFAT-fs (rnullb0): invalid boot record signature
[   28.264683][  T425] exFAT-fs (rnullb0): failed to read boot sector
[   28.271585][  T425] exFAT-fs (rnullb0): failed to recognize exfat type
[   28.292366][   T36] kauditd_printk_skb: 102 callbacks suppressed
[   28.292404][   T36] audit: type=1400 audit(1760395345.060:176): avc:  denied  { create } for  pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   28.319389][   T36] audit: type=1400 audit(1760395345.060:177): avc:  denied  { ioctl } for  pid=427 comm="syz.0.30" path="socket:[4317]" dev="sockfs" ino=4317 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   28.344853][   T36] audit: type=1400 audit(1760395345.060:178): avc:  denied  { read } for  pid=427 comm="syz.0.30" dev="nsfs" ino=4026532308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.367466][   T36] audit: type=1400 audit(1760395345.060:179): avc:  denied  { open } for  pid=427 comm="syz.0.30" path="net:[4026532308]" dev="nsfs" ino=4026532308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.386388][  T433] random: crng reseeded on system resumption
[   28.390971][   T36] audit: type=1400 audit(1760395345.060:180): avc:  denied  { bind } for  pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.416878][   T36] audit: type=1400 audit(1760395345.060:181): avc:  denied  { setopt } for  pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   28.436569][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   28.438325][   T36] audit: type=1400 audit(1760395345.060:182): avc:  denied  { create } for  pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   28.442966][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   28.462967][   T36] audit: type=1400 audit(1760395345.060:183): avc:  denied  { read } for  pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   28.475285][   T10] usb 4-1: USB disconnect, device number 3
[   28.493377][   T36] audit: type=1400 audit(1760395345.140:184): avc:  denied  { write } for  pid=432 comm="syz.0.32" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   28.519052][   T36] audit: type=1400 audit(1760395345.140:185): avc:  denied  { open } for  pid=432 comm="syz.0.32" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   28.679141][    T9] usb 2-1: bad CDC descriptors
[   28.687146][    T9] usb 2-1: USB disconnect, device number 2
[   28.711060][  T436] rust_binder: Write failure EFAULT in pid:46
[   28.814882][  T449] __vm_enough_memory: pid: 449, comm: syz.0.37, bytes: 18014402804453376 not enough memory for the allocation
[   28.849659][  T451] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   28.857264][  T451] rust_binder: Write failure EINVAL in pid:61
[   28.857950][  T451] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   28.872070][  T451] rust_binder: Write failure EINVAL in pid:61
[   28.944762][  T463] fuse: Unknown parameter '/��:��.����Ovd'
[   28.957335][  T463] fuse: Unknown parameter '/��:��.����Ovd'
[   28.963699][  T463] fuse: Unknown parameter '/��:��.����Ovd'
[   28.971903][  T462] raw_sendmsg: syz.0.41 forgot to set AF_INET. Fix it!
[   28.979159][  T463] fuse: Unknown parameter '/��:��.����Ovd'
[   29.003851][  T455] netlink: 'syz.3.39': attribute type 4 has an invalid length.
[   29.011626][  T455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'.
[   29.056057][  T469] 9pnet_fd: Insufficient options for proto=fd
[   29.091254][  T476] __vm_enough_memory: pid: 476, comm: syz.3.45, bytes: 18014402804453376 not enough memory for the allocation
[   29.130031][  T482] binder: Bad value for 'max'
[   29.165713][  T489] rust_binder: Error while translating object.
[   29.165747][  T489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.172110][  T489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27
[   29.200064][  T491] netlink: 'syz.3.50': attribute type 1 has an invalid length.
[   29.219757][  T491] rust_binder: Error while translating object.
[   29.219795][  T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   29.226021][  T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:29
[   29.282170][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.291332][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.297831][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.304511][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.311533][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.318115][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.325151][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.332130][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.338913][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.339019][  T499] rust_binder: Error while translating object.
[   29.345394][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.345414][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.345430][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.345445][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.353252][  T499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   29.359120][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.359145][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.359160][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.359175][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.359189][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.359248][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.367010][  T499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25
[   29.372390][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.443978][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.450850][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.457729][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.464360][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.471611][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.478476][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.485427][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.491978][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.498495][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.505122][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.511702][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.518244][  T500] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.536396][  T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28
[   29.543219][  T508] rust_binder: 36: no such ref 1
[   29.578908][  T514] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[   29.578953][  T514] rust_binder: Error while translating object.
[   29.588181][  T514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.594486][  T514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[   29.618731][  T516] netlink: 'syz.1.59': attribute type 1 has an invalid length.
[   29.636121][  T516] netlink: 'syz.1.59': attribute type 2 has an invalid length.
[   29.896899][   T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   29.983669][  T539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=539 comm=syz.2.66
[   30.031039][  T550] binder: Bad value for 'defcontext'
[   30.056719][   T31] usb 2-1: Using ep0 maxpacket: 32
[   30.063167][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   30.077110][   T31] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   30.079579][  T555] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET)
[   30.086470][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.100623][   T31] usb 2-1: Product: syz
[   30.104919][   T31] usb 2-1: Manufacturer: syz
[   30.111398][   T31] usb 2-1: SerialNumber: syz
[   30.117119][   T31] usb 2-1: config 0 descriptor??
[   30.122998][   T31] usb 2-1: bad CDC descriptors
[   30.128145][   T31] usb 2-1: unsupported MDLM descriptors
[   30.266762][   T46] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   30.323245][  T518] rust_binder: Error while translating object.
[   30.323293][  T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.332224][  T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38
[   30.342615][   T10] usb 2-1: USB disconnect, device number 3
[   30.386739][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   30.417872][   T46] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[   30.427146][   T46] usb 3-1: config 8 has no interface number 0
[   30.433734][   T46] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   30.444948][   T46] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[   30.457957][   T46] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[   30.467309][   T46] usb 3-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3
[   30.475437][   T46] usb 3-1: Product: syz
[   30.480258][   T46] usb 3-1: Manufacturer: syz
[   30.484893][   T46] usb 3-1: SerialNumber: syz
[   30.537915][   T31] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11
[   30.549286][   T31] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   30.562674][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   30.572608][   T31] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40
[   30.581750][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.589843][   T31] usb 1-1: Product: syz
[   30.594078][   T31] usb 1-1: SerialNumber: syz
[   30.692921][  T551] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   30.700112][  T551] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   30.710715][   T46] usb 3-1: USB disconnect, device number 6
[   30.806931][   T31] usbhid 1-1:1.0: can't add hid device: -71
[   30.813191][   T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   30.822604][   T31] usb 1-1: USB disconnect, device number 3
[   31.141835][  T588] rust_binder: Error while translating object.
[   31.141869][  T588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.148269][  T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59
[   31.174854][  T590] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 249)
[   31.184248][  T590] rust_binder: Error while translating object.
[   31.195034][  T590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.201710][  T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[   31.248771][  T597] =======================================================
[   31.248771][  T597] WARNING: The mand mount option has been deprecated and
[   31.248771][  T597]          and is ignored by this kernel. Remove the mand
[   31.248771][  T597]          option from the mount to silence this warning.
[   31.248771][  T597] =======================================================
[   31.300737][  T597] SELinux: security_context_str_to_sid (sytem_u�Gй�:�ߙ�yTQY�>��Ԇ1�$��XEgΑ��h�nֱ͕;(U�ar9Q��1*�w�*�ɮ�׷�0���ۨ<9��
[   31.300737][  T597] �H�� �)'�ø�`��n�Zs�讜�G�YҀd�+[���a�fC8����JO�u���VME�	9�*39��
�Y�[.��'��(�Jzn��K��H@) failed with errno=-22
[   31.395472][  T607] rust_binder: Error while translating object.
[   31.395523][  T607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.405851][  T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59
[   31.656801][   T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   31.687210][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   31.796743][   T31] usb 4-1: device descriptor read/64, error -71
[   31.837635][  T631] rust_binder: Write failure EFAULT in pid:74
[   31.838885][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   31.854020][    T9] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config
[   31.864504][    T9] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   31.877970][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[   31.886700][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.896055][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.904215][    T9] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳
[   31.926520][    T9] usb 3-1: SerialNumber: syz
[   31.977539][  T633] /dev/rnullb0: Can't open blockdev
[   32.056788][   T31] usb 4-1: device descriptor read/64, error -71
[   32.136194][  T618] rust_binder: Error while translating object.
[   32.136249][  T618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.149633][  T618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[   32.160688][  T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.183153][  T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.203203][    T9] cdc_ether 3-1:1.0: skipping garbage
[   32.214114][    T9] cdc_ether 3-1:1.0: skipping garbage
[   32.219875][    T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   32.235503][    T9] usb 3-1: USB disconnect, device number 7
[   32.294717][  T664] incfs: Options parsing error. -22
[   32.303886][  T664] incfs: mount failed -22
[   32.310279][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   32.466700][   T31] usb 4-1: device descriptor read/64, error -71
[   32.517175][  T678] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.636723][   T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   32.726766][   T31] usb 4-1: device descriptor read/64, error -71
[   32.756720][    T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   32.776815][   T10] usb 1-1: device descriptor read/64, error -71
[   32.836856][   T31] usb usb4-port1: attempt power cycle
[   32.907475][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   32.916298][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   32.925417][    T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   32.935584][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.946627][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   32.955948][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.964391][    T9] usb 3-1: Product: syz
[   32.968638][    T9] usb 3-1: Manufacturer: syz
[   32.974045][    T9] usb 3-1: SerialNumber: syz
[   33.026741][   T10] usb 1-1: device descriptor read/64, error -71
[   33.177151][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   33.187026][  T677] rust_binder: Error in use_page_slow: ESRCH
[   33.187051][  T677] rust_binder: use_range failure ESRCH
[   33.193074][  T677] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   33.199475][  T677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   33.208352][  T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:80
[   33.218523][   T31] usb 4-1: device descriptor read/8, error -71
[   33.234865][    T9] usb 3-1: 0:2 : does not exist
[   33.245242][    T9] usb 3-1: USB disconnect, device number 8
[   33.286732][   T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   33.416773][   T10] usb 1-1: device descriptor read/64, error -71
[   33.666907][   T10] usb 1-1: device descriptor read/64, error -71
[   33.779660][   T10] usb usb1-port1: attempt power cycle
[   33.794656][   T36] kauditd_printk_skb: 48 callbacks suppressed
[   33.794674][   T36] audit: type=1400 audit(1760395350.560:234): avc:  denied  { read write } for  pid=699 comm="syz.2.118" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.848748][  T702] IPv6: NLM_F_CREATE should be specified when creating new route
[   33.863142][   T36] audit: type=1400 audit(1760395350.560:235): avc:  denied  { open } for  pid=699 comm="syz.2.118" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.907035][   T36] audit: type=1400 audit(1760395350.590:236): avc:  denied  { nlmsg_read } for  pid=699 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   33.928067][   T36] audit: type=1400 audit(1760395350.610:237): avc:  denied  { read write } for  pid=701 comm="syz.2.119" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.951507][   T36] audit: type=1400 audit(1760395350.610:238): avc:  denied  { open } for  pid=701 comm="syz.2.119" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.975595][  T704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.975625][  T704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86
[   33.985807][   T36] audit: type=1400 audit(1760395350.610:239): avc:  denied  { ioctl } for  pid=701 comm="syz.2.119" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   34.020363][   T36] audit: type=1400 audit(1760395350.670:240): avc:  denied  { connect } for  pid=701 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.040236][   T36] audit: type=1400 audit(1760395350.680:241): avc:  denied  { write } for  pid=701 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.059982][   T36] audit: type=1400 audit(1760395350.740:242): avc:  denied  { setopt } for  pid=701 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.097800][   T31] usb 4-1: device descriptor read/8, error -71
[   34.111574][  T708] netlink: 168 bytes leftover after parsing attributes in process `syz.1.121'.
[   34.166753][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   34.187697][   T10] usb 1-1: device descriptor read/8, error -71
[   34.327880][   T10] usb 1-1: device descriptor read/8, error -71
[   34.346742][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   34.367896][   T31] usb 4-1: device descriptor read/8, error -71
[   34.433629][   T36] audit: type=1400 audit(1760395351.200:243): avc:  denied  { unmount } for  pid=717 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   34.453434][   T65] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   34.469279][  T723] sit0: entered promiscuous mode
[   34.475779][  T723] netlink: 'syz.3.125': attribute type 1 has an invalid length.
[   34.483538][  T723] netlink: 1 bytes leftover after parsing attributes in process `syz.3.125'.
[   34.494641][  T723] netlink: 'syz.3.125': attribute type 4 has an invalid length.
[   34.503617][  T723] netlink: 17 bytes leftover after parsing attributes in process `syz.3.125'.
[   34.513030][   T31] usb 4-1: device descriptor read/8, error -71
[   34.586787][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   34.607917][   T10] usb 1-1: device descriptor read/8, error -71
[   34.617909][   T65] usb 2-1: config 1 interface 0 altsetting 220 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   34.631933][   T65] usb 2-1: config 1 interface 0 has no altsetting 0
[   34.639153][   T31] usb usb4-port1: unable to enumerate USB device
[   34.737929][   T10] usb 1-1: device descriptor read/8, error -71
[   34.845403][  T731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'.
[   34.855127][  T731] binder: Unknown parameter 'st}ts� X'
[   34.856911][   T10] usb usb1-port1: unable to enumerate USB device
[   34.881644][  T733] netlink: 108 bytes leftover after parsing attributes in process `syz.2.129'.
[   35.291896][  T736] can: request_module (can-proto-4) failed.
[   35.298907][  T736] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[   35.486260][  T744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   35.583491][  T757] rust_binder: Error in use_page_slow: ESRCH
[   35.583513][  T757] rust_binder: use_range failure ESRCH
[   35.589813][  T757] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   35.595319][  T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   35.603483][  T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:115
[   35.632813][  T760] mmap: syz.0.139 (760) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.846949][  T765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=765 comm=syz.3.140
[   35.886718][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   36.036833][   T10] usb 1-1: Using ep0 maxpacket: 16
[   36.043857][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.055348][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.065260][  T388] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   36.072830][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   36.086022][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   36.095350][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.104707][   T10] usb 1-1: config 0 descriptor??
[   36.226733][  T388] usb 3-1: device descriptor read/64, error -71
[   36.466742][  T388] usb 3-1: device descriptor read/64, error -71
[   36.519420][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   36.533722][   T10] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   36.552225][   T10] usb 1-1: USB disconnect, device number 8
[   36.605600][  T778] fido_id[778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   36.641004][  T784] rust_binder: 128: no such ref 0
[   36.646323][  T784] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   36.653824][  T784] rust_binder: inc_ref_done called when no active inc_refs
[   36.653849][  T784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128
[   36.706711][  T388] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   36.722489][  T790] netlink: 3 bytes leftover after parsing attributes in process `syz.0.149'.
[   36.738908][  T790] netlink: 3 bytes leftover after parsing attributes in process `syz.0.149'.
[   36.747849][  T790] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   36.790486][  T798] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   36.799872][  T801] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   36.841577][  T805] process 'syz.0.155' launched './file0' with NULL argv: empty string added
[   36.866749][  T388] usb 3-1: device descriptor read/64, error -71
[   36.971949][  T825] netlink: 9 bytes leftover after parsing attributes in process `syz.0.159'.
[   36.981371][  T825] gretap0: entered promiscuous mode
[   36.988693][  T825] netlink: 5 bytes leftover after parsing attributes in process `syz.0.159'.
[   36.997816][  T825] 0��{X��: renamed from gretap0
[   37.003712][  T825] 0��{X��: left promiscuous mode
[   37.008849][  T825] 0��{X��: entered allmulticast mode
[   37.015272][  T825] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   37.032152][  T825] rust_binder: 153: no such ref 65537
[   37.116894][  T388] usb 3-1: device descriptor read/64, error -71
[   37.140184][   T65] usb 2-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40
[   37.149786][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.158891][  T827] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[   37.158914][  T827] rust_binder: Error while translating object.
[   37.159632][   T65] usb 2-1: Product: 崱搠ꪓ琫鸤ʑ㾯씲ꏲ풷罣碩쥳䦴쒶഑瀚黛栃ᛢ査畒捌怔చ臢䴿偷⒵硚╓趖掲䟦謓寻䜇驭审챺蔡ဢ㽲ᭉ橷㑽㏙荺볧餽䞦⧁塵ﳭ鑓ᡷᎇ⍮ᖪꡚ㪉墻䰀㨟螠密䂫㨀옆묊戌繆칯惝觙株﷑䄖ቊ
[   37.168193][  T827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.177373][   T65] usb 2-1: can't set config #1, error -71
[   37.217343][  T827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[   37.219735][   T65] usb 2-1: USB disconnect, device number 4
[   37.227393][  T388] usb usb3-port1: attempt power cycle
[   37.260363][  T836] Zero length message leads to an empty skb
[   37.491327][  T848] fuse: Bad value for 'fd'
[   37.571919][  T860] capability: warning: `syz.3.169' uses deprecated v2 capabilities in a way that may be insecure
[   37.587262][  T388] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   37.617905][  T388] usb 3-1: device descriptor read/8, error -71
[   37.748035][  T388] usb 3-1: device descriptor read/8, error -71
[   37.829377][  T888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[   37.986755][  T388] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   38.017930][  T388] usb 3-1: device descriptor read/8, error -71
[   38.096804][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   38.151595][  T388] usb 3-1: device descriptor read/8, error -71
[   38.205531][  T902] netlink: 'syz.3.184': attribute type 4 has an invalid length.
[   38.215580][  T902] netlink: 'syz.3.184': attribute type 4 has an invalid length.
[   38.249455][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.260851][   T10] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[   38.270225][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.278573][  T388] usb usb3-port1: unable to enumerate USB device
[   38.286043][   T10] usb 1-1: config 0 descriptor??
[   38.494235][   T10] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0
[   38.501757][   T10] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0
[   38.508972][   T10] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0
[   38.517481][   T10] zeroplus 0003:0C12:0005.0002: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.0-1/input0
[   38.528912][   T10] zeroplus 0003:0C12:0005.0002: no inputs found
[   38.649000][  T919] rust_binder: Write failure EFAULT in pid:120
[   38.662703][  T921] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=921 comm=syz.2.190
[   38.690228][  T921] overlayfs: failed to resolve './file0': -40
[   38.699495][  T892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.714159][  T892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.724301][   T65] usb 1-1: USB disconnect, device number 9
[   38.771847][  T929] veth1_to_bond: entered allmulticast mode
[   38.870462][  T930] netlink: 44 bytes leftover after parsing attributes in process `syz.3.193'.
[   38.879478][  T930] netlink: 'syz.3.193': attribute type 5 has an invalid length.
[   38.928525][  T928] veth1_to_bond: left allmulticast mode
[   38.969685][  T936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=936 comm=syz.3.196
[   39.006253][  T940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.018741][  T940] netlink: 'syz.3.198': attribute type 27 has an invalid length.
[   39.028892][  T940] sit0: left promiscuous mode
[   39.156165][   T36] kauditd_printk_skb: 35 callbacks suppressed
[   39.156184][   T36] audit: type=1400 audit(1760395355.920:279): avc:  denied  { map } for  pid=939 comm="syz.3.198" path="socket:[6789]" dev="sockfs" ino=6789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   39.185653][   T36] audit: type=1400 audit(1760395355.920:280): avc:  denied  { accept } for  pid=939 comm="syz.3.198" path="socket:[6789]" dev="sockfs" ino=6789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   39.302799][   T36] audit: type=1400 audit(1760395356.070:281): avc:  denied  { watch watch_reads } for  pid=948 comm="syz.2.202" path="/41" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.333629][   T36] audit: type=1400 audit(1760395356.100:282): avc:  denied  { unlink } for  pid=948 comm="syz.2.202" name="#1" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   39.411295][   T36] audit: type=1400 audit(1760395356.180:283): avc:  denied  { create } for  pid=953 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   39.413640][  T954] binder: Unknown parameter 'fscontext?}'
[   39.471750][  T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:186
[   39.491936][   T36] audit: type=1400 audit(1760395356.260:284): avc:  denied  { write } for  pid=960 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   39.726791][  T388] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   39.856728][  T388] usb 1-1: device descriptor read/64, error -71
[   39.900853][  T967] netlink: 'syz.2.210': attribute type 13 has an invalid length.
[   40.096767][  T388] usb 1-1: device descriptor read/64, error -71
[   40.226728][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   40.321630][   T36] audit: type=1400 audit(1760395357.090:285): avc:  denied  { map } for  pid=985 comm="syz.1.216" path="socket:[6069]" dev="sockfs" ino=6069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   40.346815][  T388] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   40.355026][   T36] audit: type=1400 audit(1760395357.090:286): avc:  denied  { accept } for  pid=985 comm="syz.1.216" path="socket:[6069]" dev="sockfs" ino=6069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   40.380866][   T36] audit: type=1400 audit(1760395357.090:287): avc:  denied  { ioctl } for  pid=985 comm="syz.1.216" path="socket:[6939]" dev="sockfs" ino=6939 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   40.406696][    T9] usb 3-1: Using ep0 maxpacket: 16
[   40.413376][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 112, changing to 10
[   40.425659][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 26384, setting to 1024
[   40.437469][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   40.450462][    T9] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   40.459572][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.469172][    T9] usb 3-1: config 0 descriptor??
[   40.478322][  T970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   40.492783][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   40.502436][  T995] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.520047][  T995] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.527403][   T36] audit: type=1400 audit(1760395357.300:288): avc:  denied  { ioctl } for  pid=998 comm="syz.3.223" path="socket:[6098]" dev="sockfs" ino=6098 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   40.528646][  T388] usb 1-1: device descriptor read/64, error -71
[   40.560625][  T995] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.569607][  T995] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.599864][ T1010] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   40.606282][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153
[   40.708627][ T1028] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[   40.816747][  T388] usb 1-1: device descriptor read/64, error -71
[   40.838600][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.845892][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.853349][ T1044] bridge0: entered allmulticast mode
[   40.898772][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.906023][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.913491][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.920685][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.926877][  T388] usb usb1-port1: attempt power cycle
[   40.930438][ T1044] bridge0: entered promiscuous mode
[   41.266746][  T388] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   41.288356][  T388] usb 1-1: device descriptor read/8, error -71
[   41.417863][  T388] usb 1-1: device descriptor read/8, error -71
[   41.543129][ T1049] rust_binder: Error while translating object.
[   41.543166][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   41.549476][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:162
[   41.635012][ T1057] fuse: Bad value for 'fd'
[   41.666744][  T388] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   41.687787][  T388] usb 1-1: device descriptor read/8, error -71
[   41.817803][  T388] usb 1-1: device descriptor read/8, error -71
[   41.926832][  T388] usb usb1-port1: unable to enumerate USB device
[   42.056716][   T65] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   42.207919][   T65] usb 2-1: No LPM exit latency info found, disabling LPM.
[   42.216752][   T65] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   42.225585][   T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.234526][   T65] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   42.936707][  T389] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[   42.954352][   T46] usb 3-1: USB disconnect, device number 13
[   43.127788][  T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   43.140537][  T389] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   43.155446][  T389] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[   43.175134][  T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.187057][  T389] usb 1-1: config 0 descriptor??
[   43.192554][ T1080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   43.201412][  T389] usbhid 1-1:0.0: can't add hid device: -22
[   43.211095][  T389] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[   43.221073][ T1113] __nla_validate_parse: 2 callbacks suppressed
[   43.221092][ T1113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'.
[   43.380098][ T1128] netlink: 252 bytes leftover after parsing attributes in process `syz.2.264'.
[   43.396904][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.405805][  T388] usb 1-1: USB disconnect, device number 14
[   43.412959][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   44.825640][   T65] usb 2-1: string descriptor 0 read error: -71
[   44.833069][   T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   44.842526][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.853491][   T65] usb 2-1: can't set config #1, error -71
[   44.859975][   T65] usb 2-1: USB disconnect, device number 5
[   45.436809][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   45.436822][ T1134] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   58.184602][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   58.184644][   T36] audit: type=1400 audit(1760395374.950:307): avc:  denied  { mount } for  pid=1140 comm="syz.0.268" name="/" dev="ramfs" ino=7291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   58.348846][   T36] audit: type=1400 audit(1760395375.120:308): avc:  denied  { connect } for  pid=1162 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   58.376005][   T36] audit: type=1400 audit(1760395375.120:309): avc:  denied  { getopt } for  pid=1162 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.494535][ T1184] rust_binder: Got transaction with invalid offset.
[   58.494578][ T1184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   58.501344][ T1184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176
[   58.523148][ T1186] rust_binder: Error while translating object.
[   58.532528][ T1186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   58.535617][ T1188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'.
[   58.539317][ T1186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[   58.550304][ T1188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   58.567469][ T1188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:211
[   58.578961][ T1188] rust_binder: 1182 RLIMIT_NICE not set
[   58.581803][ T1190] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.595300][ T1191] rust_binder: Error while translating object.
[   58.613311][ T1193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214
[   58.620157][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   58.634308][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200
[   58.645071][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178
[   58.688475][   T36] audit: type=1400 audit(1760395375.460:310): avc:  denied  { getopt } for  pid=1199 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.745273][   T36] audit: type=1400 audit(1760395375.510:311): avc:  denied  { read } for  pid=1203 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   58.776994][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'.
[   58.781814][ T1213] rust_binder: Error while translating object.
[   58.786010][ T1213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   58.792598][ T1213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:186
[   58.883753][ T1226] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   58.900375][ T1226] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   58.961020][ T1237] rust_binder: Write failure EFAULT in pid:208
[   58.969384][ T1238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.304'.
[   58.986705][   T65] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   59.031214][ T1246] fuse: Bad value for 'user_id'
[   59.046734][ T1246] fuse: Bad value for 'user_id'
[   59.061039][ T1248] sit0: entered promiscuous mode
[   59.074965][ T1248] netlink: 'syz.3.309': attribute type 1 has an invalid length.
[   59.085090][ T1248] netlink: 1 bytes leftover after parsing attributes in process `syz.3.309'.
[   59.102605][ T1255] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   59.129364][ T1259] random: crng reseeded on system resumption
[   59.158966][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.170091][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[   59.197473][   T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.220310][   T65] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[   59.229894][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.256950][   T65] usb 1-1: config 0 descriptor??
[   59.267097][ T1208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   59.275611][   T65] usbhid 1-1:0.0: can't add hid device: -22
[   59.293681][ T1277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.317'.
[   59.294994][   T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[   59.319460][ T1277] rust_binder: Write failure EINVAL in pid:220
[   59.326753][   T36] audit: type=1400 audit(1760395376.090:312): avc:  denied  { create } for  pid=1276 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   59.348553][ T1282] rust_binder: Write failure EINVAL in pid:222
[   59.388150][   T36] audit: type=1400 audit(1760395376.090:313): avc:  denied  { create } for  pid=1276 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   59.458210][   T36] audit: type=1400 audit(1760395376.230:314): avc:  denied  { create } for  pid=1294 comm="syz.1.324" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   59.460492][ T1295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.487167][   T36] audit: type=1400 audit(1760395376.230:315): avc:  denied  { append } for  pid=1294 comm="syz.1.324" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   59.487209][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229
[   59.506794][   T36] audit: type=1400 audit(1760395376.230:316): avc:  denied  { open } for  pid=1294 comm="syz.1.324" path="/80/file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   59.592447][ T1304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'.
[   59.644379][   T65] hid-generic 0006:03D1:0006.0003: unknown main item tag 0x2
[   59.655573][   T65] hid-generic 0006:03D1:0006.0003: item fetching failed at offset 2/184
[   59.664819][   T65] hid-generic 0006:03D1:0006.0003: probe with driver hid-generic failed with error -22
[   59.742143][ T1321] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   59.758227][ T1325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'.
[   59.820221][ T1333] rust_binder: Error while translating object.
[   59.820280][ T1333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   59.835235][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:229
[   60.264551][   T65] usb 1-1: USB disconnect, device number 15
[   60.487757][ T1371] rust_binder: Write failure EINVAL in pid:226
[   61.246709][   T65] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   61.416707][   T65] usb 3-1: Using ep0 maxpacket: 8
[   61.422960][   T65] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[   61.431404][   T65] usb 3-1: config 0 has no interface number 0
[   61.438071][   T65] usb 3-1: config 0 interface 66 has no altsetting 0
[   61.445850][   T65] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87
[   61.461452][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.477353][   T65] usb 3-1: config 0 descriptor??
[   61.856762][  T388] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   62.007939][  T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.021059][  T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.031298][  T388] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   62.042812][  T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.054976][  T388] usb 1-1: config 0 descriptor??
[   62.806733][   T31] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   62.831544][  T388] usbhid 1-1:0.0: can't add hid device: -71
[   62.837831][  T388] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   62.852366][  T388] usb 1-1: USB disconnect, device number 16
[   62.956698][   T31] usb 2-1: Invalid ep0 maxpacket: 16
[   63.106729][   T31] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[   63.256700][   T31] usb 2-1: Invalid ep0 maxpacket: 16
[   63.266516][   T31] usb usb2-port1: attempt power cycle
[   63.375231][ T1434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.375268][ T1434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255
[   63.474480][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   63.474501][   T36] audit: type=1400 audit(1760395380.240:328): avc:  denied  { listen } for  pid=1435 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.646723][   T31] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[   63.677338][   T31] usb 2-1: Invalid ep0 maxpacket: 16
[   63.826695][ T1429] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[   63.834573][   T31] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[   63.857085][   T31] usb 2-1: Invalid ep0 maxpacket: 16
[   63.862831][   T31] usb usb2-port1: unable to enumerate USB device
[   63.956784][   T65] usb 3-1: string descriptor 0 read error: -71
[   63.963462][   T65] usb 3-1: MBOX3: Invalid descriptor size=18.
[   63.975599][   T65] usb 3-1: USB disconnect, device number 14
[   64.007872][ T1429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   64.019722][ T1429] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   64.033112][ T1429] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[   64.042616][ T1429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.054960][ T1429] usb 1-1: config 0 descriptor??
[   64.060649][ T1441] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   64.071570][ T1429] usbhid 1-1:0.0: can't add hid device: -22
[   64.077940][ T1429] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[   64.273399][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.282558][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.298658][   T65] usb 1-1: USB disconnect, device number 17
[   64.321460][ T1449] __vm_enough_memory: pid: 1449, comm: syz.0.367, bytes: 18014402804453376 not enough memory for the allocation
[   64.364039][   T36] audit: type=1400 audit(1760395381.130:329): avc:  denied  { map } for  pid=1450 comm="syz.0.368" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.414242][   T36] audit: type=1400 audit(1760395381.130:330): avc:  denied  { execute } for  pid=1450 comm="syz.0.368" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.506948][ T1466] rust_binder: Read failure Err(EAGAIN) in pid:251
[   64.507147][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.513728][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[   64.629696][ T1472] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   64.639303][ T1472] rust_binder: Error while translating object.
[   64.648347][ T1472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.655676][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256
[   64.686780][   T36] audit: type=1400 audit(1760395381.460:331): avc:  denied  { accept } for  pid=1478 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   64.746879][   T65] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   64.802603][ T1487] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.818338][ T1489] /dev/rnullb0: Can't open blockdev
[   64.867555][ T1491] netlink: 'syz.2.384': attribute type 12 has an invalid length.
[   64.877043][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   64.877080][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:270
[   64.910032][   T36] audit: type=1400 audit(1760395381.680:332): avc:  denied  { connect } for  pid=1492 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.926710][   T65] usb 1-1: Using ep0 maxpacket: 8
[   64.947503][   T36] audit: type=1400 audit(1760395381.680:333): avc:  denied  { read } for  pid=1492 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.968386][   T65] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   64.976922][   T65] usb 1-1: config 179 has no interface number 0
[   64.991043][   T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   65.013451][   T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   65.027947][   T36] audit: type=1326 audit(1760395381.800:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ae6b8eec9 code=0x0
[   65.051245][   T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   65.063979][   T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   65.076057][   T65] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   65.089766][   T65] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   65.099083][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.108948][ T1457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   65.329851][ T1457] __vm_enough_memory: pid: 1457, comm: syz.0.371, bytes: 18014402804453376 not enough memory for the allocation
[   65.343029][  T388] usb 1-1: USB disconnect, device number 18
[   65.343068][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   65.357937][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[   65.625949][ T1519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.626057][ T1517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   65.632748][ T1517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[   65.877107][   T36] audit: type=1400 audit(1760395382.650:335): avc:  denied  { getopt } for  pid=1520 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   65.925538][ T1523] kvm: MWAIT instruction emulated as NOP!
[   66.003065][ T1531] netlink: 'syz.3.397': attribute type 1 has an invalid length.
[   66.013581][   T36] audit: type=1400 audit(1760395382.780:336): avc:  denied  { shutdown } for  pid=1530 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.216720][   T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   66.368006][   T65] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   66.378201][   T65] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   66.388222][   T65] usb 1-1: config 1 interface 0 has no altsetting 0
[   66.397777][   T65] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   66.407864][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.416967][   T65] usb 1-1: Product: syz
[   66.422906][   T65] usb 1-1: Manufacturer: syz
[   66.436809][   T65] usb 1-1: SerialNumber: syz
[   66.447075][ T1527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   66.461176][ T1527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   66.466728][   T36] audit: type=1400 audit(1760395383.230:337): avc:  denied  { mount } for  pid=1539 comm="syz.2.401" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   66.513331][ T1542] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[   66.524734][ T1538] rust_binder: Error while translating object.
[   66.539121][ T1538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   66.543883][ T1544] fuse: Bad value for 'group_id'
[   66.555411][ T1538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272
[   66.561560][ T1544] fuse: Bad value for 'group_id'
[   66.719109][ T1572] netlink: 'syz.3.413': attribute type 58 has an invalid length.
[   66.752293][ T1579] binder: Binderfs stats mode cannot be changed during a remount
[   66.767396][ T1580] binder: Binderfs stats mode cannot be changed during a remount
[   67.046478][ T1589] binder: Unknown parameter 'm�[��ax'
[   67.296359][  T356] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   67.449569][  T356] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.462081][  T356] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF
[   67.474196][  T356] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   67.486019][  T356] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   67.495880][  T356] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.496950][ T1523] rust_binder: Error while translating object.
[   67.509035][ T1523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   67.516008][ T1523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:273
[   67.527499][  T356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   67.546581][   T65] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:f1:58:c6:22:91
[   67.559442][   T65] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[   67.568039][   T65] usb 1-1: USB disconnect, device number 19
[   67.574756][  T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.582907][  T356] usb 2-1: Product: syz
[   67.594837][  T356] usb 2-1: Manufacturer: syz
[   67.599656][  T356] usb 2-1: SerialNumber: syz
[   67.826826][  T331] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[   67.956725][  T331] usb 3-1: device descriptor read/64, error -71
[   68.001863][ T1630] tipc: Started in network mode
[   68.007228][ T1630] tipc: Node identity ac14140f, cluster identity 4711
[   68.014413][ T1630] tipc: New replicast peer: 255.255.255.255
[   68.021105][ T1630] tipc: Enabled bearer <udp:syz2>, priority 10
[   68.070494][ T1636] x_tables: duplicate underflow at hook 4
[   68.136464][ T1640] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   68.196721][  T331] usb 3-1: device descriptor read/64, error -71
[   68.311328][ T1645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284
[   68.323953][ T1647] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   68.340557][ T1647] rust_binder: Write failure EINVAL in pid:286
[   68.436701][  T331] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[   68.521342][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   68.521363][   T36] audit: type=1400 audit(1760395385.290:348): avc:  denied  { mounton } for  pid=1651 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   68.576878][  T331] usb 3-1: device descriptor read/64, error -71
[   68.609283][  T356] cdc_ncm 2-1:1.0: bind() failure
[   68.619930][ T1654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1654 comm=syz.3.442
[   68.634309][  T356] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   68.647497][  T356] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   68.668111][  T356] usb 2-1: USB disconnect, device number 10
[   68.727832][  T330] bridge_slave_1: left allmulticast mode
[   68.733627][  T330] bridge_slave_1: left promiscuous mode
[   68.739799][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.748240][  T330] bridge_slave_0: left allmulticast mode
[   68.754225][  T330] bridge_slave_0: left promiscuous mode
[   68.760335][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.836726][  T331] usb 3-1: device descriptor read/64, error -71
[   68.879080][  T330] veth1_macvtap: left promiscuous mode
[   68.884672][  T330] veth0_vlan: left promiscuous mode
[   68.948282][  T331] usb usb3-port1: attempt power cycle
[   69.146704][  T356] tipc: Node number set to 2886997007
[   69.306744][  T331] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[   69.328017][  T331] usb 3-1: device descriptor read/8, error -71
[   69.457854][  T331] usb 3-1: device descriptor read/8, error -71
[   69.651783][ T1671] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   69.697077][  T331] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[   69.727695][  T331] usb 3-1: device descriptor read/8, error -71
[   69.820914][ T1701] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   69.820948][ T1701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   69.829465][ T1701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:323
[   69.860069][  T331] usb 3-1: device descriptor read/8, error -71
[   69.986902][  T331] usb usb3-port1: unable to enumerate USB device
[   71.078521][   T36] audit: type=1400 audit(1760395387.850:349): avc:  denied  { map } for  pid=1712 comm="syz.2.453" path="socket:[10708]" dev="sockfs" ino=10708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.079363][ T1713] rust_binder: Write failure EINVAL in pid:311
[   71.126709][   T36] audit: type=1400 audit(1760395387.850:350): avc:  denied  { read } for  pid=1712 comm="syz.2.453" path="socket:[10708]" dev="sockfs" ino=10708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.255919][ T1727] binder: Unknown parameter 'defcontext01777777777777777777777'
[   72.117088][ T1737] __vm_enough_memory: pid: 1737, comm: syz.1.461, bytes: 18014402804453376 not enough memory for the allocation
[   72.406781][  T356] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   72.558969][  T356] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   72.567422][  T356] usb 2-1: config 0 has no interface number 0
[   72.573891][  T356] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.584897][  T356] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.594958][  T356] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   72.604710][  T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.613501][  T356] usb 2-1: config 0 descriptor??
[   73.094211][ T1757] netlink: 96 bytes leftover after parsing attributes in process `syz.3.467'.
[   73.185675][  T356] usbhid 2-1:0.1: can't add hid device: -71
[   73.193645][  T356] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[   73.216715][  T356] usb 2-1: USB disconnect, device number 11
[   73.244269][   T36] audit: type=1400 audit(1760395390.010:351): avc:  denied  { create } for  pid=1765 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   73.276732][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   73.426808][    T9] usb 3-1: Using ep0 maxpacket: 32
[   73.433494][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.445854][    T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   73.455260][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.463592][    T9] usb 3-1: Product: syz
[   73.468077][    T9] usb 3-1: Manufacturer: syz
[   73.472694][    T9] usb 3-1: SerialNumber: syz
[   73.478302][    T9] usb 3-1: config 0 descriptor??
[   73.484280][    T9] usb 3-1: bad CDC descriptors
[   73.489331][    T9] usb 3-1: unsupported MDLM descriptors
[   73.687015][    T9] usb 3-1: USB disconnect, device number 19
[   74.155354][ T1774] rust_binder: Write failure EINVAL in pid:348
[   74.156183][ T1774] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.164038][ T1777] rust_binder: Write failure EINVAL in pid:348
[   74.221266][   T36] audit: type=1400 audit(1760395390.990:352): avc:  denied  { map } for  pid=1783 comm="syz.2.477" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   74.268703][ T1788] rust_binder: 326: no such ref 1
[   74.273865][ T1788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326
[   74.292284][ T1792] rust_binder: Error while translating object.
[   74.302540][ T1792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   74.309057][ T1792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330
[   76.691020][ T1827] rust_binder: Failed copying remainder into alloc: EFAULT
[   76.715692][ T1827] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   76.732208][ T1827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   76.746212][ T1827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:358
[   76.838353][ T1837] netlink: 188 bytes leftover after parsing attributes in process `syz.1.494'.
[   76.868589][ T1837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1837 comm=syz.1.494
[   78.137709][   T36] audit: type=1400 audit(1760395394.910:353): avc:  denied  { search } for  pid=1839 comm="syz.1.495" name="/" dev="configfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   78.160225][   T36] audit: type=1400 audit(1760395394.910:354): avc:  denied  { write } for  pid=1839 comm="syz.1.495" name="/" dev="configfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   78.167032][ T1844] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   78.257837][   T36] audit: type=1400 audit(1760395395.030:355): avc:  denied  { create } for  pid=1840 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   79.683473][ T1855] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true
[   79.683518][ T1855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   79.695254][ T1855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:364
[   79.713678][ T1861] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.754527][ T1867] fuse: Bad value for 'user_id'
[   79.759958][ T1867] fuse: Bad value for 'user_id'
[   81.281220][   T36] audit: type=1400 audit(1760395398.050:356): avc:  denied  { nlmsg_tty_audit } for  pid=1881 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   81.321288][ T1892] netlink: 'syz.3.511': attribute type 4 has an invalid length.
[   81.340010][ T1892] netlink: 'syz.3.511': attribute type 4 has an invalid length.
[   83.058569][   T36] audit: type=1400 audit(1760395399.830:357): avc:  denied  { create } for  pid=1907 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   84.958902][ T1934] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   84.977916][   T36] audit: type=1400 audit(1760395401.750:358): avc:  denied  { name_bind } for  pid=1937 comm="syz.2.526" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   85.003855][ T1934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   85.003895][ T1934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:393
[   85.046725][ T1945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   85.074983][ T1945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:395
[   86.875271][   T36] audit: type=1400 audit(1760395403.640:359): avc:  denied  { map } for  pid=1949 comm="syz.2.530" path="socket:[11782]" dev="sockfs" ino=11782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   86.975022][ T1962] rust_binder: Write failure EFAULT in pid:404
[   89.012598][ T1980] rust_binder: Error while translating object.
[   89.019249][ T1980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   89.025707][ T1980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412
[   89.078383][ T1987] rust_binder: Got transaction with invalid offset.
[   89.086611][   T36] audit: type=1400 audit(1760395405.850:360): avc:  denied  { nlmsg_read } for  pid=1985 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.088925][ T1987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   89.137598][ T1987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418
[   91.119237][ T1994] netlink: 'syz.3.546': attribute type 1 has an invalid length.
[   91.156896][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[   91.168836][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'.
[   91.259814][   T36] audit: type=1400 audit(1760395408.030:361): avc:  denied  { bind } for  pid=1990 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=4 req=441 state=3 status=67 (errno 9: Bad file descriptor)
[   93.479967][ T2019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:398
[   93.579463][ T2034] fuse: Unknown parameter 'grou'
[   93.625776][   T36] audit: type=1400 audit(1760395410.390:362): avc:  denied  { write } for  pid=283 comm="syz-executor" path="pipe:[3053]" dev="pipefs" ino=3053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   93.716687][  T388] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   93.786728][  T356] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[   93.825090][  T330] bridge_slave_1: left allmulticast mode
[   93.846668][  T330] bridge_slave_1: left promiscuous mode
[   93.852394][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.877222][  T330] bridge_slave_0: left allmulticast mode
[   93.883125][  T330] bridge_slave_0: left promiscuous mode
[   93.888876][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.019298][  T330] veth1_macvtap: left promiscuous mode
[   94.024858][  T330] veth0_vlan: left promiscuous mode
[   94.229751][  T330] bridge_slave_1: left allmulticast mode
[   94.235428][  T330] bridge_slave_1: left promiscuous mode
[   94.241170][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.248901][  T330] bridge_slave_0: left allmulticast mode
[   94.254568][  T330] bridge_slave_0: left promiscuous mode
[   94.260338][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.268399][  T330] bridge_slave_1: left allmulticast mode
[   94.274061][  T330] bridge_slave_1: left promiscuous mode
[   94.279828][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.287450][  T330] bridge_slave_0: left allmulticast mode
[   94.293107][  T330] bridge_slave_0: left promiscuous mode
[   94.298839][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.480086][  T330] tipc: Disabling bearer <udp:syz2>
[   94.485456][  T330] tipc: Left network mode
[   94.491711][  T330] veth1_macvtap: left promiscuous mode
[   94.497321][  T330] veth0_vlan: left promiscuous mode
[   94.502979][  T330] veth1_macvtap: left promiscuous mode
[   94.508668][  T330] veth0_vlan: left promiscuous mode