last executing test programs:

1m31.668464048s ago: executing program 1 (id=2):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)=@ethtool_coalesce={0xe, 0xfffffffe, 0x3, 0x2, 0x1, 0x84, 0x2, 0x100, 0xe, 0x4, 0x1, 0x40, 0x39f, 0x0, 0x3, 0x6, 0x7, 0x9809, 0xede2, 0x9c000, 0x7, 0x5f5, 0x4}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1b"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000000201010300000000000000000100000408001540000000010800170000000007080003"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1m31.40166895s ago: executing program 1 (id=11):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', <r2=>0x0, 0x80, 0x7800, 0x7, 0x9, {{0x19, 0x4, 0x1, 0x2e, 0x64, 0x67, 0x0, 0x10, 0x2f, 0x0, @empty, @private=0xa010102, {[@generic={0x89, 0x4, "a006"}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0x2, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x8}, {@remote, 0x5}, {@empty, 0x6}, {@multicast2, 0x4}]}, @end, @lsrr={0x83, 0x1f, 0x31, [@private=0xa010101, @empty, @local, @loopback, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00ffc300000000000000000d0003"], 0x30}], 0x1}, 0x0)
sendmsg$xdp(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x2c, 0x9, r2, 0x1a}, 0x12, &(0x7f0000000580)=[{&(0x7f00000002c0)="56f0a3527bdefe46d61e500817c44680f2b71803edca835b136299fe25f4e758bfdc47912367045467230eab850ec1a800bafe7af39dafed47132e95df0c0e88c2093f0456ea714b4f264eea0497206a92e94d4314a612f88a2f801db727798ca5ed712e612991fe89226f820d5abad4d37e40ac34de67d108184e8cf72028ea84fbc580d2b2889de4d27aa5685cb3d997f012373c0cbb670970e4b8e35174952ca43ce584732844f1822da1789d057e4c5059e54bb970fc2049bd01f097e2c9e0144781f84b9ed225f0298fae2e7f0d9648a3434a8bff09b88acccf57a7580fe47bb8dcf404eddce16755c857dd", 0xee}, {&(0x7f0000000440)="181d3b5a4f10eb28e50a3ca7348d04b20ca332168397346543fac83390bb70d194255cadba09d10f68bed5a7bf1c44015371bdbcbc83383df4da45f0fc7a9e5b50e3ceee2dd4a8891582351eb3b1bd3fb45213feab", 0x55}, {&(0x7f00000003c0)="18c23c0fc24b27c4884d", 0xa}, {&(0x7f00000004c0)="67ff72a997e7974294e6ff5451649afca1ab31ab961aba8e1f8b7d48d7c77042ad35d123c0d0450563fc8c1addac1cc54b74554eff6b9d481e9916434ed36fd787b5863bd7348efa7e9be4d56707bbb390b72f3a8ba45b50c3f6b0b346f081ee4e9ec272ba94e0a5c0a23d0860387f7d20bb750c3c4400d27e99d119f244ceab7eeeb65758f01d626de56502c589aaf5fd09e34ea114fadedf00ac3080e756a74e01f715948e98fdab3876b413", 0xad}], 0x4, 0x0, 0x0, 0x14000}, 0x20040051) (async)
sendmsg$xdp(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x2c, 0x9, r2, 0x1a}, 0x12, &(0x7f0000000580)=[{&(0x7f00000002c0)="56f0a3527bdefe46d61e500817c44680f2b71803edca835b136299fe25f4e758bfdc47912367045467230eab850ec1a800bafe7af39dafed47132e95df0c0e88c2093f0456ea714b4f264eea0497206a92e94d4314a612f88a2f801db727798ca5ed712e612991fe89226f820d5abad4d37e40ac34de67d108184e8cf72028ea84fbc580d2b2889de4d27aa5685cb3d997f012373c0cbb670970e4b8e35174952ca43ce584732844f1822da1789d057e4c5059e54bb970fc2049bd01f097e2c9e0144781f84b9ed225f0298fae2e7f0d9648a3434a8bff09b88acccf57a7580fe47bb8dcf404eddce16755c857dd", 0xee}, {&(0x7f0000000440)="181d3b5a4f10eb28e50a3ca7348d04b20ca332168397346543fac83390bb70d194255cadba09d10f68bed5a7bf1c44015371bdbcbc83383df4da45f0fc7a9e5b50e3ceee2dd4a8891582351eb3b1bd3fb45213feab", 0x55}, {&(0x7f00000003c0)="18c23c0fc24b27c4884d", 0xa}, {&(0x7f00000004c0)="67ff72a997e7974294e6ff5451649afca1ab31ab961aba8e1f8b7d48d7c77042ad35d123c0d0450563fc8c1addac1cc54b74554eff6b9d481e9916434ed36fd787b5863bd7348efa7e9be4d56707bbb390b72f3a8ba45b50c3f6b0b346f081ee4e9ec272ba94e0a5c0a23d0860387f7d20bb750c3c4400d27e99d119f244ceab7eeeb65758f01d626de56502c589aaf5fd09e34ea114fadedf00ac3080e756a74e01f715948e98fdab3876b413", 0xad}], 0x4, 0x0, 0x0, 0x14000}, 0x20040051)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5dc03a735595b942723fad49b453e90db459982c38", 0x58})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
mlockall(0x0) (async)
mlockall(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)="f91e8ffee06c088b3a2f7044f3e6d127d0038dafd5eb04abcb62787b9e0f0de051a89eb94c441fbedbc83d21aa208f85bd0d23861f1802f842fd04ff12902df04c30373d86a520bd2b14c56eb04cd0a6d60aa3efbb60b0129c1202e06d481a52e4936126d799ada78173cfae6f633aab5840f93067721e1de2017fbe123c0721d0e703988419e7caaf6adb389b11cb9f9649019dcfe1d2402baaf262ba690d", 0x9f}], 0x1, 0x3, 0x6) (async)
pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)="f91e8ffee06c088b3a2f7044f3e6d127d0038dafd5eb04abcb62787b9e0f0de051a89eb94c441fbedbc83d21aa208f85bd0d23861f1802f842fd04ff12902df04c30373d86a520bd2b14c56eb04cd0a6d60aa3efbb60b0129c1202e06d481a52e4936126d799ada78173cfae6f633aab5840f93067721e1de2017fbe123c0721d0e703988419e7caaf6adb389b11cb9f9649019dcfe1d2402baaf262ba690d", 0x9f}], 0x1, 0x3, 0x6)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001a00))
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x3) (async)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x3)
ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4028af11, &(0x7f00000001c0)) (async)
ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4028af11, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r8, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900fbfffffffcffffff08000500070000001400040070696d726567000000000000000000000a001800030303030303000018002b8004000600040004000400010004000600040003000800178004000600100017800400050004000300040001000a00e80008021100000000000a00e800ffffffffffff00001c00e7009f41c65c55c35866e43679a0128b69b96a62ce8e79513bbb08001780040002000a00e8000802110000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="2400cb4a8bf41bf67a1b1f3e2cc83386cbe378188a4f848098502d2cf520375c2088e73ab0e3a8b06f65b59959fa0ef6ae3c2cb7e91f91aa99e20e3cac8ef0cd7d497aaaf9623e9e98c07caa1d82924f0cee2505514fc19661fbfb77ce37378d01dfed99304a38a836fa726a6dd8c00a98a9d75000e515b32fe815c447311f54b151deadbc022bce36303d1199e5a22d63ed01d997ef1875aab4477dec531da13e81e7fc73d48782e31ffb7d3464fd64170d99d95e7c127a1fc2cc7165b9e28ce3a81352c403555b92e4245ea2949d25189358876aa43dc2198c816b82a71bf8ad2a441ff6974f41009251f7441b49680e56cfa690", @ANYRES16=r5, @ANYBLOB="000226bd7000ffdbdf2501000000080001006500000008000300", @ANYRES32=r9, @ANYBLOB="99de280ccea07e458b49c2e905ca7ee3afac4ccf2696221b2308f60e06ead7fabc30318a97d214b2e0c6caeb09efd8d0faf69f29e2630ab045bec3e72421e53f9d6368cd76ef73b5144d65d9979a0a0169fcc9dc12b9b17860462c1fa87f727532d2726f3ef17af654a8213e2a1152f7b0d21160d37528c90487f76aba471eee973db65e93eaa8d66f77d41c459d8d7081283e07852b"], 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4001)

1m31.331117845s ago: executing program 1 (id=14):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
pipe(0x0)
r1 = open$dir(0x0, 0x80140, 0x18f)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x5, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
r4 = dup(r3)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x9, {0x21, 0x2, 0x2, 0xd, 0x65c0fb7}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m16.080148645s ago: executing program 32 (id=14):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
pipe(0x0)
r1 = open$dir(0x0, 0x80140, 0x18f)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x5, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
r4 = dup(r3)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x9, {0x21, 0x2, 0x2, 0xd, 0x65c0fb7}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.829624121s ago: executing program 4 (id=1006):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040))
timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x0, @tid=r3}, &(0x7f0000000200)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_create(0x3, &(0x7f00000004c0)={0x0, 0x3d, 0x1, @thr={&(0x7f0000000440)="9ce972eadc2576f8259021a4ba9e93cd513aa1468decb415ab85039818402c389805627099ebb461b7c029212debf457b467e27b009475c215ea0c440e81bfd42f944f13651218", &(0x7f0000000580)="65217240f2e97a14fb0ad5dfa036c901719d29e6bf28e2035e267011b4d7c5fd6efc6b317c997d6b0a386834844c32905558a6ce0943205bcfc9e9394b2ba1ca743de5a349d549f249f2be42cbfbe50e8a586d69c1d3eabd4fea219d468fd688f9222b1146cf847e3e71126c07dd9f836779e5e3200ae07936d0b0b8c0c25ce7b0b1"}}, &(0x7f0000000640)=<r5=>0x0)
timer_delete(r5)
timer_settime(r4, 0x0, &(0x7f0000000240), &(0x7f0000000380))
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/213, 0xd5, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xf4)
copy_file_range(r0, &(0x7f0000000000)=0x3, r7, &(0x7f0000000040)=0x4, 0x8000000000000000, 0x0)

1.49208338s ago: executing program 4 (id=1069):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, 0xffffffffffffffff, 0x57788000) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xe0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3c, {0x9, 0x21, 0x2, 0x46, 0x1, {0x22, 0x7e}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x6, 0xfa}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0xfc, 0x0, 0x40, 0x7f}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x13, 0x2, 0x0, 0x7ef0, 0xb}]}, 0x5, [{0x5d, &(0x7f0000000180)=@string={0x5d, 0x3, "647738e2c191ad84bd5308dc00e2bd6367ebc778bff2613f9e2eaec7d91b1af7d8dbb10dee687085661ecd846a7e834685910112de80082f81e14938d5eaaf7dc82f149adc9a53c3a541659377e802f5edde61480357895f4bda4f"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}, {0xc2, &(0x7f0000000380)=@string={0xc2, 0x3, "90b3f7c24e40b3b10505166a129ba2d9e095d5e6babce339bbd0037ccc14496aa44a07ca55903e68828d51d8496bc26176235a681d98da1b89ceff2cb2482321bcd3e8c6319e23341b367aa8b155df3db2f417488ca40c256bb6dfcc780f5786f0f2e014e7338c0738f7d2254f97a6834cc9c323d4940136cc467ddbe32911058b7e9ce3b13083da4947b779f4a5ab76725a03189c1332aa299f9024bf25e11773ebe66a53dc6bf465aad918ce150729e4f923b80de410e67db06dd27ee2afcb"}}, {0xf2, &(0x7f0000000480)=@string={0xf2, 0x3, "74278458f9ac56c7ae6406221373a0b92f87d361d1eccb9fdad498bfd38e53a05750b69a5a174bde488d9faf1d6d34f559810bd1a961d0e1aef4b1918083c53d45de4bb99324efa7ec6376ecba96cce4bf7faa7c24e0802dec6013cca9625981685e8e491149e61dd9accfc10c35b7127f90ebb2c20e26f7cef600c45cb38e0e63b558252913941c68d8569b21bd6e92adb1294b24fcb78c2b37e0707950644fc88cb67242c76d9698c0c65774c0b95bf89b1a41b1589dde1c9e33acf66fea321657b06362f74da1a6411bd69299883d15bba7532c942f2ba912c695296693a3d6a69b59e41f83f55978c0bb557d0790"}}]})
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

1.49051461s ago: executing program 4 (id=1070):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000efffeeb1000040"])
setfsuid(0xee00)
pipe2$9p(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
listen(r3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0)
read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020)

1.455507083s ago: executing program 3 (id=1071):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002cc05000000000000cd220102030109021200010e012005090478020055112908"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x9b)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r3)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002cc05000000000000cd220102030109021200010e012005090478020055112908"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x9b) (async)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async)
fsync(r3) (async)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x6) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)

1.446739793s ago: executing program 3 (id=1072):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_TSC_KHZ_cpu(r4, 0xaea3)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES32=r1])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="c61c010ba000", 0x6}], 0x1, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)

1.415293136s ago: executing program 0 (id=1073):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0)
mkdirat(r4, &(0x7f0000000180)='./file0/file1\x00', 0x1e)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x64, 0x0, &(0x7f0000000180)=[@dead_binder_done, @exit_looper, @free_buffer={0x40086303, r1}, @exit_looper, @free_buffer={0x40086303, r1}, @dead_binder_done, @decrefs={0x40046307, 0x3}, @request_death, @increfs_done={0x40106308, 0x3}], 0xa6, 0x0, &(0x7f0000000240)="bd68b746b535c2ed1e5deb8aef78b11f6ab7c4a7704d89cd53f7bdc17235f27cb0f67d2d27cd7ca1d6d5a8175e7dedbcc358befaed140b5ca7382be45c7e547a1e1cea3a9fa25f1f68c7349a00278fe1b1b545f1c65910d397335f56464310519906b25d5be6e170dcd361ec3d404b4e17d7e225580c4d75f2dad24cc8674d384932077de5dfa0641cbd895f717c147fe8db5a4030d6d82a872652c1489033a8fc864cb5f3d3"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x3}, 0x20)
ppoll(&(0x7f0000000000)=[{r0, 0x8044}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

1.414887146s ago: executing program 3 (id=1074):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})
socket(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) (async)

1.414207066s ago: executing program 3 (id=1076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x800, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0x4)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8a080)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, 0x0) (async)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0) (async)
syz_usb_control_io(r9, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0})
syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x16, 0xe, "3832823f08a9427355c07da1eafa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$hid(r9, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x1, 0x48, "6789102c3afe1ec8cfa0b522b1e669c9c51685eb817bcbc8c77ce49c52d14e3bfb7815360b4a84756ed9d44eb1981e4d441e24ee59ba957cd1805ea46e33148318aa6f25e7b45d06"}, 0x0}) (async, rerun: 32)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000640)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x3, 0x7, 0xfb, 0xff, 0x40}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x2000000000) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r6, 0xae9af000) (async)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90800, &(0x7f0000000180)={[{@uuid_null}], [{@obj_user={'obj_user', 0x3d, './bind\xd3\xf4\"[]2\x01V\x95er1\x00'}}, {@smackfshat={'smackfshat', 0x3d, './bind\xd3\xf4\"[]2\x01V\x95er1\x00'}}, {@hash}]})

1.353723031s ago: executing program 3 (id=1077):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x6100, 0x24)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
poll(&(0x7f0000000080)=[{r1, 0x2004}], 0x1, 0x5)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0xf000, 0x80a0000, 0x9, 0x4, 0x7, 0x5, 0x2, 0x40, 0x3, 0x76, 0xb, 0x8}, {0x100000, 0xdddd1000, 0x8, 0x2e, 0x9, 0x5, 0x3, 0x40, 0xb, 0x1, 0x6, 0x40}, {0x80a0000, 0x1000, 0x10, 0x3, 0xc, 0x8, 0xd, 0x3, 0x40, 0x2, 0x10, 0x6}, {0x2, 0x5000, 0x3, 0x80, 0x4, 0x1, 0x6, 0xf7, 0x0, 0x10, 0x6, 0x2}, {0x5000, 0xeeef0000, 0xc, 0x8, 0x1, 0x5, 0x6, 0x3, 0xfa, 0xa1, 0x2, 0x4}, {0xdddd1000, 0xdddd1000, 0x10, 0x10, 0x5, 0x6, 0xc, 0x6, 0x80, 0x7, 0xca, 0x5}, {0x8000000, 0xeeee0000, 0x10, 0x7f, 0x9, 0x4, 0x0, 0x8, 0xd9, 0x5, 0x8, 0x7}, {0x2, 0x5000, 0x3, 0x3, 0x2, 0x0, 0x3, 0x7, 0x9, 0x1, 0xff, 0x2}, {0x33334000, 0x9}, {0xffff1000, 0x6}, 0x80000024, 0x0, 0x100000, 0x40084, 0xf, 0x1, 0xd001, [0x2, 0x6c19, 0x4d4, 0x5]})
write(r1, &(0x7f0000000300)="5a56113b9ae8b62fcbf3982fabe6a754e3fcd877167617baecf86909fd8fe2b62575a8e652f2acb53a5c2f55569247c92b8da35a50d2abd572bc1ce557927bc5803e3508f37863578e7b04b3c8f758189f12bba54c8904b81b6e65bfa18ff45b3959a68254ace4b6c67eac63fa67dd03ed0bd17fb973e91490231bb7d3743bc7a74e6250379b13df9afed738a9d4f130d86d38c67a330c26701db01ccbdd06b870e7cae25d8d50c24d498e071f8ceafa4559a1d13bc00ee74aa4546b69cca166787cd33ed4291fe51eaed7fcb5782c6fa680acb5e8a2b6ea669cc891755006dd4e745286187f1b48442dc69d5f3af41ce86c9d07859eda5aed7f77f771216e862e62c7eddea332bcf09f3f69764fd5eabc638c521cc4cd1111248f692a47cf78a377f6cc8accbde1cbd70b55dca3a0c528c6c1658a60f8c52f490a608c7ed6ea1a21bac3485bd37a8ea63ec9c7e7f3061278e416542a2de97e3197a515e8c9699c44c10f7c024850a5cb64a8fd906eed6a122bc8e3c01002980697a28c220f39658dccf74f50c8883b4cf3508a8475a67507e66ca3df3a7be4e7d93859e01ab9a29760de2e672e97612e0d54d0c5af34ada4fe11be0cb7e2864929385bf391a1172237e85b1b21595469a349c53f29960758719cf7949d9e1eb7c0da78fac4782bd6ef29471e4168c3999bf43754cda493d77bff4601bb9e8ccdd5ad2dad8cfc6226ded7112f85dd3bec9b3afc23cba6426dbb078eb9a0d6445906ea61f40d669c8b6066ecae7534436f68dd0bada81e900b056e622e5f119e30f9d55ba9b0faea534f5ce01cd93104bc16f6c966d76346daf1bebbe1f0e65b3af481a21eb54e5d24b47efe0b5af8dd1760438cbc3cac6675bcd78694bd34490ed46237e046946212f97ebb8f764b5fc85bed35d3eb3ac609e71dcafb263b4557314be2054af6e5ab0fd9e40637c8f6e89aa230b1f9b9cb5e3cac6733204a06c7edafe3c421e88e542653bda2c37d6132ac239f39f67fade9a2f05c4430b27c6f2076bd0106d1e569a9a9370a73389df5f069ae692a9ce6649d695d5444b18573b567d13d0c3e8c5eb9d88d96c309e71bd4f43a17a7d15504f81a971f16cf82905805079d8a442216ac8f30ad9fbf841b55bc628e64b3e748414809a398dbd10c01de2d118af693e2921eed7d77a43e65cd580f4fc59967875ad5fbba77c7b17bb3871738ed05c60dc8cf62ee9de0869ba36bd0770972b2e977d142cc1c6b1d6c808b8b5c35e0235c4146a44475880c5464b105d8a56f5b247883deb355a5956928e86b0bbe065c80cd2f799d76b5e28321f832d60c5d6ec9c1640412f0b6f98e8eb08af91b95fe8c6eb9afb083c5156b6feb3f52b18bfbba1c0914cea55c83f8d53846ae725c0c7ae1f24124cd6cff6fc0abfb33a87cd9cbd54c897286571f772e4949c822cd344642ccd18beba6e093c7852c8072bae28a6f77e544794952115330e7cbb9bff48ced5336b9786a3925da1e443133919c94b2a324ce4cbd7744f5ceb627068f8ad67289674a0c5c756c003833fbb61ecd0ee2d81fa91c04711313fb059c4b28c0455e6b048098b3b34db6afabe3df2f738114568903c5e13a8d85055fdedea5fe1350647fb70160db854a8b38337bc6eb29caa375045514b90529bf5ab6d28fc2aa8158a0b8e55961ac60f24f436e04e14d3f88116984d1f0d605c317e8256a812347c06f5e0bcdcd5ad11b6dc6a5810aba64f54d6ce5cdd4e9cda7cb86e7149df438d8998a1a0424dfe60a0c31e93965f397abed686013c430bba3b145298d27e8a5ba53c03a7c40b9195efa4282ee2b70f2a9fff1d6f26dce42ab4a4e69000e09de2d1aa8c1da7cff35f369de4a66a8977c4998666bf4da5a9c971f4a0318fb453eeaae9706e9b367ada437e0c4ecf32840cfddacfc92cf2bd3d276403a427c87e66f6fe3b2031f45074d13ad6da02db860f68b1b501a430c52be4d352801451f11450428c24afd9049e793c392c5ee3f5b59081893d36ddc64789dc32a0ea87e47b821eca89479875e390e204f3a161d7f7d13187f97d51534782b3c483411a91da277ae4a0b6c9341d63b215ad853f9f48a8d8cca28394ee55c77a2a6c9dd4c010839c3f5f121389bd27f70f542391577168bee2faf6e4dc85215ca3745b933231149631e4297e529ed7abda29857e94ca9cd4377340bce6aa35816d8807b9929a15a83b6eb5eddba82fefbd964ba2b13f2fcbf0545d351387ba2db3b57e18989be6e66d36a649a0597cbc7c7dce4d091c75c34ef2561e1b0f76d5aaef83235f4115bc952dd2597b00052e9fa1dcdebfeccb3e82d05157275ef19cc6d622d1a0c96af048689401d2a97f081c6c596f8c2351350e53a8ff35eff0f99521d9c61c8c3a41474083f6d15987354e2f71c8b5766613ef11aa78c8264d55a481080758984feaccb33e48bc5df5c0a6cbcb62600a6a53c908598f299a1b519c758eba45e73418eeca6ae84da1e90f26892f2a8f0760c8ed7aef74bf7f5885200b8ecba6e18cf7148915cce40179683ce1893f9bc347ace350e199ca941d6a02724bb9ea9bc08d810448edce9d76afd97e33be08e760e3f508ad52b858509e5107759f303ad7c16c42925ba5c44ad8b14a14b78357726ce79979b1f3eb6dcf555eec5898be48896b12fdf7a40ab39ef49d96825dff40331bbbfab6743fb4ebce90926ac18187475c2aa054a66dfce643315f9a963a4fd1af860e3dcb549e2f39ac20ad4e271cd193a98a13d9896e0d3864645dd31a56fa0a64434133f8cd8ae975e7f03fac64a14421060afda951243fb75c8e06b14a04ec70e3f364a1215840cb2dbc76b04ce68868d15e2da2c6547dfb59747fd668bd561598212fc77e2ba0111113a601263b522513655850615d88c16d56c3882304e081da690476b54dfb8dfc2b09b33e3c5d9a1a15a72e46230787b1eb0293648d2004a937439617a11c7752f3ce8c83a043172c270fe04f6fe27498dd1098f9cacc63276ed0d710ee4d0ced46e8a7eda4410107dc50db8747f8eacd712325828ffcabcfd491d98c11170c57392c73977ba1d1a9d65e941f62821a4353a9e15d779bb96fb3dc608ba09bc149f8268d10bd0855dfbe8738111a9d07e939c9c3ea6bc3e9b7a513405f18eccb87b3aef8c6ec17dcbdbe4149275d3cb644a7dcfaeaf77195783d59ff4627fa5288fd4771a1826d7072c69ce3a94dc49a2ab9efd7e55b4a2158174e2e9c6b8657b17600aa17affdea1c798aa70ccc4b21e9c68a1c15054cfcaddb9ba5a605ee80d8c5ff1362efc81eca86c6fa375c19b6e06c256416f734a72943bfc28fd298863207c236ac53478aece6d93ca54e3a4ba1d20b3f55711b228beba668757f7b71404fce9d901e43d2201b605a3f5dcfd63c890a3044c0f5229ad2606e3589ca44a4b81ce3b3138445999e720889659f4aba50209d578c844f24522ebf226079f7a9739e71b2b9ba3e15058827393cfaa078dd4f98fa08468207d3a9e5076669795071e8124d558eb1d15bbfd6ef53a6835de5a2ef2be2a8128321ee0624e5fddf2106295442371211fa2e9b56d5895949ed2f37974351186bbe4e1b3b02d2e9e54778d0fcb988f4d4452190ac2bd4cfeaa5848067942204412b50724831e63233121972febd592652f7ab84fcc9d5bd3b1edf7739184f50bc123f37f85278273763671c725aaf6015f556e68626fdddf20aa1de2ae40278efbc1cae4758455f4b5f47e3316aa7962e97e43c17b60e40d8d813c7e1a280901e4b248225982aebcbf1464c386ca26b1f484200a6814d118c2fa74b8160d3182d7cdd3489a995dcf24e88eca43d9aa3b07624427e2f14e502c4ba1c883c7f1ce1ace5dca9058649d7f761752d4d3b195e5e58bf213d005136fa73a77aa23a015e9663353bf7f6500dbc7a593a6acdb441e8e1c60d68b6f04122caf786dbedf071d5c68f16f7615aa33203ac58445ba6f82a35862c459fead31f113ccb687d62ac795861efb51890579e447d4753bc0eb20f7c99a9a56e9c86daff145de63efeae80519acb14b4384638664118cb85cfd372af12d136171241e1433f01cda4c0b82d437572e1ad458f681b5bf5cae1ec955946c3ab13a3773911d9540836b7a4440a2389e22d948f199ec7272ad16aaf6aa5122ec981a1d1cc3826ba533fa14984530814808929d34383e1ddf7d4b86e05144609d9d7d3d17ed459b8321558cd2f9c2c9cc7ed9a9625528357aca680514d0d1d400c06d55c8660f191c9fe426da420bec6e4baf744f5ef07576a8e268f9aed187bbea187411a5ddd17b0c6ff1ce8a40790f86de2aea9b4b14caa30962c05876dedc853f211c37081ac96509addbecbc42a8d92bf193b5507237a10e73f4408293f41336b9bee3d4133a93a0bce91e3fd72ce8f933dcd9d045356950840e8cd2ba860547e0e15656ffd9469d3f17e119dea25b42ffc59cac24fe88ab27905e9cdef9147b197fb13e882e027df2317e5db8ef58145d6895284c801616d0a9bef8f1043b7eadfadf915f04f7a3226b1a9dd0a7131a8e9452344a905029fb74edb398e3b7e571bddf5621cc1fa5d982a11b29d621f372f30c6b78b12e9bb875513c83442c63e736e491a74fa3d469eac718f32e836e2a15dccad3a0e6c5951b5f621655831dc73649d2a88c83da653fc78219225548e899f934a81454b6aaf831cf685b01d52f57353d14989295d87c8fb5406f34e9dda0924f5aee9d169f92c077af5578de3f613bf0c71c5b41235d5b74d65274793795858868b9e66fe4db773b9faeb758fd45088848b2f44858a26bf4c32afd1af11402901b841e000cc1bb3a7ca2fc59ef30b7af78da865fd6ef26e4bada4b9d819364f913fd6ac269122847f7534542dcca17866e2be30500b9afd7a5a2507f02108044a2ebbc54a059960ccae309853fada98624666a9d347e48250bc7fd8c3e683f94167e7a3e6e2f160d56da1158660410a1abfb1da9dff91889daa51e75558122570454664dca133bea048c48a08aed984770069bfb5edb4be0ab1fe72052007567b126d70abab683281fb7a09260d5de94b8ca6ae189a4bbfa9be635aa3884806ab8de0098a9a84d63b500dc89b243b0ac6bfad2c4f1e19eade6fb05ed2e9d51b06670ffc33bd22ee32fc06be98bdc7356037428d73d6f1cf14b268ce14399911d53ebbc5608b0184ad148691f37291c1d5a808ecbdbf97efde256ceeeeda4812ae71ae9fa541772bad9ce11045b64677733a69d27ab88510073e04c791eb59b5cbcd77b68148c8b695eaaea30605866801de989fb6b827374ae2626084bdb59cd85ad12922e921a271e1f42160cf0a6c7c318fb6d6fed8dcffcafee6ec1fc2c5d21c111ed539ef2098e1624cb6f3412825bfcf788b8e5b10c9118a6d735dc22e2d8c02f966f4c8fe4c4630559de31569633d1cbb18c5cd2adfe41aa13866c405746e7652257dae13e3ec84a1ce01c1627ba5bb26a8370c14191396e079f8f0d834d52bf68e05144b5026918cd237870fa3de94b6502035448058509538384111b6b582bd3d06e3e844d4cfbbb3978d6a5b5e68195d2976558b9053246c0c978770cf7972d5e9c702d535b350e4f28944947425c0d57af8b490c4e484899e1edcf311a15820222c3f1ae2b394abf273ee30fb01fd30b80814f945cc5db4563e882053cea96bd27bcef17ab801539028bd2a80b0ce9815477d5016abdc4a970e9b9c42dda64809735842242f2cb39d9829b8805c712a6027697acde9626dcf078", 0x1000)
fsetxattr$security_ima(r0, &(0x7f0000001300), &(0x7f0000001340)=@sha1={0x1, "84de634749435d6415b7719aabc2ef44c11dc66c"}, 0x15, 0x5)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r1)
poll(&(0x7f00000013c0)=[{r1, 0x1000}, {r0, 0x2}], 0x2, 0x400)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400)={0x0, <r2=>0x0}, &(0x7f0000001440)=0xc)
lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$P9_RGETATTR(r0, &(0x7f0000001540)={0xa0, 0x19, 0x2, {0xc2a, {0x40, 0x2, 0x5}, 0x208, r2, r3, 0xd285, 0xffffffffffffffc0, 0x2, 0x0, 0x1, 0x5, 0x1, 0x5, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x3, 0x3167, 0x2}}, 0xa0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
getpeername(r4, &(0x7f0000001600)=@ethernet={0x0, @link_local}, &(0x7f0000001680)=0x80)
mknod(&(0x7f00000016c0)='./file0\x00', 0x8180, 0x2)
r5 = accept$inet(r0, &(0x7f0000001700), &(0x7f0000001740)=0x10)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000001780)={0x0, 0x3, 0x0, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001940)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/211, 0xd3, 0x0, &(0x7f00000018c0)=""/103, 0x67}, &(0x7f0000001980)=0x40)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000020c0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20009042}, 0xc, &(0x7f0000002080)={&(0x7f0000001a40)={0x62c, r6, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x48}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2c83}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x170, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8001}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="df7d357677f8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x200}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x100}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc91}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8735}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x4}, {0x4}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xc000000}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xee29848d}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}]}, @NL80211_ATTR_IE={0x149, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @tim={0x5, 0xe9, {0x7, 0xae, 0xe0, "82a352152a5330e7bde060ad480ee302edfc2428e173f44fd12c651b159a2052bfc82615c5536b28a9913e536e69ed1555dd8250169532ef32b9aac8142a120371142575217be7e7b72d8d28ec629388d267f517cf8be3a3a4183d96aa80fa52372b41b95fd70297617cb2481636cd33a9f25a6db7c3f05d78f7f6515bd7d1b1597217b5fe17d0acc5822a958de17635b1d2f7169e5d47599db8152264a000997cb392fd2514fa16d4f8afbabd25852fc366c37bb2b23d875a5d9519b83ed75394a1eb89051b1d1aec78270f58c178c7d773d17a441aabcae342eacaf68f68e463cb42b11d76"}}, @preq={0x82, 0x30, {{0x1, 0x1}, 0x7, 0x9, 0x411, @device_b, 0x5, @void, 0x4, 0x8, 0x2, [{{0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x5}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x340, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="50e5332b7550577cef"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="fe4f2bce08e4ed"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x691}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x560f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x200}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xeafc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffbff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x100}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="7d021a42ab68ed87129cbd7e4043f10632c6c5f3f5fc68cc55d85e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="c802eb42308ba3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="ee55a02bfbd1"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xd8000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc0f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2e7}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xdb}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x30}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfffffffa}, @NL80211_BAND_LC={0x8, 0x5, 0x10000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_LC={0x8, 0x5, 0x7f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2b5be7a09e15"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xffffff8e}, @NL80211_BAND_LC={0x8, 0x5, 0xd2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4f4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40}]}]}]}]}, 0x62c}, 0x1, 0x0, 0x0, 0x801}, 0x1)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000002100)=[0x8, 0x7, 0x9840, 0xfffffff8, 0x0, 0x7, 0x8, 0x1ff])
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002140)={<r7=>r1, 0x0, 0x2, 0xcc})
close_range(r7, r5, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000021c0)={0xa3, 0x0, &(0x7f0000002180)})
getsockname$tipc(r0, &(0x7f0000002240), &(0x7f0000002280)=0x10)
ioctl$RTC_VL_CLR(r0, 0x7014)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000022c0)={0x0, @adiantum, 0x0, @desc2})

1.353386891s ago: executing program 4 (id=1078):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x40000000}, {{@in=@empty, 0xfffffffd, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x801, @remote, 0x4c}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f00000000c0)=0x2000000, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140)=0x1, 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001540)=""/229, 0xe5}, {&(0x7f0000005200)=""/4116, 0x105d}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2cf}, {{0x0, 0x0, 0x0}, 0x4}], 0x6, 0x12040, 0x0)
creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0)
sendfile(r7, r8, 0x0, 0xc)
socket$unix(0x1, 0x5, 0x0)
r9 = dup2(r6, r4)
close_range(r9, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.346379312s ago: executing program 4 (id=1079):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40086315}], 0x0, 0x0, 0x0})

1.335001382s ago: executing program 4 (id=1080):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d41000000008984", 0x39}], 0x1)
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
fadvise64(r0, 0x0, 0x2, 0x5) (async)
fadvise64(r0, 0x0, 0x2, 0x5)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
pread64(r5, &(0x7f00000002c0)=""/233, 0xe9, 0x100000072)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sigaltstack(&(0x7f0000000500)={0x0, 0x3}, 0x0) (async)
sigaltstack(&(0x7f0000000500)={0x0, 0x3}, 0x0)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x2001}, 0x6)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[], 0xffdd)
ioctl$SIOCSIFHWADDR(r2, 0x40305839, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x40305839, 0x0)

1.170603416s ago: executing program 2 (id=1084):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f'])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20)
setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b6, 0x13500, 0x80000, 0x352}, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x80002, 0x0)
dup(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000040100001070054000007000000000a000000060001001400000008000a00d40bd86162e27470d2e6bdc4a325ab79c3a7d88792e27e8b0474e0b3a375ee44253f34a4b16b67461eeea07d6774cc10f3effb40333ed3dd47eaccbd0c7d5724dc4c5be2f8ebcd3b85e876a3e3b9a1bd211dec7dde627eb5df017ac91e0f45e5f6f98c0ad5238a2ecf82b21ccf8a5910f2580d460873a306c1a87b5b910f3e7156405b7365ffd7fa11f458e3dd7ebfb537b5e8680b35231906b2a896acc632d934f55d4a7690c99ccb8a", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)

533.974827ms ago: executing program 0 (id=1085):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}]}, 0x18}}, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
ioperm(0x9, 0x7ff, 0x100000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000)

531.050438ms ago: executing program 0 (id=1086):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x80000001, [0x7ff, 0x0, 0x0, 0x8e4b, 0x6, 0x4]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r3, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
splice(r3, &(0x7f0000000000)=0x4, r3, &(0x7f0000000080)=0x8, 0x5, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x1000000, 0x0})
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f00000001c0)=0x4, 0x4)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r6, &(0x7f0000000140)="1b220f76b7", 0x5, 0x800, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

510.448819ms ago: executing program 3 (id=1087):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0xc000, 0xd, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f0000000100)='./file0\x00', 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
mount$9p_xen(0x0, &(0x7f0000004580)='.\x00', &(0x7f00000045c0), 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="743d3970323030302e4c2c66756e633d4250524d5b434845434b2c7569643e5d785771d6ccf07eb0469ab5c729b5b0987b7e7da6fffeb3e4b94751b9e9fc95c346e91c175618e83e0d50c121aa9cc66b563b2e0a0581d11e53ae207e94e7a315e3a2c1170523036de8b99b8eeae8899d45cf72c709beefe9a1ea1a77bff030bef579486b51656d6df1", @ANYRESDEC=0x0, @ANYBLOB=',func=PATH_CHECK,pcr=00000000000000000035,fsname=/dev/md0\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',obj_role=&&,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',obj_user=rlimit,mask=^MAY_EXEC,\x00'])
fcntl$setflags(r0, 0x2, 0x1)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x80082102, &(0x7f0000000080)={0x0, 0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x0, 0x0, 0x0})

252.98934ms ago: executing program 0 (id=1088):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1800, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = socket(0x1, 0x80802, 0x0) (async)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
fsmount(r0, 0x0, 0x88)

177.820616ms ago: executing program 0 (id=1089):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0x8ee49000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001640)=""/65, 0x41}], 0x1, &(0x7f0000006b40)=""/137, 0x89}, 0x42}], 0x1, 0x20, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00001af000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe5, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = getpgrp(0x0)
syz_pidfd_open(r5, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

140.747319ms ago: executing program 2 (id=1090):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x80, &(0x7f0000000280)='mounts\x00') (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f0000000180)) (async, rerun: 64)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff, 0x7ff}) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async)
listen(r4, 0x5)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224effffffff", 0x58}], 0x1) (async)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a005f0015f9f40700090400810000008001400000000000", 0x1c) (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0xc)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r9}}]}) (async)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) (async)
io_setup(0x10f5, &(0x7f0000000300)=<r10=>0x0)
io_getevents(r10, 0x6, 0x4b, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

117.703971ms ago: executing program 2 (id=1091):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)

61.911635ms ago: executing program 2 (id=1092):
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) (async, rerun: 64)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 64)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffffffff) (async)
mmap(&(0x7f0000104000/0x4000)=nil, 0x4000, 0xb, 0x11, r0, 0x3bdc0000)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40f02, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f00008cb000/0x2000)=nil, 0x2000, 0xe) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x7}, 0x18) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/42, &(0x7f0000000140)=0x2a)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f00000000c0)={0x7, 0x3}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "5f3eeb1050666ab0", "986317c65b463c92cdbb5122f3883d56", "03c1c81b", "45e2783fe35112c5"}, 0x28) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r5, &(0x7f0000000b80)={&(0x7f0000000240), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f00000008c0)=""/40, 0x28}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000003180)=""/4096, 0x1000}], 0xa, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x101e3) (async, rerun: 32)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f00000002c0)={0xa, 0x0, [{0xd, 0x7, 0x0, 0x7, 0xffff6dc7, 0x101, 0x9}, {0x1, 0x1ff, 0x9, 0x2, 0x80000000, 0x6, 0xb}, {0x80000001, 0x78d, 0x0, 0x8, 0x6, 0x800, 0xb7e1}, {0x80000019, 0xb, 0x1, 0x9, 0x9, 0xccea}, {0x1, 0x7, 0x9, 0x6, 0xb, 0x6, 0xb33}, {0x40000001, 0xae, 0x0, 0x2, 0x2974c2b7, 0xafc, 0x80000000}, {0x80000019, 0xa85, 0x4, 0x7fff, 0x4, 0x2, 0x2}, {0x1, 0x1, 0x1, 0x10000d, 0x7ff, 0xfcd, 0x10}, {0x1, 0x40, 0x5, 0x4, 0x2, 0x100, 0x80000001}, {0x80000008, 0x10000, 0x2, 0x6ae09e83, 0x7, 0x6, 0xff}]}) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

61.523376ms ago: executing program 2 (id=1093):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5.2317ms ago: executing program 0 (id=1094):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c505", 0x1b}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04", 0xb}], 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=1095):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e6f6e74654e74a1"])
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace$pokeuser(0x6, r1, 0x38a, 0x7b68) (async, rerun: 32)
r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
shutdown(r2, 0x1) (async)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x90) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f0000000100)) (async)
r3 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) (async)
r4 = socket(0x10, 0x803, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) (async, rerun: 64)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001040102040000000000000000000406"], 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(0x0, r6) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async)
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async, rerun: 32)
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async, rerun: 32)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002180)={{{@in=@loopback, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000002280)=0xe8)

kernel console output (not intermixed with test programs):

te buffer. len:1048, is_oneway:false
[   51.461299][ T1175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   51.471287][  T561] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[   51.474603][  T600] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   51.481527][ T1175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:61
[   51.487931][  T600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.497729][   T36] audit: type=1400 audit(1756450994.330:285): avc:  denied  { append } for  pid=1142 comm="syz.3.256" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.531404][  T600] usb 3-1: Product: syz
[   51.541166][  T600] usb 3-1: Manufacturer: syz
[   51.543415][ T1177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.268'.
[   51.551592][  T600] usb 3-1: SerialNumber: syz
[   51.556446][  T561] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   51.571000][ T1177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'.
[   51.585028][ T1180] rust_binder: Error while translating object.
[   51.585076][ T1180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.595443][ T1175] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   51.601606][ T1180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276
[   51.611163][ T1175] rust_binder: Write failure EINVAL in pid:61
[   51.622063][   T36] audit: type=1400 audit(1756450994.430:286): avc:  denied  { write } for  pid=1179 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.632809][ T1180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.648736][  T561] cp2112 0003:10C4:EA90.0007: error requesting version
[   51.682105][  T561] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71
[   51.692547][  T561] usb 4-1: USB disconnect, device number 10
[   51.701668][ T1183] binder: Bad value for 'stats'
[   51.741291][ T1185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64
[   51.741495][ T1185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64
[   51.763204][ T1187] rust_binder: Error in use_page_slow: ESRCH
[   51.763222][ T1187] rust_binder: use_range failure ESRCH
[   51.769242][ T1187] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   51.775325][ T1187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   51.793654][ T1187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:64
[   52.003434][  T600] usb 3-1: 0:2 : does not exist
[   52.030528][ T1198] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.035769][ T1198] netlink: 148 bytes leftover after parsing attributes in process `syz.4.274'.
[   52.052943][ T1198] rust_binder: Error while translating object.
[   52.052978][ T1198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.059171][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[   52.425427][   T36] audit: type=1400 audit(1756450995.270:287): avc:  denied  { write } for  pid=1204 comm="syz.3.277" path="socket:[10571]" dev="sockfs" ino=10571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   52.468226][ T1207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283
[   52.619411][ T1161] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   52.661482][ T1161] rust_binder: 197: no such ref 2
[   52.663540][ T1213] Source file dentry negative
[   52.666578][ T1161] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   52.671283][   T36] audit: type=1400 audit(1756450995.510:288): avc:  denied  { ioctl } for  pid=1212 comm="syz.0.281" path="/24/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.691718][ T1161] rust_binder: 197: no such ref 3
[   52.729934][ T1214] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 159)
[   52.729962][ T1214] rust_binder: Error while translating object.
[   52.741125][ T1214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.749303][ T1214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[   53.007263][   T36] audit: type=1400 audit(1756450995.850:289): avc:  denied  { read } for  pid=1228 comm="syz.4.285" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   53.041761][   T36] audit: type=1400 audit(1756450995.850:290): avc:  denied  { open } for  pid=1228 comm="syz.4.285" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   53.071444][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   53.133389][   T36] audit: type=1400 audit(1756450995.980:291): avc:  denied  { bind } for  pid=1238 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   53.232500][    T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.243932][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   53.250774][    T9] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   53.260630][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.270701][    T9] usb 1-1: config 0 descriptor??
[   53.282432][ T1253] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[   53.451421][   T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   53.611443][   T45] usb 5-1: Using ep0 maxpacket: 16
[   53.618144][   T45] usb 5-1: unable to get BOS descriptor or descriptor too short
[   53.626774][   T45] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping
[   53.627526][ T1267] rust_binder: Error while translating object.
[   53.636011][   T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.636106][ T1267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.642407][   T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.652502][ T1267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316
[   53.661970][   T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   53.686118][    T9] hkems 0003:2006:0118.0008: unknown main item tag 0x0
[   53.695978][   T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   53.699507][    T9] hkems 0003:2006:0118.0008: unknown main item tag 0x0
[   53.708691][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.717273][    T9] hkems 0003:2006:0118.0008: hidraw0: USB HID v0.04 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0
[   53.723536][   T45] usb 5-1: Product: syz
[   53.737947][    T9] hkems 0003:2006:0118.0008: no inputs found
[   53.739496][   T45] usb 5-1: Manufacturer: syz
[   53.749523][   T45] usb 5-1: SerialNumber: syz
[   53.754974][   T45] usb 5-1: rejected 1 configuration due to insufficient available bus power
[   53.761408][    T9] hkems 0003:2006:0118.0008: force feedback init failed
[   53.764078][   T45] usb 5-1: no configuration chosen from 1 choice
[   53.934059][    T9] usb 1-1: USB disconnect, device number 13
[   54.058291][  T600] usb 3-1: USB disconnect, device number 10
[   54.841421][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   54.991427][    T9] usb 1-1: Using ep0 maxpacket: 32
[   54.997865][    T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.009810][    T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.023485][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   55.030109][    T9] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[   55.039208][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.047748][    T9] usb 1-1: config 0 descriptor??
[   55.091997][ T1300] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36
[   55.092023][ T1300] rust_binder: Error while translating object.
[   55.100822][ T1300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.107200][ T1300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224
[   55.254028][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.271789][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.351483][   T31] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   55.482019][    T9] cherry 0003:046A:0023.0009: unknown main item tag 0x0
[   55.489653][    T9] cherry 0003:046A:0023.0009: hidraw0: USB HID v0.01 Device [HID 046a:0023] on usb-dummy_hcd.0-1/input0
[   55.503898][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   55.516795][   T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[   55.525883][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.534479][   T31] usb 3-1: config 0 descriptor??
[   55.683353][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.691927][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.943140][   T31] uclogic 0003:5543:0003.000A: No inputs registered, leaving
[   55.951090][   T31] uclogic 0003:5543:0003.000A: hidraw1: USB HID v10.00 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0
[   56.219806][    T9] usb 5-1: USB disconnect, device number 5
[   56.262418][ T1304] netlink: 'syz.4.309': attribute type 11 has an invalid length.
[   56.635229][    T9] usb 1-1: USB disconnect, device number 14
[   56.652140][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   56.652156][   T36] audit: type=1400 audit(1756450999.490:300): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   56.941731][   T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   57.111435][   T31] usb 4-1: Using ep0 maxpacket: 32
[   57.117855][   T31] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[   57.126555][   T31] usb 4-1: config 0 has no interface number 0
[   57.132909][   T31] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   57.143304][   T31] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   57.155643][   T31] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[   57.165296][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.182097][   T31] usb 4-1: Product: syz
[   57.186507][   T31] usb 4-1: Manufacturer: syz
[   57.196631][   T31] usb 4-1: SerialNumber: syz
[   57.207001][   T31] usb 4-1: config 0 descriptor??
[   57.217831][ T1312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   57.232529][ T1312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   57.249092][   T31] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:9c:84:7a:03:d3
[   57.279012][   T36] audit: type=1400 audit(1756451000.120:301): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   57.307475][ T1317] incfs: Error accessing: ./file0.
[   57.312719][ T1317] incfs: mount failed -20
[   57.327468][   T36] audit: type=1400 audit(1756451000.120:302): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.364461][ T1323] overlay: ./file0 is not a directory
[   57.366908][   T36] audit: type=1400 audit(1756451000.120:303): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.391869][ T1323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87
[   57.392579][ T1324] rust_binder: Write failure EINVAL in pid:87
[   57.393785][   T36] audit: type=1400 audit(1756451000.120:304): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.465100][   T36] audit: type=1400 audit(1756451000.120:305): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.488669][   T31] usb 4-1: USB disconnect, device number 11
[   57.502948][   T31] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[   57.519034][   T36] audit: type=1400 audit(1756451000.200:306): avc:  denied  { read } for  pid=1319 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.542317][   T36] audit: type=1400 audit(1756451000.200:307): avc:  denied  { open } for  pid=1319 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.567451][   T36] audit: type=1400 audit(1756451000.200:308): avc:  denied  { getattr } for  pid=1319 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.614678][   T36] audit: type=1400 audit(1756451000.360:309): avc:  denied  { write } for  pid=1318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.024540][ T1354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.041940][ T1354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.096172][   T65] usb 3-1: USB disconnect, device number 11
[   58.261416][   T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   58.361020][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000
[   58.370693][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[   58.381553][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[   58.394310][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[   58.405042][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[   58.417281][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000
[   58.421416][   T31] usb 4-1: device descriptor read/64, error -71
[   58.427835][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[   58.443868][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000
[   58.454961][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[   58.466088][ T1364] kvm: kvm [1362]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000
[   58.671414][   T31] usb 4-1: device descriptor read/64, error -71
[   58.931435][   T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   59.081419][   T31] usb 4-1: device descriptor read/64, error -71
[   59.296234][   T46] bridge_slave_1: left allmulticast mode
[   59.302090][   T46] bridge_slave_1: left promiscuous mode
[   59.307887][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.316683][   T46] bridge_slave_0: left allmulticast mode
[   59.322493][   T31] usb 4-1: device descriptor read/64, error -71
[   59.328843][   T46] bridge_slave_0: left promiscuous mode
[   59.335491][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.431564][   T31] usb usb4-port1: attempt power cycle
[   59.468356][ T1392] FAULT_INJECTION: forcing a failure.
[   59.468356][ T1392] name failslab, interval 1, probability 0, space 0, times 1
[   59.481202][ T1392] CPU: 0 UID: 0 PID: 1392 Comm: syz.2.328 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[   59.481236][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[   59.481248][ T1392] Call Trace:
[   59.481255][ T1392]  <TASK>
[   59.481263][ T1392]  __dump_stack+0x21/0x30
[   59.481295][ T1392]  dump_stack_lvl+0x10c/0x190
[   59.481320][ T1392]  ? __cfi_dump_stack_lvl+0x10/0x10
[   59.481335][ T1392]  ? vfs_write+0x8ba/0xe80
[   59.481347][ T1392]  dump_stack+0x19/0x20
[   59.481371][ T1392]  should_fail_ex+0x3d9/0x530
[   59.481400][ T1392]  should_failslab+0xac/0x100
[   59.481420][ T1392]  kmem_cache_alloc_noprof+0x42/0x3a0
[   59.481447][ T1392]  ? getname_flags+0xc6/0x710
[   59.481461][ T1392]  getname_flags+0xc6/0x710
[   59.481472][ T1392]  user_path_at+0x2b/0x60
[   59.481485][ T1392]  __x64_sys_umount+0xf2/0x170
[   59.481500][ T1392]  ? __cfi___x64_sys_umount+0x10/0x10
[   59.481516][ T1392]  ? __kasan_check_read+0x15/0x20
[   59.481533][ T1392]  x64_sys_call+0x2ab8/0x2ee0
[   59.481549][ T1392]  do_syscall_64+0x58/0xf0
[   59.481563][ T1392]  ? clear_bhb_loop+0x50/0xa0
[   59.481576][ T1392]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   59.481589][ T1392] RIP: 0033:0x7f8bdfb8ebe9
[   59.481600][ T1392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.481611][ T1392] RSP: 002b:00007f8be0a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   59.481626][ T1392] RAX: ffffffffffffffda RBX: 00007f8bdfdb5fa0 RCX: 00007f8bdfb8ebe9
[   59.481636][ T1392] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000ac0
[   59.481644][ T1392] RBP: 00007f8be0a69090 R08: 0000000000000000 R09: 0000000000000000
[   59.481652][ T1392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.481660][ T1392] R13: 00007f8bdfdb6038 R14: 00007f8bdfdb5fa0 R15: 00007ffcf97ea018
[   59.481670][ T1392]  </TASK>
[   59.676134][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.683653][ T1384] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.690805][ T1384] bridge_slave_0: entered allmulticast mode
[   59.699505][ T1384] bridge_slave_0: entered promiscuous mode
[   59.702405][ T1394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1394 comm=syz.2.329
[   59.718413][   T46] veth1_macvtap: left promiscuous mode
[   59.724137][   T46] veth0_vlan: left promiscuous mode
[   59.787762][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.794864][ T1384] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.803171][ T1384] bridge_slave_1: entered allmulticast mode
[   59.809464][ T1384] bridge_slave_1: entered promiscuous mode
[   59.821454][   T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   59.842463][   T31] usb 4-1: device descriptor read/8, error -71
[   59.868379][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.875434][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.882720][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.889746][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.909021][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.916586][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.926947][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.934049][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.944779][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.951887][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.972837][   T31] usb 4-1: device descriptor read/8, error -71
[   59.987236][ T1384] veth0_vlan: entered promiscuous mode
[   60.002053][ T1384] veth1_macvtap: entered promiscuous mode
[   60.209285][ T1422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.335'.
[   60.211486][   T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   60.242448][   T31] usb 4-1: device descriptor read/8, error -71
[   60.291514][  T413] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   60.372637][   T31] usb 4-1: device descriptor read/8, error -71
[   60.457482][  T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   60.468896][  T413] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   60.478030][  T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.481719][   T31] usb usb4-port1: unable to enumerate USB device
[   60.492879][  T413] usb 5-1: config 0 descriptor??
[   60.502204][ T1417] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   60.803775][ T1433] rust_binder: Error while translating object.
[   60.803818][ T1433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   60.810082][ T1433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:104
[   60.830958][ T1435] binder: Bad value for 'max'
[   60.919261][  T413] hid-generic 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[   61.541537][  T561] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   61.614963][ T1474] fuseblk: Bad value for 'fd'
[   61.695217][  T561] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.718370][  T561] usb 3-1: config 0 has no interfaces?
[   61.727178][  T561] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   61.751882][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   61.751899][   T36] audit: type=1400 audit(1756451004.590:337): avc:  denied  { write } for  pid=1503 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   61.776978][  T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   61.785242][  T561] usb 3-1: Product: syz
[   61.790944][  T561] usb 3-1: Manufacturer: syz
[   61.795732][  T561] usb 3-1: SerialNumber: syz
[   61.803679][  T561] usb 3-1: config 0 descriptor??
[   61.865704][ T1515] netlink: 'syz.0.368': attribute type 2 has an invalid length.
[   61.874650][ T1515] rust_binder: Error while translating object.
[   61.874677][ T1515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   61.880938][ T1515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:129
[   61.902262][   T36] audit: type=1400 audit(1756451004.750:338): avc:  denied  { mount } for  pid=1516 comm="syz.0.369" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   61.948705][   T36] audit: type=1400 audit(1756451004.790:339): avc:  denied  { search } for  pid=1516 comm="syz.0.369" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   61.972372][   T36] audit: type=1400 audit(1756451004.820:340): avc:  denied  { read } for  pid=818 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   61.995377][   T36] audit: type=1400 audit(1756451004.820:341): avc:  denied  { open } for  pid=818 comm="syz-executor" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   62.017860][   T36] audit: type=1400 audit(1756451004.820:342): avc:  denied  { rmdir } for  pid=818 comm="syz-executor" name="instances" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   62.047707][    T9] usb 3-1: USB disconnect, device number 12
[   62.054073][   T36] audit: type=1400 audit(1756451004.820:343): avc:  denied  { create } for  pid=818 comm="syz-executor" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   62.081910][   T36] audit: type=1400 audit(1756451004.820:344): avc:  denied  { link } for  pid=818 comm="syz-executor" name="#9" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   62.104274][   T36] audit: type=1400 audit(1756451004.820:345): avc:  denied  { rename } for  pid=818 comm="syz-executor" name="#a" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   62.126839][   T36] audit: type=1400 audit(1756451004.820:346): avc:  denied  { getattr } for  pid=818 comm="syz-executor" name="saved_tgids" dev="tracefs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   62.584230][ T1522] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.592050][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6
[   62.691889][ T1530] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.697554][    T9] rust_binder: 1529: removing orphan mapping 0:4120
[   62.711945][ T1540] /dev/loop0: Can't lookup blockdev
[   62.723142][ T1540] veth1_macvtap: left promiscuous mode
[   62.728640][ T1540] macsec0: entered promiscuous mode
[   62.749609][ T1540] macsec0: entered allmulticast mode
[   62.991615][    T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[   63.051619][  T561] usb 5-1: USB disconnect, device number 6
[   63.152458][    T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   63.169316][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.178493][    T9] usb 3-1: config 0 descriptor??
[   63.191432][  T561] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   63.352587][  T561] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   63.362416][  T561] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   63.372362][  T561] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   63.385639][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   63.387456][  T561] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   63.395813][    T9] asix 3-1:0.0: probe with driver asix failed with error -32
[   63.416518][  T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   63.425070][  T561] usb 5-1: Product: syz
[   63.429306][  T561] usb 5-1: Manufacturer: syz
[   63.434088][  T561] usb 5-1: SerialNumber: syz
[   63.649999][  T561] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   63.743570][  T561] usb 3-1: USB disconnect, device number 13
[   63.800573][ T1564] binder: Bad value for 'stats'
[   63.850814][   T65] usb 5-1: USB disconnect, device number 7
[   63.862821][   T65] usblp0: removed
[   64.731029][  T561] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   64.871449][  T561] usb 5-1: device descriptor read/64, error -71
[   65.141413][  T561] usb 5-1: device descriptor read/64, error -71
[   65.149578][ T1594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[   65.192042][ T1598] binder: Bad value for 'max'
[   65.315867][ T1604] syz.3.397 (1604): attempted to duplicate a private mapping with mremap.  This is not supported.
[   65.391711][  T561] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   65.541465][  T561] usb 5-1: device descriptor read/64, error -71
[   65.741434][   T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   65.781435][  T561] usb 5-1: device descriptor read/64, error -71
[   65.891730][  T561] usb usb5-port1: attempt power cycle
[   65.898125][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   65.909611][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.926528][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.939605][   T31] usb 3-1: New USB device found, idVendor=056a, idProduct=003b, bcdDevice= 0.00
[   65.948843][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.958253][   T31] usb 3-1: config 0 descriptor??
[   66.240937][  T561] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   66.272544][  T561] usb 5-1: device descriptor read/8, error -71
[   66.368589][   T31] wacom 0003:056A:003B.000C: Unknown device_type for 'HID 056a:003b'. Ignoring.
[   66.402524][  T561] usb 5-1: device descriptor read/8, error -71
[   66.570499][  T600] usb 3-1: USB disconnect, device number 14
[   66.661416][  T561] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   66.682549][  T561] usb 5-1: device descriptor read/8, error -71
[   66.821753][  T561] usb 5-1: device descriptor read/8, error -71
[   66.941475][  T561] usb usb5-port1: unable to enumerate USB device
[   67.014508][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   67.014527][   T36] audit: type=1400 audit(1756455361.859:365): avc:  denied  { create } for  pid=1629 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   67.041478][   T36] audit: type=1326 audit(1756455361.879:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1629 comm="syz.3.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bacb8ebe9 code=0x0
[   67.160574][ T1634] rust_binder: Error while translating object.
[   67.160632][ T1634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   67.166913][ T1634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323
[   67.243135][   T36] audit: type=1400 audit(1756455362.089:367): avc:  denied  { setopt } for  pid=1636 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   67.392729][   T36] audit: type=1400 audit(1756455362.239:368): avc:  denied  { unmount } for  pid=818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   67.491438][  T561] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   67.505128][   T36] audit: type=1326 audit(1756455362.349:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.529456][   T36] audit: type=1326 audit(1756455362.349:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.553124][   T36] audit: type=1326 audit(1756455362.349:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.576783][   T36] audit: type=1326 audit(1756455362.349:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.600356][   T36] audit: type=1326 audit(1756455362.349:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.624301][   T36] audit: type=1326 audit(1756455362.349:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31898ebe9 code=0x7ffc0000
[   67.661091][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.661124][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.671413][  T561] usb 3-1: Using ep0 maxpacket: 32
[   67.685989][  T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.697336][  T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.707175][  T561] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   67.716246][  T561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.725071][  T561] usb 3-1: config 0 descriptor??
[   67.872292][ T1661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'.
[   67.905194][ T1663] overlayfs: failed to clone upperpath
[   67.911599][ T1663] 9pnet_fd: p9_fd_create_unix (1663): problem connecting socket: ./bus: -111
[   68.070090][ T1675] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   68.079144][ T1674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   68.092282][ T1674] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   68.101536][ T1675] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   68.110872][ T1675] overlayfs: missing 'lowerdir'
[   68.116073][ T1674] overlayfs: missing 'lowerdir'
[   68.142660][  T561] savu 0003:1E7D:2D5A.000D: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   68.396292][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.407042][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.474469][  T561] usb 3-1: USB disconnect, device number 15
[   68.504587][ T1697] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   68.771463][  T489] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   68.810412][ T1711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1851 sclass=netlink_route_socket pid=1711 comm=syz.3.435
[   68.902007][  T489] usb 1-1: device descriptor read/64, error -71
[   68.991581][ T1727] __vm_enough_memory: pid: 1727, comm: syz.2.439, bytes: 18014402804453376 not enough memory for the allocation
[   69.047747][ T1735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   69.047772][ T1735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:334
[   69.151617][  T489] usb 1-1: device descriptor read/64, error -71
[   69.322671][ T1756] rust_binder: Error while translating object.
[   69.322698][ T1756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   69.329109][ T1756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:66
[   69.369574][ T1765] rust_binder: Write failure EFAULT in pid:352
[   69.421447][  T489] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   69.453428][ T1774] capability: warning: `syz.3.455' uses 32-bit capabilities (legacy support in use)
[   69.463697][ T1774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=1774 comm=syz.3.455
[   69.561420][  T489] usb 1-1: device descriptor read/64, error -71
[   69.591438][  T561] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   69.691265][ T1786] overlayfs: failed to clone upperpath
[   69.741434][  T561] usb 5-1: Using ep0 maxpacket: 32
[   69.752919][  T561] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.769237][  T561] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.779492][  T561] usb 5-1: config 0 interface 0 has no altsetting 0
[   69.793433][  T561] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[   69.801429][  T489] usb 1-1: device descriptor read/64, error -71
[   69.802923][  T561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.819177][  T561] usb 5-1: config 0 descriptor??
[   69.921577][  T489] usb usb1-port1: attempt power cycle
[   70.257176][  T561] wacom 0003:056A:0057.000E: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.4-1/input0
[   70.275745][  T489] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   70.314559][  T489] usb 1-1: device descriptor read/8, error -71
[   70.442594][  T489] usb 1-1: device descriptor read/8, error -71
[   70.453841][ T1758] overlayfs: failed to resolve './bus': -2
[   70.471131][ T1820] rust_binder: inc_ref_done called when no active inc_refs
[   70.471158][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367
[   70.478914][ T1820] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   70.511820][ T1827] support for cryptoloop has been removed.  Use dm-crypt instead.
[   70.544208][ T1832] can: request_module (can-proto-0) failed.
[   70.552216][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.561216][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.691600][  T489] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   70.712469][  T489] usb 1-1: device descriptor read/8, error -71
[   70.842433][  T489] usb 1-1: device descriptor read/8, error -71
[   70.901439][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   70.951511][  T489] usb usb1-port1: unable to enumerate USB device
[   71.051447][    T9] usb 3-1: Using ep0 maxpacket: 32
[   71.057706][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.067892][    T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.077742][    T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   71.090734][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   71.097465][    T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   71.106734][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.115489][    T9] usb 3-1: config 0 descriptor??
[   71.653315][ T1856] netlink: 188 bytes leftover after parsing attributes in process `syz.3.481'.
[   71.728544][    T9] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0xd
[   71.750787][    T9] hid-thrustmaster 0003:044F:B65D.000F: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[   71.774680][    T9] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints?
[   71.848555][ T1901] /dev/rnullb0: Can't lookup blockdev
[   71.910383][ T1891] cgroup: fork rejected by pids controller in /syz0
[   72.089874][    C0] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71
[   72.099346][  T413] usb 3-1: USB disconnect, device number 16
[   72.353852][  T413] usb 5-1: USB disconnect, device number 12
[   72.455649][ T1981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   72.455688][ T1981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:383
[   72.472301][ T1985] overlayfs: failed to clone upperpath
[   72.494427][    T9] rust_binder: 1977: removing orphan mapping 0:4120
[   72.615739][ T2000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390
[   72.955621][ T2004] rust_binder: 243: no such ref 1
[   72.969981][ T2004] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   72.977258][ T2005] rust_binder: 243: no such ref 1
[   72.982380][ T2005] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   73.045909][   T36] kauditd_printk_skb: 34 callbacks suppressed
[   73.045930][   T36] audit: type=1400 audit(1756455367.889:409): avc:  denied  { execute } for  pid=2006 comm="syz.0.509" name="file0" dev="ramfs" ino=29935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   73.074498][   T36] audit: type=1400 audit(1756455367.889:410): avc:  denied  { execute_no_trans } for  pid=2006 comm="syz.0.509" path="/file0" dev="ramfs" ino=29935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   73.373950][   T36] audit: type=1400 audit(1756455368.219:411): avc:  denied  { read } for  pid=2018 comm="syz.2.513" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.398764][  T561] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   73.437420][ T2022] tipc: Started in network mode
[   73.444168][ T2022] tipc: Node identity ac14140f, cluster identity 4711
[   73.453790][ T2022] tipc: New replicast peer: 255.255.255.255
[   73.461610][ T2022] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.502727][ T2025] pim6reg1: entered promiscuous mode
[   73.511149][ T2025] pim6reg1: entered allmulticast mode
[   73.541399][  T561] usb 5-1: Using ep0 maxpacket: 16
[   73.554772][  T561] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   73.563752][  T561] usb 5-1: config 0 has no interface number 0
[   73.573801][  T561] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.588752][  T561] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.599597][  T561] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   73.600460][ T2024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.515'.
[   73.609308][  T561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.656871][  T561] usb 5-1: config 0 descriptor??
[   73.688371][    T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[   73.696663][    T9] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   73.838008][ T2038] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   73.847860][ T2038] rust_binder: Write failure EINVAL in pid:254
[   73.878563][   T36] audit: type=1400 audit(1756455368.719:412): avc:  denied  { ioctl } for  pid=2051 comm="syz.2.524" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   73.879672][ T2052] tipc: Started in network mode
[   73.914576][ T2052] tipc: Node identity 7f000001, cluster identity 4711
[   73.921570][ T2052] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   74.321025][  T561] uclogic 0003:28BD:0071.0011: pen parameters not found
[   74.328107][  T561] uclogic 0003:28BD:0071.0011: interface is invalid, ignoring
[   74.461428][    T9] tipc: Node number set to 2886997007
[   74.719371][   T36] audit: type=1400 audit(1756455369.559:413): avc:  denied  { bind } for  pid=2087 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   75.061463][   T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   75.211422][   T65] usb 3-1: Using ep0 maxpacket: 32
[   75.218541][   T65] usb 3-1: config 64 has an invalid interface number: 152 but max is 3
[   75.226960][   T65] usb 3-1: config 64 has an invalid interface number: 186 but max is 3
[   75.235392][   T65] usb 3-1: config 64 has an invalid interface number: 34 but max is 3
[   75.243872][   T65] usb 3-1: config 64 has an invalid interface number: 30 but max is 3
[   75.252151][   T65] usb 3-1: config 64 contains an unexpected descriptor of type 0x2, skipping
[   75.261051][   T65] usb 3-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[   75.269959][   T65] usb 3-1: config 64 has an invalid interface number: 89 but max is 3
[   75.278273][   T65] usb 3-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[   75.287170][   T65] usb 3-1: config 64 has 6 interfaces, different from the descriptor's value: 4
[   75.296339][   T65] usb 3-1: config 64 has no interface number 1
[   75.302609][   T36] audit: type=1400 audit(1756455370.139:414): avc:  denied  { setopt } for  pid=2111 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.322816][   T65] usb 3-1: config 64 has no interface number 2
[   75.329092][   T65] usb 3-1: config 64 has no interface number 3
[   75.335413][   T65] usb 3-1: config 64 has no interface number 4
[   75.341669][   T65] usb 3-1: config 64 has no interface number 5
[   75.347963][   T65] usb 3-1: config 64 interface 152 altsetting 208 has an invalid descriptor for endpoint zero, skipping
[   75.359214][   T65] usb 3-1: config 64 interface 152 altsetting 208 has an invalid descriptor for endpoint zero, skipping
[   75.370585][   T65] usb 3-1: config 64 interface 152 altsetting 208 has a duplicate endpoint with address 0x3, skipping
[   75.381588][   T65] usb 3-1: config 64 interface 186 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   75.392577][   T65] usb 3-1: config 64 interface 186 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64
[   75.403555][   T65] usb 3-1: config 64 interface 186 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[   75.414389][   T65] usb 3-1: config 64 interface 186 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   75.425361][   T65] usb 3-1: config 64 interface 186 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[   75.434684][ T2076] overlayfs: statfs failed on './file0'
[   75.438579][   T65] usb 3-1: too many endpoints for config 64 interface 34 altsetting 175: 242, using maximum allowed: 30
[   75.455361][   T65] usb 3-1: config 64 interface 34 altsetting 175 has a duplicate endpoint with address 0x4, skipping
[   75.470476][   T65] usb 3-1: config 64 interface 34 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[   75.486781][   T65] usb 3-1: config 64 interface 30 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   75.497726][   T65] usb 3-1: config 64 interface 30 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[   75.508523][   T65] usb 3-1: config 64 interface 30 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   75.519464][   T65] usb 3-1: config 64 interface 30 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   75.530188][   T65] usb 3-1: config 64 interface 30 altsetting 3 has an endpoint descriptor with address 0xBF, changing to 0x8F
[   75.541997][   T65] usb 3-1: config 64 interface 30 altsetting 3 endpoint 0x8F has invalid maxpacket 36230, setting to 64
[   75.553169][   T65] usb 3-1: config 64 interface 30 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64
[   75.564087][   T65] usb 3-1: config 64 interface 30 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[   75.574824][   T65] usb 3-1: config 64 interface 30 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[   75.585566][   T65] usb 3-1: config 64 interface 30 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 15
[   75.598724][   T65] usb 3-1: too many endpoints for config 64 interface 89 altsetting 50: 53, using maximum allowed: 30
[   75.610097][   T65] usb 3-1: config 64 interface 89 altsetting 50 has a duplicate endpoint with address 0x7, skipping
[   75.621100][   T65] usb 3-1: config 64 interface 89 altsetting 50 has a duplicate endpoint with address 0xF, skipping
[   75.632190][   T65] usb 3-1: config 64 interface 89 altsetting 50 has a duplicate endpoint with address 0x1, skipping
[   75.643192][   T65] usb 3-1: config 64 interface 89 altsetting 50 bulk endpoint 0x8 has invalid maxpacket 1023
[   75.653466][   T65] usb 3-1: config 64 interface 89 altsetting 50 has a duplicate endpoint with address 0x5, skipping
[   75.664389][   T65] usb 3-1: config 64 interface 89 altsetting 50 has an invalid descriptor for endpoint zero, skipping
[   75.675409][   T65] usb 3-1: config 64 interface 89 altsetting 50 has 7 endpoint descriptors, different from the interface descriptor's value: 53
[   75.688677][   T65] usb 3-1: config 64 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   75.699700][   T65] usb 3-1: config 64 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   75.710543][   T65] usb 3-1: config 64 interface 0 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[   75.721273][   T65] usb 3-1: config 64 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   75.732546][   T65] usb 3-1: config 64 interface 0 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[   75.743392][   T65] usb 3-1: config 64 interface 0 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[   75.754153][   T65] usb 3-1: config 64 interface 152 has no altsetting 0
[   75.761330][   T65] usb 3-1: config 64 interface 186 has no altsetting 0
[   75.768473][   T65] usb 3-1: config 64 interface 34 has no altsetting 0
[   75.775516][   T65] usb 3-1: config 64 interface 30 has no altsetting 0
[   75.782324][   T65] usb 3-1: config 64 interface 89 has no altsetting 0
[   75.789346][   T65] usb 3-1: config 64 interface 0 has no altsetting 0
[   75.797399][   T65] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffa, bcdDevice=18.db
[   75.806453][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.815014][   T36] audit: type=1400 audit(1756455370.649:415): avc:  denied  { ioctl } for  pid=2131 comm="syz.0.551" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   75.829983][ T2134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   75.839866][   T65] usb 3-1: Product: syz
[   75.840089][ T2134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274
[   75.849352][   T65] usb 3-1: Manufacturer: syz
[   75.867786][   T36] audit: type=1400 audit(1756455370.669:416): avc:  denied  { create } for  pid=2133 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[   75.887530][   T65] usb 3-1: SerialNumber: syz
[   75.915789][ T2145] binder: Unknown parameter 'context�'
[   75.958299][ T2158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=2158 comm=syz.3.560
[   76.027284][   T36] audit: type=1400 audit(1756455370.869:417): avc:  denied  { getopt } for  pid=2183 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   76.063500][   T36] audit: type=1400 audit(1756455370.909:418): avc:  denied  { bind } for  pid=2186 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.078376][ T2187] No source specified
[   76.101148][ T2095] x_tables: duplicate underflow at hook 1
[   76.110437][ T2196] /dev/sr0: Can't lookup blockdev
[   76.116840][ T2196] cgroup: Unknown subsys name '@'
[   76.117254][ T2198] cgroup: Unknown subsys name '@'
[   76.140870][   T65] usb 3-1: USB disconnect, device number 17
[   76.193973][  T561] usb 5-1: USB disconnect, device number 13
[   76.214226][ T2205] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   76.214251][ T2205] rust_binder: Read failure Err(EFAULT) in pid:304
[   76.221223][ T2216] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.227923][ T2205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304
[   76.230535][ T2216] rust_binder: 436: no such ref 1
[   76.249710][ T2216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:436
[   76.266589][ T2220] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.283363][ T2220] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   76.297880][ T2220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438
[   76.345367][ T2232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=2232 comm=syz.0.584
[   76.537554][ T2259] 9pnet_fd: Insufficient options for proto=fd
[   76.568122][ T2263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=2263 comm=syz.4.594
[   76.582560][ T2265] binder: Unknown parameter 'defcontext01777777777777777777777'
[   76.608565][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   76.641414][  T561] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   76.792468][  T561] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.802381][  T561] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   76.813330][  T561] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   76.824488][  T561] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   76.833577][  T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.841598][  T561] usb 3-1: Product: syz
[   76.845753][  T561] usb 3-1: Manufacturer: syz
[   76.850342][  T561] usb 3-1: SerialNumber: syz
[   76.851417][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   76.991440][    T9] usb 5-1: device descriptor read/64, error -71
[   77.115341][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.123984][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.231517][    T9] usb 5-1: device descriptor read/64, error -71
[   77.471444][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   77.601463][    T9] usb 5-1: device descriptor read/64, error -71
[   77.841454][    T9] usb 5-1: device descriptor read/64, error -71
[   77.951518][    T9] usb usb5-port1: attempt power cycle
[   78.291508][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   78.312610][    T9] usb 5-1: device descriptor read/8, error -71
[   78.442511][    T9] usb 5-1: device descriptor read/8, error -71
[   78.611448][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   78.611478][ T1079] Bluetooth: hci0: command 0x1003 tx timeout
[   78.644107][ T2283] syzkaller0: entered promiscuous mode
[   78.649679][ T2283] syzkaller0: entered allmulticast mode
[   78.657117][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   78.657135][   T36] audit: type=1400 audit(1756455373.499:424): avc:  denied  { relabelfrom } for  pid=2282 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   78.657512][ T2283] batadv_slave_1: entered promiscuous mode
[   78.663503][   T36] audit: type=1400 audit(1756455373.499:425): avc:  denied  { relabelto } for  pid=2282 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   78.683020][ T2283] batadv_slave_1: entered allmulticast mode
[   78.714220][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   78.742558][    T9] usb 5-1: device descriptor read/8, error -71
[   78.872503][    T9] usb 5-1: device descriptor read/8, error -71
[   78.967275][ T2291] binder: Unknown parameter 'fscontext?}'
[   78.981654][    T9] usb usb5-port1: unable to enumerate USB device
[   79.074003][ T2292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'.
[   79.083815][ T2293] binder: Unknown parameter ''
[   79.084571][   T36] audit: type=1326 audit(1756455373.929:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2290 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692018ebe9 code=0x7fc00000
[   79.112224][   T36] audit: type=1326 audit(1756455373.929:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2290 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692018ebe9 code=0x7fc00000
[   79.129897][ T2296] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   79.167228][ T2302] __vm_enough_memory: pid: 2302, comm: syz.0.607, bytes: 18014402804453376 not enough memory for the allocation
[   79.405773][  T561] usb 3-1: unit 4 not found!
[   79.419751][  T561] usb 3-1: USB disconnect, device number 18
[   79.572065][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   79.673979][ T2316] binder: Bad value for 'defcontext'
[   79.721426][    T9] usb 1-1: Using ep0 maxpacket: 16
[   79.729942][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.740966][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.750785][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.757449][    T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   79.760277][ T2325] syz.4.615 (2325): /proc/2324/oom_adj is deprecated, please use /proc/2324/oom_score_adj instead.
[   79.766812][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.781591][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'.
[   79.788279][    T9] usb 1-1: config 0 descriptor??
[   79.794447][  T561] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   79.800865][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'.
[   79.931451][  T561] usb 3-1: device descriptor read/64, error -71
[   80.171486][  T561] usb 3-1: device descriptor read/64, error -71
[   80.219502][    T9] hid-generic 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[   80.411485][  T561] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   80.476554][ T2309] rust_binder: Error while translating object.
[   80.476581][ T2309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   80.482908][ T2309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:347
[   80.499288][   T45] usb 1-1: USB disconnect, device number 19
[   80.541533][  T561] usb 3-1: device descriptor read/64, error -71
[   80.601407][   T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   80.712696][ T2353] 9pnet: Could not find request transport: xen
[   80.752453][   T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.762590][   T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.772193][   T65] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   80.781232][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   80.789284][  T561] usb 3-1: device descriptor read/64, error -71
[   80.795578][   T65] usb 5-1: SerialNumber: syz
[   80.901875][  T561] usb usb3-port1: attempt power cycle
[   81.003700][   T65] usb 5-1: 0:2 : does not exist
[   81.013070][   T65] usb 5-1: unit 5 not found!
[   81.020594][   T65] usb 5-1: USB disconnect, device number 18
[   81.035227][  T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   81.241455][  T561] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   81.262513][  T561] usb 3-1: device descriptor read/8, error -71
[   81.289306][ T2371] tc_dump_action: action bad kind
[   81.296009][ T2371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[   81.306093][   T36] audit: type=1400 audit(1756455376.149:428): avc:  denied  { bind } for  pid=2370 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.392494][  T561] usb 3-1: device descriptor read/8, error -71
[   81.561421][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   81.641425][  T561] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   81.662394][  T561] usb 3-1: device descriptor read/8, error -71
[   81.691451][    T9] usb 1-1: device descriptor read/64, error -71
[   81.755286][ T2387] netlink: 'syz.4.640': attribute type 4 has an invalid length.
[   81.775985][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[   81.792884][  T561] usb 3-1: device descriptor read/8, error -71
[   81.818666][ T2391] binder: Unknown parameter 'defcontext01777777777777777777777'
[   81.827430][   T36] audit: type=1400 audit(1756455376.669:429): avc:  denied  { mount } for  pid=2390 comm="syz.4.642" name="/" dev="configfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   81.850211][   T36] audit: type=1400 audit(1756455376.669:430): avc:  denied  { search } for  pid=2390 comm="syz.4.642" name="/" dev="configfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.872419][   T36] audit: type=1400 audit(1756455376.669:431): avc:  denied  { read } for  pid=2390 comm="syz.4.642" name="/" dev="configfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.894394][   T36] audit: type=1400 audit(1756455376.669:432): avc:  denied  { open } for  pid=2390 comm="syz.4.642" path="/" dev="configfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.911542][  T561] usb usb3-port1: unable to enumerate USB device
[   81.941429][    T9] usb 1-1: device descriptor read/64, error -71
[   82.061422][   T65] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[   82.181412][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   82.213144][   T65] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   82.226085][   T65] usb 5-1: config 1 interface 0 has no altsetting 0
[   82.234703][   T65] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40
[   82.243779][   T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.251778][   T65] usb 5-1: Product: ఁ
[   82.255947][   T65] usb 5-1: Manufacturer: 쯍ჵ楉刻㬳圇뿛돖캍蹔嚂蘗ᓗ洪ﺽ嗪獐ᰵᩋ䘏闐륷懲署遳됚찋웑곌곁݌궋䨿ꂫꇨ퐤檊რ떒䖻炮ᵏﲆ䥋ະ䜂臽峜ø鏄舧ǫໟ⡋ꝶ㵑띠㔭ⓔᨕ堝ᛙ왐掵趎멧麬侑㳱휅뺹柰⃆術ĸ⦆웘鯛﶑蟵譍ꞛႫ齑ⶵⴲ఺Ὂ㦛ꇟ뺵軞넅완ྞ౼뉦錟禒錺뺝﫴겯⤮䕖
[   82.290482][ T2391] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   82.311477][    T9] usb 1-1: device descriptor read/64, error -71
[   82.428130][ T2395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2395 comm=syz.2.643
[   82.484268][ T2399] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   82.493329][ T2399] overlayfs: missing 'lowerdir'
[   82.504161][   T65] usbhid 5-1:1.0: can't add hid device: -71
[   82.510756][   T65] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   82.520585][   T65] usb 5-1: USB disconnect, device number 19
[   82.551457][    T9] usb 1-1: device descriptor read/64, error -71
[   82.642114][ T2411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'.
[   82.667847][    T9] usb usb1-port1: attempt power cycle
[   82.681429][ T2419] /dev/rnullb0: Can't lookup blockdev
[   82.851450][   T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   83.001411][   T45] usb 3-1: Using ep0 maxpacket: 32
[   83.011409][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   83.011423][   T45] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[   83.011447][   T45] usb 3-1: config 0 has no interface number 0
[   83.025263][ T2426] rust_binder: Error while translating object.
[   83.030719][   T45] usb 3-1: config 0 interface 148 has no altsetting 0
[   83.033398][ T2426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   83.041133][   T45] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8
[   83.046380][ T2426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:153
[   83.055954][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.071108][    T9] usb 1-1: device descriptor read/8, error -71
[   83.074085][   T45] usb 3-1: Product: syz
[   83.092688][   T45] usb 3-1: Manufacturer: syz
[   83.097324][   T45] usb 3-1: SerialNumber: syz
[   83.106410][   T45] usb 3-1: config 0 descriptor??
[   83.121394][   T45] pl2303 3-1:0.148: required interrupt-in endpoint missing
[   83.127005][ T2430] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[   83.136552][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   83.143058][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   83.212703][    T9] usb 1-1: device descriptor read/8, error -71
[   83.236689][ T2436] /dev/rnullb0: Can't lookup blockdev
[   83.259684][ T2440] /dev/rnullb0: Can't lookup blockdev
[   83.327531][  T489] usb 3-1: USB disconnect, device number 23
[   83.451531][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   83.472444][    T9] usb 1-1: device descriptor read/8, error -71
[   83.602474][    T9] usb 1-1: device descriptor read/8, error -71
[   83.711830][    T9] usb usb1-port1: unable to enumerate USB device
[   83.918194][ T2454] /dev/rnullb0: Can't lookup blockdev
[   84.321388][ T2460] fuse: Unknown parameter 'A�k�	���UyF���%
�Bf�*a{q���73L��θ@y�6)O���e�s'_X;�;�h�9b�'
[   84.692048][   T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   84.763644][   T36] audit: type=1400 audit(1756455379.609:433): avc:  denied  { bind } for  pid=2477 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.862621][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.872917][   T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.882790][   T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   84.892031][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   84.900162][   T45] usb 1-1: SerialNumber: syz
[   85.119940][   T45] usb 1-1: 0:2 : does not exist
[   85.125040][   T45] usb 1-1: unit 5: unexpected type 0x0a
[   85.132274][   T45] usb 1-1: USB disconnect, device number 24
[   85.171405][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   85.171442][ T1079] Bluetooth: hci0: command 0x1003 tx timeout
[   85.195620][ T2485] rust_binder: Error while translating object.
[   85.195649][ T2485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   85.201870][ T2485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[   85.365828][   T36] audit: type=1400 audit(1756455380.209:434): avc:  denied  { listen } for  pid=2512 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   85.396126][   T36] audit: type=1400 audit(1756455380.219:435): avc:  denied  { create } for  pid=2515 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   85.419423][ T2518] netlink: 'syz.3.688': attribute type 1 has an invalid length.
[   85.445531][   T36] audit: type=1400 audit(1756455380.289:436): avc:  denied  { accept } for  pid=2519 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   85.473928][ T2524] syz.3.691: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[   85.488849][ T2524] CPU: 0 UID: 0 PID: 2524 Comm: syz.3.691 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[   85.488881][ T2524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[   85.488895][ T2524] Call Trace:
[   85.488901][ T2524]  <TASK>
[   85.488910][ T2524]  __dump_stack+0x21/0x30
[   85.488941][ T2524]  dump_stack_lvl+0x10c/0x190
[   85.488966][ T2524]  ? __cfi_dump_stack_lvl+0x10/0x10
[   85.488995][ T2524]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   85.489026][ T2524]  dump_stack+0x19/0x20
[   85.489051][ T2524]  warn_alloc+0x1bc/0x2a0
[   85.489076][ T2524]  ? stack_depot_save_flags+0x38/0x800
[   85.489098][ T2524]  ? __cfi_warn_alloc+0x10/0x10
[   85.489124][ T2524]  ? kasan_save_track+0x4f/0x80
[   85.489145][ T2524]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   85.489174][ T2524]  ? xskq_create+0x68/0x2a0
[   85.489203][ T2524]  ? xsk_init_queue+0xb6/0x120
[   85.489227][ T2524]  ? xsk_setsockopt+0x43f/0x6f0
[   85.489254][ T2524]  ? do_sock_setsockopt+0x26a/0x400
[   85.489281][ T2524]  ? __x64_sys_setsockopt+0x1b8/0x250
[   85.489310][ T2524]  ? x64_sys_call+0x2adc/0x2ee0
[   85.489338][ T2524]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.489360][ T2524]  __vmalloc_node_range_noprof+0x135/0x1420
[   85.489390][ T2524]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   85.489417][ T2524]  ? avc_has_perm+0x144/0x220
[   85.489445][ T2524]  ? kasan_save_alloc_info+0x40/0x50
[   85.489471][ T2524]  ? __kasan_kmalloc+0x96/0xb0
[   85.489493][ T2524]  vmalloc_user_noprof+0x77/0x90
[   85.489521][ T2524]  ? xskq_create+0xdb/0x2a0
[   85.489547][ T2524]  xskq_create+0xdb/0x2a0
[   85.489578][ T2524]  xsk_init_queue+0xb6/0x120
[   85.489608][ T2524]  xsk_setsockopt+0x43f/0x6f0
[   85.489638][ T2524]  ? __cfi_xsk_setsockopt+0x10/0x10
[   85.489666][ T2524]  ? do_futex+0x309/0x500
[   85.489697][ T2524]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   85.489721][ T2524]  ? security_socket_setsockopt+0x33/0xd0
[   85.489741][ T2524]  ? __cfi_xsk_setsockopt+0x10/0x10
[   85.489772][ T2524]  do_sock_setsockopt+0x26a/0x400
[   85.489803][ T2524]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   85.489836][ T2524]  __x64_sys_setsockopt+0x1b8/0x250
[   85.489869][ T2524]  x64_sys_call+0x2adc/0x2ee0
[   85.489899][ T2524]  do_syscall_64+0x58/0xf0
[   85.489925][ T2524]  ? clear_bhb_loop+0x50/0xa0
[   85.489947][ T2524]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.489968][ T2524] RIP: 0033:0x7f4bacb8ebe9
[   85.489986][ T2524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.490004][ T2524] RSP: 002b:00007f4bad931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   85.490028][ T2524] RAX: ffffffffffffffda RBX: 00007f4bacdb5fa0 RCX: 00007f4bacb8ebe9
[   85.490044][ T2524] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   85.490058][ T2524] RBP: 00007f4bacc11e19 R08: 0000000000000004 R09: 0000000000000000
[   85.490072][ T2524] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.490086][ T2524] R13: 00007f4bacdb6038 R14: 00007f4bacdb5fa0 R15: 00007fff02a30d28
[   85.490105][ T2524]  </TASK>
[   85.490113][ T2524] Mem-Info:
[   85.713765][ T2532] random: crng reseeded on system resumption
[   85.719062][ T2524] active_anon:8954 inactive_anon:0 isolated_anon:0
[   85.719062][ T2524]  active_file:24728 inactive_file:80330 isolated_file:0
[   85.719062][ T2524]  unevictable:2069 dirty:58 writeback:0
[   85.719062][ T2524]  slab_reclaimable:15334 slab_unreclaimable:72459
[   85.719062][ T2524]  mapped:30908 shmem:1509 pagetables:1093
[   85.719062][ T2524]  sec_pagetables:0 bounce:0
[   85.719062][ T2524]  kernel_misc_reclaimable:0
[   85.719062][ T2524]  free:1411850 free_pcp:4994 free_cma:0
[   85.735694][ T2536] Restarting kernel threads ... 
[   85.742090][ T2524] Node 0 active_anon:35816kB inactive_anon:0kB active_file:98912kB inactive_file:321320kB unevictable:8276kB isolated(anon):0kB isolated(file):0kB mapped:123632kB dirty:232kB writeback:0kB shmem:6036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6120kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no
[   85.764266][ T2536] done.
[   85.781744][ T2524] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:68kB free_cma:0kB
[   85.781808][ T2524] lowmem_reserve[]: 0 3921 3921
[   85.922987][ T2524] Normal free:2693204kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36008kB inactive_anon:0kB active_file:98912kB inactive_file:321320kB unevictable:8192kB writepending:232kB present:5242880kB managed:4016120kB mlocked:8192kB bounce:0kB free_pcp:6220kB local_pcp:4208kB free_cma:0kB
[   85.957002][ T2524] lowmem_reserve[]: 0 0 0
[   85.961567][ T2524] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   85.978245][ T2524] Normal: 241*4kB (UME) 363*8kB (UME) 1053*16kB (UME) 429*32kB (UME) 263*64kB (UME) 51*128kB (UM) 33*256kB (UME) 14*512kB (UME) 9*1024kB (ME) 3*2048kB (M) 638*4096kB (UM) = 2702028kB
[   85.996798][ T2524] 106545 total pagecache pages
[   86.001884][ T2524] 3 pages in swap cache
[   86.006099][ T2524] Free swap  = 116220kB
[   86.010261][ T2524] Total swap = 124996kB
[   86.014470][ T2524] 2097051 pages RAM
[   86.018313][ T2524] 0 pages HighMem/MovableOnly
[   86.023011][ T2524] 351530 pages reserved
[   86.027168][ T2524] 0 pages cma reserved
[   86.033347][ T2524] Memory allocations:
[   86.037374][ T2524]          0 B        0 init/main.c:1370 func:do_initcalls
[   86.044607][ T2524]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   86.052840][ T2524]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   86.060910][ T2524]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   86.068875][   T45] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[   86.069106][ T2524]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   86.084436][ T2524]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   86.093120][ T2524]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   86.101107][ T2524]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   86.109112][ T2524]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   86.117163][ T2524]          0 B        0 init/initramfs.c:101 func:find_link
[   86.152336][   T36] audit: type=1400 audit(1756455380.999:437): avc:  denied  { mount } for  pid=2550 comm="syz.3.700" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   86.201433][ T2556] 9pnet_fd: Insufficient options for proto=fd
[   86.211526][  T561] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   86.221772][   T45] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   86.230767][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   86.238433][   T45] usb 3-1: can't read configurations, error -61
[   86.355003][ T2567] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   86.362337][  T561] usb 1-1: Using ep0 maxpacket: 8
[   86.362487][ T2567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185
[   86.368570][  T561] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[   86.386964][   T45] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[   86.394893][  T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.403671][  T561] usb 1-1: config 0 descriptor??
[   86.439467][ T2560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'.
[   86.448660][ T2560] /dev/rnullb0: Can't lookup blockdev
[   86.551775][   T45] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   86.560776][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   86.568553][   T45] usb 3-1: can't read configurations, error -61
[   86.575012][   T45] usb usb3-port1: attempt power cycle
[   86.653346][  T561] usbhid 1-1:0.0: can't add hid device: -71
[   86.659359][  T561] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   86.668050][  T561] usb 1-1: USB disconnect, device number 25
[   87.054500][ T2579] tmpfs: Bad value for 'nr_inodes'
[   87.421410][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   87.583123][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   87.605351][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.617035][ T2587] overlay: Unknown parameter 'obj_user'
[   87.622950][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.649058][ T2589] 9pnet_fd: p9_fd_create_unix (2589): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   87.678129][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   87.692391][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   87.701802][    T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   87.710145][    T9] usb 1-1: Manufacturer: syz
[   87.716452][    T9] usb 1-1: config 0 descriptor??
[   87.743574][   T45] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[   87.773047][   T45] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   87.782051][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   87.789651][   T45] usb 3-1: can't read configurations, error -61
[   87.824994][ T2592] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.877013][ T2591] rust_binder: Error while translating object.
[   87.883606][ T2591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   87.889825][ T2591] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   87.899990][ T2591] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:193
[   87.916167][ T1621] rust_binder: 2590: removing orphan mapping 0:24
[   87.932555][   T45] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[   87.952168][   T45] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   87.961048][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   87.968710][   T45] usb 3-1: can't read configurations, error -61
[   87.975119][   T45] usb usb3-port1: unable to enumerate USB device
[   87.985776][ T2597] rust_binder: Error while translating object.
[   87.985811][ T2597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   87.992034][ T2597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:197
[   88.126488][    T9] usbhid 1-1:0.0: can't add hid device: -71
[   88.141777][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   88.151805][    T9] usb 1-1: USB disconnect, device number 26
[   88.421548][ T2599] fuse: Unknown parameter 'rootm'
[   88.724390][ T2608] rust_binder: Write failure EFAULT in pid:488
[   88.931435][   T45] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[   89.071429][ T1621] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[   89.091460][   T45] usb 1-1: Invalid ep0 maxpacket: 64
[   89.222439][ T1621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.232681][ T1621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.241619][   T45] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[   89.249922][ T1621] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   89.259242][ T1621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   89.267275][ T1621] usb 3-1: SerialNumber: syz
[   89.273855][ T1621] usb 3-1: 0:2 : does not exist
[   89.347317][   T36] audit: type=1400 audit(1756455384.189:438): avc:  denied  { setopt } for  pid=2634 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   89.397392][ T2641] binder: Unknown parameter 'context�'
[   89.403003][   T45] usb 1-1: Invalid ep0 maxpacket: 64
[   89.408523][   T45] usb usb1-port1: attempt power cycle
[   89.422002][ T2643] tipc: Started in network mode
[   89.426994][ T2643] tipc: Node identity 8e6340c04feb, cluster identity 4711
[   89.434259][ T2643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.441054][ T2643] syzkaller0: entered promiscuous mode
[   89.446578][ T2643] syzkaller0: entered allmulticast mode
[   89.453400][ T2642] tipc: Resetting bearer <eth:syzkaller0>
[   89.460627][ T2642] tipc: Disabling bearer <eth:syzkaller0>
[   89.481267][    T9] usb 3-1: USB disconnect, device number 28
[   89.500661][   T36] audit: type=1400 audit(1756455384.339:439): avc:  denied  { ioctl } for  pid=2646 comm="syz.2.734" path="socket:[33056]" dev="sockfs" ino=33056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.527690][ T2649] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.532836][   T36] audit: type=1400 audit(1756455384.379:440): avc:  denied  { map } for  pid=2648 comm="syz.4.735" path="/74/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.544465][ T2649] netfs: Couldn't get user pages (rc=-14)
[   89.589771][ T2661] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.709236][ T2670] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.733120][   T36] audit: type=1400 audit(1756455384.579:441): avc:  denied  { mounton } for  pid=2671 comm="syz.2.742" path="/177/file0" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   89.771411][   T45] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[   89.812640][   T45] usb 1-1: Invalid ep0 maxpacket: 64
[   89.941398][   T45] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[   89.961826][   T45] usb 1-1: Invalid ep0 maxpacket: 64
[   89.970168][   T45] usb usb1-port1: unable to enumerate USB device
[   90.241410][  T413] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   90.393152][  T413] usb 3-1: config 1 interface 0 has no altsetting 0
[   90.401246][  T413] usb 3-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40
[   90.410345][  T413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.419906][  T413] usb 3-1: Product: 峧弅엠
ᰩ䈧萒觺錢阄ᾟ㴨愱䴶䌿䚼熊⻦៤쟛淮剤⚓貿ӛ륻싴ⳣ톐
[   90.432229][  T413] usb 3-1: Manufacturer: о
[   90.436803][  T413] usb 3-1: SerialNumber: 釶㛎랺荃뮰手룺퀩軥ᖖ䘘鑵﯂䉟㸖ἡఏ띲砫鬮趠侂䭵㳬똕磩ᜭ垻見㡇䤄ᣪ衿弄泚붂쮥䵜暦韜䫒召盉두얥ໄ豛皩ቬ䳥貂ㅸꨡ䞓ᒖ럱뛰ᵂ耟蠰钴ἰ늰丒띃䔚逳偽퉋౏痪㚫퓮ｶِ艫櫳Ꞣ≷№莧Ɔ㸺䩕핗쨳餂혅쬚瓟ਲ਼섁㸇㴱
[   90.536064][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'.
[   90.544978][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'.
[   90.673572][  T413] usbhid 3-1:1.0: can't add hid device: -71
[   90.679675][  T413] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   90.688510][  T413] usb 3-1: USB disconnect, device number 29
[   91.382487][ T2703] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.436508][ T2704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.837772][   T36] audit: type=1400 audit(1756455386.679:442): avc:  denied  { mount } for  pid=2726 comm="syz.0.758" name="/" dev="pstore" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   92.071405][ T1621] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   92.104334][   T36] audit: type=1400 audit(1756455386.949:443): avc:  denied  { shutdown } for  pid=2730 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.129428][ T2734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.761'.
[   92.131409][   T36] audit: type=1400 audit(1756455386.969:444): avc:  denied  { nlmsg_read } for  pid=2732 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.140496][ T2733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.761'.
[   92.173226][ T2738] vlan0: entered promiscuous mode
[   92.178528][ T2738] vlan0: entered allmulticast mode
[   92.180023][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   92.183869][ T2738] veth0_vlan: entered allmulticast mode
[   92.185665][ T2741] rust_binder: Read failure Err(EFAULT) in pid:568
[   92.231405][ T1621] usb 1-1: Using ep0 maxpacket: 8
[   92.252457][ T1621] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   92.260906][ T1621] usb 1-1: config 179 has no interface number 0
[   92.267498][ T1621] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   92.282283][ T1621] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   92.294795][ T1621] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   92.306432][ T1621] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   92.319819][ T1621] usb 1-1: config 179 interface 65 has no altsetting 0
[   92.326796][ T1621] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   92.335912][ T1621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.354072][ T1621] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13
[   92.369609][   T36] audit: type=1400 audit(1756455387.209:445): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=606 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.390250][ T2754] bridge0: port 3(ip6gretap0) entered blocking state
[   92.395129][   T36] audit: type=1400 audit(1756455387.209:446): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=606 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.401025][ T2754] bridge0: port 3(ip6gretap0) entered disabled state
[   92.424926][   T94] input input13: unable to receive magic message: -110
[   92.436451][   T36] audit: type=1400 audit(1756455387.279:447): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=606 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.449865][ T2754] ip6gretap0: entered allmulticast mode
[   92.468025][ T2754] ip6gretap0: entered promiscuous mode
[   92.471446][   T94] input input13: unable to receive magic message: -32
[   92.473637][ T2754] bridge0: port 3(ip6gretap0) entered blocking state
[   92.486995][ T2754] bridge0: port 3(ip6gretap0) entered forwarding state
[   92.498089][   T94] input input13: unable to receive magic message: -32
[   92.511632][   T94] input input13: unable to receive magic message: -32
[   92.528163][   T36] audit: type=1326 audit(1756455387.369:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz.3.770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bacb8ebe9 code=0x0
[   92.542656][ T2769] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[   92.551006][   T36] audit: type=1326 audit(1756455387.369:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz.3.770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bacb8ebe9 code=0x0
[   92.561632][ T1621] usb 1-1: USB disconnect, device number 31
[   92.581595][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   92.583585][ T2769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[   92.600353][ T1621] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   92.620186][   T36] audit: type=1400 audit(1756455387.459:450): avc:  denied  { append } for  pid=2768 comm="syz.2.771" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   92.656784][   T36] audit: type=1400 audit(1756455387.499:451): avc:  denied  { execute } for  pid=2777 comm="syz.3.774" path="/dev/rnullb0" dev="tmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   92.693999][ T2782] /dev/rnullb0: Can't open blockdev
[   92.737090][ T2792] /dev/rnullb0: Can't open blockdev
[   92.852970][ T2805] rust_binder: 609: no such ref 2
[   92.858028][ T2805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609
[   93.229624][ T2813] usb usb9: usbfs: process 2813 (syz.0.785) did not claim interface 0 before use
[   93.254675][ T2822] /dev/rnullb0: Can't lookup blockdev
[   93.931433][ T1621] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   94.081387][ T1621] usb 5-1: Using ep0 maxpacket: 16
[   94.088652][ T1621] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.106486][ T1621] usb 5-1: config 1 interface 0 has no altsetting 0
[   94.115593][ T1621] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40
[   94.124759][ T1621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.132799][ T1621] usb 5-1: Product: syz
[   94.137040][ T1621] usb 5-1: Manufacturer: syz
[   94.141702][ T1621] usb 5-1: SerialNumber: syz
[   94.341412][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   94.362559][ T1621] usbhid 5-1:1.0: can't add hid device: -71
[   94.368747][ T1621] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   94.378728][ T1621] usb 5-1: USB disconnect, device number 20
[   94.389693][ T2849] overlayfs: failed to resolve './file1': -2
[   94.492452][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.502635][    T9] usb 1-1: config 0 has no interfaces?
[   94.509587][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   94.518723][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   94.526855][    T9] usb 1-1: Product: syz
[   94.531044][    T9] usb 1-1: Manufacturer: syz
[   94.535678][    T9] usb 1-1: SerialNumber: syz
[   94.540880][    T9] usb 1-1: config 0 descriptor??
[   94.748808][ T1621] usb 1-1: USB disconnect, device number 32
[   95.026811][ T2875] /dev/rnullb0: Can't lookup blockdev
[   95.093217][ T2878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2878 comm=syz.3.811
[   95.231427][    T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[   95.266847][ T2880] fuseblk: Bad value for 'user_id'
[   95.272025][ T2880] fuseblk: Bad value for 'user_id'
[   95.382911][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.391680][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.400693][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.412170][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.423126][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[   95.430856][    T9] usb 5-1: can't read configurations, error -71
[   95.471881][ T2906] netlink: 140 bytes leftover after parsing attributes in process `syz.2.819'.
[   95.481013][ T2906] netlink: 48 bytes leftover after parsing attributes in process `syz.2.819'.
[   95.620877][ T2921] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.621197][ T2921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   95.628053][ T2921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:623
[   95.670971][ T2930] rust_binder: Write failure EINVAL in pid:444
[   95.755446][ T2939] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   95.896383][ T2956] overlayfs: failed to resolve './file0': -2
[   95.951399][  T413] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   95.997838][ T2962] netlink: 'syz.3.839': attribute type 4 has an invalid length.
[   96.007395][ T2962] netlink: 'syz.3.839': attribute type 5 has an invalid length.
[   96.015320][ T2962] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.839'.
[   96.089710][ T2976] rust_binder: 254: no such ref 2
[   96.094986][ T2976] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   96.117681][  T413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.119861][ T2980] rust_binder: 655: no such ref 1
[   96.132198][  T413] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.142740][ T2979] rust_binder: Write failure EFAULT in pid:256
[   96.143302][  T413] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   96.158925][  T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   96.171990][  T413] usb 1-1: SerialNumber: syz
[   96.382956][  T413] usb 1-1: 0:2 : does not exist
[   96.389536][  T413] usb 1-1: USB disconnect, device number 33
[   96.441417][ T1621] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   96.481415][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   96.592491][ T1621] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   96.601177][ T1621] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   96.611536][ T1621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   96.620525][ T1621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   96.631536][ T1621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   96.643775][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.645653][ T1621] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   96.653971][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   96.662876][ T1621] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   96.672142][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.679855][ T1621] usb 3-1: Product: syz
[   96.689216][    T9] usb 5-1: config 0 descriptor??
[   96.692141][ T1621] usb 3-1: Manufacturer: syz
[   96.703880][ T1621] cdc_wdm 3-1:1.0: skipping garbage
[   96.709199][ T1621] cdc_wdm 3-1:1.0: skipping garbage
[   96.715132][ T1621] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   96.721059][ T1621] cdc_wdm 3-1:1.0: Unknown control protocol
[   96.904603][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   96.904623][   T36] audit: type=1400 audit(1756455391.749:457): avc:  denied  { ioctl } for  pid=2981 comm="syz.4.848" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   96.912288][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[   96.940164][ T1621] usb 3-1: USB disconnect, device number 30
[   97.058002][   T36] audit: type=1400 audit(1756455391.899:458): avc:  denied  { map } for  pid=2995 comm="syz.0.853" path="socket:[35917]" dev="sockfs" ino=35917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   97.099338][ T2997] can: request_module (can-proto-0) failed.
[   97.105980][ T2997] netlink: 'syz.0.853': attribute type 11 has an invalid length.
[   97.114175][ T2997] overlay: Unknown parameter 'appraise'
[   97.137665][    T9] lenovo 0003:17EF:6047.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[   97.353096][   T36] audit: type=1400 audit(1756455392.199:459): avc:  denied  { read write } for  pid=2986 comm="syz.2.849" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.376507][   T36] audit: type=1400 audit(1756455392.199:460): avc:  denied  { open } for  pid=2986 comm="syz.2.849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.591430][  T413] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   97.742543][  T413] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   97.751490][  T413] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   97.762018][  T413] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   97.771303][  T413] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   97.782938][  T413] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   97.800403][  T413] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   97.809900][  T413] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   97.818118][  T413] usb 3-1: Product: syz
[   97.822610][  T413] usb 3-1: Manufacturer: syz
[   97.832635][  T413] cdc_wdm 3-1:1.0: skipping garbage
[   97.839549][  T413] cdc_wdm 3-1:1.0: skipping garbage
[   97.845306][  T413] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   97.851237][  T413] cdc_wdm 3-1:1.0: Unknown control protocol
[   97.941796][ T2982] netlink: 'syz.4.848': attribute type 11 has an invalid length.
[   97.950872][    T9] lenovo 0003:17EF:6047.0013: Sensitivity setting failed: -71
[   97.960500][    T9] usb 5-1: USB disconnect, device number 22
[   98.041635][  T413] usb 3-1: USB disconnect, device number 31
[   98.051695][   T36] audit: type=1400 audit(1756455392.899:461): avc:  denied  { accept } for  pid=3023 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   98.117866][   T36] audit: type=1400 audit(1756455392.959:462): avc:  denied  { listen } for  pid=3034 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   98.142696][ T1621] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   98.302580][ T1621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.312775][ T1621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   98.321717][ T1621] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   98.336406][ T1621] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.345666][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.353693][ T1621] usb 1-1: Product: syz
[   98.357861][ T1621] usb 1-1: Manufacturer: syz
[   98.362593][ T1621] usb 1-1: SerialNumber: syz
[   98.365455][ T3043] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36
[   98.367204][ T3043] rust_binder: Error while translating object.
[   98.370465][ T1621] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   98.376304][ T3043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   98.382469][ T1621] cdc_ncm 1-1:1.0: bind() failure
[   98.389490][ T3043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:675
[   98.552587][ T3061] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   98.570152][ T3061] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   98.576100][  T561] usb 1-1: USB disconnect, device number 34
[   98.604723][   T36] audit: type=1400 audit(1756455393.449:463): avc:  denied  { bind } for  pid=3067 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.624182][   T36] audit: type=1400 audit(1756455393.469:464): avc:  denied  { name_bind } for  pid=3067 comm="syz.3.875" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   98.626120][ T3068] netlink: 'syz.3.875': attribute type 15 has an invalid length.
[   98.645510][   T36] audit: type=1400 audit(1756455393.469:465): avc:  denied  { node_bind } for  pid=3067 comm="syz.3.875" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   98.723016][   T36] audit: type=1400 audit(1756455393.569:466): avc:  denied  { create } for  pid=3075 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   98.755702][ T3082] futex_wake_op: syz.3.880 tries to shift op by 144; fix this program
[   98.801418][ T1621] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[   98.951383][ T1621] usb 5-1: Using ep0 maxpacket: 16
[   98.957636][ T1621] usb 5-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.00
[   98.966895][ T1621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.978829][ T1621] usb 5-1: config 0 descriptor??
[   99.141831][ T3091] rust_binder: Error while translating object.
[   99.141870][ T3091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   99.148094][ T3091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:461
[   99.185012][ T3065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.203052][ T3065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.306922][ T3095] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=3095 comm=syz.3.885
[   99.319390][ T3095] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65 sclass=netlink_xfrm_socket pid=3095 comm=syz.3.885
[   99.332089][ T3095] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=3095 comm=syz.3.885
[   99.351577][ T3095] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=3095 comm=syz.3.885
[   99.391431][  T413] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   99.530446][ T3102] fuse: Bad value for 'fd'
[   99.544337][  T413] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 251, changing to 11
[   99.555599][  T413] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   99.562644][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'.
[   99.568805][  T413] usb 1-1: config 1 interface 0 has no altsetting 0
[   99.586022][  T413] usb 1-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.40
[   99.595412][  T413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.603687][  T413] usb 1-1: Product: 朸穦螿㳊ꄑ畒̤䍘朰뱷饮붹뒏忝㳜℅楴⽗뽂㓋ឋ鰟뾯
[   99.616361][  T413] usb 1-1: Manufacturer: 쳘㩡納㢐棘⩜耵⃅槐㙢ϥ繊龬Ⅱ㳉瞽鴕겠磻쇲눌덛⁸㧄蔔悭涼䯦⁩ꥭ觴㶰ᨩ롈褯詋렕踐驚덩攇ᙣ痯稦茎秀龜Ҁ泠췑ᢍᘈﻇ䷯盉ॡ탞ꕆꦂ緊ἔ膈㍺Հ寗⪓꡴嘑䛔檣᭶蛯傋펎ϒ坲ᮂ柸좄펊宆ꏹ弨콄넯㻗䝓ㅘ㛉늳׫높መỻ᜻꿪꼆秒
[   99.621390][ T1621] usbhid 5-1:0.0: can't add hid device: -71
[   99.649331][  T413] usb 1-1: SerialNumber: ఖ
[   99.654802][ T1621] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   99.671400][  T489] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   99.673161][ T1621] usb 5-1: USB disconnect, device number 23
[   99.832462][  T489] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.843129][  T489] usb 3-1: config 0 has no interfaces?
[   99.850064][  T489] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   99.859185][  T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   99.867323][  T489] usb 3-1: Product: syz
[   99.871520][  T489] usb 3-1: Manufacturer: syz
[   99.876407][  T489] usb 3-1: SerialNumber: syz
[   99.881901][  T489] usb 3-1: config 0 descriptor??
[  100.078974][  T413] usbhid 1-1:1.0: can't add hid device: -71
[  100.085004][  T413] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  100.094475][  T413] usb 1-1: USB disconnect, device number 35
[  100.191153][ T3121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:697
[  100.502839][ T3146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'.
[  100.577241][ T3151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'.
[  100.587585][ T3151] ./cgroup: Can't lookup blockdev
[  102.430933][ T1621] usb 3-1: USB disconnect, device number 32
[  102.438244][  T489] rust_binder: 3098: removing orphan mapping 0:24
[  108.886483][ T3192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.914'.
[  108.911594][ T3196] overlayfs: failed to resolve './file1': -2
[  108.929393][ T3201] cannot load conntrack support for proto=3
[  109.147238][ T3218] tmpfs: Unknown parameter 'h'
[  109.461403][  T413] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  109.623893][  T413] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  109.649003][  T413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.673346][  T413] usb 3-1: Product: syz
[  109.686306][  T413] usb 3-1: Manufacturer: syz
[  109.700769][  T413] usb 3-1: SerialNumber: syz
[  109.713139][  T413] usb 3-1: config 0 descriptor??
[  109.926179][ T3227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  110.572691][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  110.572711][   T36] audit: type=1400 audit(1756455405.419:469): avc:  denied  { connect } for  pid=3295 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  110.762943][  T413] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  110.773170][  T413] asix 3-1:0.0: probe with driver asix failed with error -71
[  110.785444][  T413] usb 3-1: USB disconnect, device number 33
[  110.811152][   T36] audit: type=1400 audit(1756455405.649:470): avc:  denied  { create } for  pid=3298 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  110.863131][ T3306] fuse: Unknown parameter 'grop_id'
[  110.915964][ T3314] /dev/rnullb0: Can't lookup blockdev
[  111.014490][ T3320] overlayfs: failed to clone upperpath
[  111.046402][   T36] audit: type=1400 audit(1756455405.889:471): avc:  denied  { accept } for  pid=3327 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  111.047363][ T3328] /dev/rnullb0: Can't lookup blockdev
[  111.071410][  T561] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  111.087224][   T36] audit: type=1400 audit(1756455405.929:472): avc:  denied  { getopt } for  pid=3332 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  111.124226][   T36] audit: type=1400 audit(1756455405.969:473): avc:  denied  { mounton } for  pid=3337 comm="syz.4.955" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  111.178225][ T3348] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.959'.
[  111.204906][ T3353] /dev/rnullb0: Can't lookup blockdev
[  111.231410][  T561] usb 1-1: Using ep0 maxpacket: 32
[  111.240698][  T561] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.250900][  T561] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.262533][  T561] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  111.273755][  T561] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  111.281622][ T3366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3366 comm=syz.3.965
[  111.283725][  T561] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  111.309241][  T561] usb 1-1: config 0 interface 0 has no altsetting 0
[  111.321051][  T561] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  111.331970][  T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.342083][  T561] usb 1-1: config 0 descriptor??
[  111.379242][ T3384] rust_binder: Write failure EFAULT in pid:722
[  111.391394][  T413] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  111.396969][ T3389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  111.405578][ T3389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:725
[  111.428852][   T36] audit: type=1400 audit(1756455406.269:474): avc:  denied  { listen } for  pid=3395 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.447336][ T3398] overlayfs: failed to clone upperpath
[  111.489893][ T3406] tmpfs: Unknown parameter 'v��{�C�`^Y'
[  111.562751][  T413] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 186, changing to 11
[  111.574368][  T413] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  111.587404][  T413] usb 5-1: config 1 interface 0 has no altsetting 0
[  111.595782][  T413] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.40
[  111.621407][  T413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.637857][  T413] usb 5-1: Product: и
[  111.642100][  T413] usb 5-1: Manufacturer: ࠚ
[  111.646880][  T413] usb 5-1: SerialNumber: ᐁ
[  111.751064][  T561] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[  111.760546][  T561] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[  111.768612][  T561] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[  111.776693][  T561] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[  111.784736][  T561] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0
[  111.793621][  T561] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  111.808928][  T561] hid-thrustmaster 0003:044F:B65D.0014: setup data couldn't be sent
[  111.963118][ T3299] /dev/rnullb0: Can't open blockdev
[  111.969051][    C1] hid-thrustmaster 0003:044F:B65D.0014: URB to get model id failed with error -71
[  111.970969][  T489] usb 1-1: USB disconnect, device number 36
[  112.256758][ T3344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.266105][ T3344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.481886][ T3344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.491594][ T3344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.601459][  T561] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  112.751401][  T561] usb 3-1: Using ep0 maxpacket: 16
[  112.757971][  T561] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  112.766813][  T561] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  112.777068][  T561] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.785989][  T561] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  112.800323][  T561] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.809455][  T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.817497][  T561] usb 3-1: Product: 䵵⁝ꖝ龇㐲᱗麙ᝧ봱噀ᬭ䚥꾤뾑䥣戌銿斡駀꾎驦ධ杄潽✠୩෌植深ჸ櫦멷헌
[  112.830585][  T561] usb 3-1: Manufacturer: ಗꅵ洟衔ݒ匁餬혾⭁뫜⥓爯ⶼﮗ눀뢰鹤⬏ᷛᝮ䕴팬魧៥Ⳇ헔褫꠭桦삢僌飚璬頄ᥲꠝ缣먒ⷪ馪ᘁ寫킡貘䈝狹㻌侢돴狔፪蓢鬺❾賙蟾鲇迂謫͌픸⢃듿敿᷉ힸ瘡聢ƀ鄭ꄈਸ਼焛㖺༅঱♜擯㞦錪梺碇が咝궆騁ᚑ獅馶ۮ๳漢轓섎理ഠꠡ
[  112.863027][  T561] usb 3-1: SerialNumber: syz
[  113.074010][  T561] usb 3-1: 0:2 : does not exist
[  113.081557][  T561] usb 3-1: USB disconnect, device number 34
[  113.093192][ T3202] udevd[3202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.110173][  T413] usbhid 5-1:1.0: can't add hid device: -71
[  113.116361][  T413] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  113.125125][  T413] usb 5-1: USB disconnect, device number 24
[  113.388049][   T36] audit: type=1400 audit(1756455408.229:475): avc:  denied  { mount } for  pid=3510 comm="syz.3.999" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  113.439442][ T3520] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1002'.
[  113.921466][  T413] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  113.921466][  T561] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  114.005137][ T3543] netlink: 'syz.3.1012': attribute type 11 has an invalid length.
[  114.081434][  T413] usb 5-1: Using ep0 maxpacket: 32
[  114.081434][  T561] usb 3-1: Using ep0 maxpacket: 32
[  114.082702][  T413] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  114.087792][  T561] usb 3-1: config index 0 descriptor too short (expected 8242, got 50)
[  114.092060][  T413] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  114.100352][  T561] usb 3-1: config 0 has an invalid interface number: 234 but max is 0
[  114.108912][  T413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  114.117238][  T561] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.125718][  T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.134763][  T561] usb 3-1: config 0 has no interface number 0
[  114.149670][  T413] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.154577][  T561] usb 3-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  114.160610][  T413] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  114.170061][  T561] usb 3-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  114.180161][  T413] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  114.192987][  T561] usb 3-1: config 0 interface 234 has no altsetting 0
[  114.202955][  T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.213636][  T561] usb 3-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2
[  114.221647][  T413] usb 5-1: config 0 descriptor??
[  114.227063][  T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.248881][  T561] usb 3-1: Product: syz
[  114.253097][  T561] usb 3-1: Manufacturer: syz
[  114.257699][  T561] usb 3-1: SerialNumber: syz
[  114.263299][  T561] usb 3-1: config 0 descriptor??
[  114.472530][  T561] ums-sddr09 3-1:0.234: USB Mass Storage device detected
[  114.490155][  T413] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  114.503742][  T413] usb 5-1: USB disconnect, device number 25
[  114.510307][  T413] usblp0: removed
[  114.524429][  T561] ums-sddr09 3-1:0.234: probe with driver ums-sddr09 failed with error -22
[  114.535463][  T561] usb 3-1: USB disconnect, device number 35
[  114.931589][  T413] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  114.988681][ T3553] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  115.066097][ T3557] overlayfs: failed to clone upperpath
[  115.074330][ T3557] overlayfs: failed to clone upperpath
[  115.080268][ T3557] overlayfs: failed to clone upperpath
[  115.085803][  T413] usb 5-1: Using ep0 maxpacket: 32
[  115.091492][ T3557] overlayfs: failed to clone upperpath
[  115.092244][  T413] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  115.105459][  T413] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  115.105844][ T3557] overlayfs: failed to clone upperpath
[  115.114539][  T413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  115.128808][  T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.129176][ T3557] overlayfs: failed to clone upperpath
[  115.138644][  T413] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.153654][  T413] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  115.154036][ T3557] overlayfs: failed to clone upperpath
[  115.166777][  T413] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  115.181255][  T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.181658][ T3557] overlayfs: failed to clone upperpath
[  115.190165][  T413] usb 5-1: config 0 descriptor??
[  115.200087][ T3557] overlayfs: failed to clone upperpath
[  115.206504][ T3557] overlayfs: failed to clone upperpath
[  115.212474][ T3557] overlayfs: failed to clone upperpath
[  115.218327][ T3557] overlayfs: failed to clone upperpath
[  115.224358][ T3557] overlayfs: failed to clone upperpath
[  115.230152][ T3557] overlayfs: failed to clone upperpath
[  115.235988][ T3557] overlayfs: failed to clone upperpath
[  115.241871][ T3557] overlayfs: failed to clone upperpath
[  115.247692][ T3557] overlayfs: failed to clone upperpath
[  115.253568][ T3557] overlayfs: failed to clone upperpath
[  115.259335][ T3557] overlayfs: failed to clone upperpath
[  115.265157][ T3557] overlayfs: failed to clone upperpath
[  115.270923][ T3557] overlayfs: failed to clone upperpath
[  115.276729][ T3557] overlayfs: failed to clone upperpath
[  115.282523][ T3557] overlayfs: failed to clone upperpath
[  115.288260][ T3557] overlayfs: failed to clone upperpath
[  115.294274][ T3557] overlayfs: failed to clone upperpath
[  115.300062][ T3557] overlayfs: failed to clone upperpath
[  115.305901][ T3557] overlayfs: failed to clone upperpath
[  115.311691][ T3557] overlayfs: failed to clone upperpath
[  115.317489][ T3557] overlayfs: failed to clone upperpath
[  115.323435][ T3557] overlayfs: failed to clone upperpath
[  115.329419][ T3557] overlayfs: failed to clone upperpath
[  115.368196][   T36] audit: type=1326 audit(1756455410.209:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3565 comm="syz.3.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bacb8ebe9 code=0x0
[  115.431227][ T3571] overlayfs: failed to clone upperpath
[  115.478344][ T3579] bpf: Bad value for 'mode'
[  115.498620][ T3581] overlayfs: failed to clone upperpath
[  115.627953][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.627978][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.644138][ T3607] overlayfs: failed to clone upperpath
[  115.649729][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.649788][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.663604][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.663634][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.670086][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.833235][ T3630] veth1_macvtap: left promiscuous mode
[  115.841424][  T489] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  116.057491][ T3636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  116.057528][ T3636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:510
[  116.098273][  T489] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  116.115641][  T489] usb 3-1: config 0 has no interface number 0
[  116.121819][  T489] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[  116.132604][  T489] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  116.145628][  T489] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  116.154732][  T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.163386][  T489] usb 3-1: config 0 descriptor??
[  116.278705][ T3638] overlayfs: failed to clone lowerpath
[  116.331190][ T3649] /dev/rnullb0: Can't lookup blockdev
[  116.369722][ T3598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.378500][ T3598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.379655][ T3655] netlink: 'syz.3.1053': attribute type 4 has an invalid length.
[  116.449705][ T3661] cgroup: Bad value for 'name'
[  116.553695][  T489] usb 3-1: string descriptor 0 read error: -71
[  116.563023][  T489] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2
[  116.565827][ T3197] udevd[3197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  116.573031][  T489] usb 3-1: USB disconnect, device number 36
[  116.870264][   T36] audit: type=1400 audit(1756455411.709:477): avc:  denied  { map } for  pid=3681 comm="syz.0.1064" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  116.916274][   T36] audit: type=1400 audit(1756455411.759:478): avc:  denied  { map } for  pid=3686 comm="syz.0.1066" path="socket:[39134]" dev="sockfs" ino=39134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.953359][ T3690] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  116.971720][  T413] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  117.002617][  T413] usb 5-1: USB disconnect, device number 26
[  117.010155][  T413] usblp0: removed
[  117.119904][   T36] audit: type=1400 audit(1756455411.959:479): avc:  denied  { setopt } for  pid=3720 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  117.153806][ T3725] rust_binder: Write failure EFAULT in pid:347
[  117.165705][ T3727] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1080'.
[  117.183686][ T3727] 0����MA: renamed from gretap0 (while UP)
[  117.190528][ T3727] 0����MA: entered allmulticast mode
[  117.196448][ T3727] A link change request failed with some changes committed already. Interface 
30����MA may have been left with an inconsistent configuration, please check.
[  117.218822][ T3464] Bluetooth: hci0: Frame reassembly failed (-84)
[  117.226911][ T3713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:753
[  117.292918][   T36] audit: type=1400 audit(1756455412.139:480): avc:  denied  { read } for  pid=3738 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  117.807987][   T36] audit: type=1400 audit(1756455412.649:481): avc:  denied  { read write } for  pid=3765 comm="ip" path="/dev/console" dev="rootfs" ino=99 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  117.851293][   T36] audit: type=1400 audit(1756455412.679:482): avc:  denied  { unlink } for  pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1
[  117.926102][   T36] audit: type=1400 audit(1756455412.769:483): avc:  denied  { read write } for  pid=3769 comm="syz.0.1085" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  117.996697][   T36] audit: type=1400 audit(1756455412.769:484): avc:  denied  { open } for  pid=3769 comm="syz.0.1085" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  118.056958][   T36] audit: type=1400 audit(1756455412.829:485): avc:  denied  { read write } for  pid=3777 comm="iptables" path="/dev/console" dev="rootfs" ino=99 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  118.109254][   T36] audit: type=1400 audit(1756455412.839:486): avc:  denied  { search } for  pid=3777 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.433637][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  118.444348][ T3794] SELinux:  Context ϧ� is not valid (left unmapped).
[  118.455422][ T3794] rust_binder: Failed to allocate buffer. len:4294967272, is_oneway:false
[  118.455457][ T3794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  118.464032][ T3794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:541
[  118.480460][  T413] rust_binder: 3813: removing orphan mapping 0:24
[  118.486353][ T3817] binder: Unknown parameter '.onteNt�'
[  118.502099][  T818] ------------[ cut here ]------------
[  118.507674][  T818] WARNING: CPU: 1 PID: 818 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  118.516992][  T818] Modules linked in:
[  118.520897][  T818] CPU: 1 UID: 0 PID: 818 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[  118.532561][  T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[  118.542664][  T818] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  118.548336][  T818] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  118.568134][  T818] RSP: 0018:ffffc9000eb47b68 EFLAGS: 00010293
[  118.574242][  T818] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff8881456a1300
[  118.582250][  T818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  118.590239][  T818] RBP: ffffc9000eb47b90 R08: ffff888153e1d67f R09: 1ffff1102a7c3acf
[  118.598503][  T818] R10: dffffc0000000000 R11: ffffed102a7c3ad0 R12: 0000000000000000
[  118.606517][  T818] R13: dffffc0000000000 R14: ffff888153e1d5e0 R15: ffff888151a2e110
[  118.614528][  T818] FS:  00005555601cc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  118.623495][  T818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.630167][  T818] CR2: 0000200000001000 CR3: 0000000123e74000 CR4: 00000000003526b0
[  118.638185][  T818] Call Trace:
[  118.641486][  T818]  <TASK>
[  118.644421][  T818]  ovl_do_remove+0x7b8/0xcf0
[  118.649016][  T818]  ? ovl_set_redirect+0x780/0x780
[  118.654148][  T818]  ? down_write+0xe9/0x2a0
[  118.658570][  T818]  ? __cfi_down_write+0x10/0x10
[  118.663478][  T818]  ovl_rmdir+0x1e/0x30
[  118.667636][  T818]  vfs_rmdir+0x3e0/0x560
[  118.671902][  T818]  incfs_kill_sb+0x109/0x230
[  118.676516][  T818]  deactivate_locked_super+0xd5/0x2a0
[  118.681923][  T818]  deactivate_super+0xb8/0xe0
[  118.686613][  T818]  cleanup_mnt+0x3f1/0x480
[  118.691037][  T818]  __cleanup_mnt+0x1d/0x40
[  118.695551][  T818]  task_work_run+0x1e3/0x250
[  118.700155][  T818]  ? __cfi_task_work_run+0x10/0x10
[  118.705286][  T818]  ? __x64_sys_umount+0x126/0x170
[  118.710321][  T818]  ? __cfi___x64_sys_umount+0x10/0x10
[  118.715715][  T818]  ? __kasan_check_read+0x15/0x20
[  118.720760][  T818]  resume_user_mode_work+0x36/0x50
[  118.725983][  T818]  syscall_exit_to_user_mode+0x64/0xb0
[  118.731488][  T818]  do_syscall_64+0x64/0xf0
[  118.735909][  T818]  ? clear_bhb_loop+0x50/0xa0
[  118.740578][  T818]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.746490][  T818] RIP: 0033:0x7f692018ff17
[  118.750909][  T818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  118.770565][  T818] RSP: 002b:00007ffc8a75a818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.779116][  T818] RAX: 0000000000000000 RBX: 00007f6920211c05 RCX: 00007f692018ff17
[  118.787559][  T818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8a75a8d0
[  118.795561][  T818] RBP: 00007ffc8a75a8d0 R08: 0000000000000000 R09: 0000000000000000
[  118.803643][  T818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8a75b960
[  118.811655][  T818] R13: 00007f6920211c05 R14: 000000000001ce9f R15: 00007ffc8a75b9a0
[  118.819980][  T818]  </TASK>
[  118.823010][  T818] ---[ end trace 0000000000000000 ]---
[  118.828848][  T818] ------------[ cut here ]------------
[  118.834365][  T818] WARNING: CPU: 0 PID: 818 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  118.843720][  T818] Modules linked in:
[  118.847626][  T818] CPU: 0 UID: 0 PID: 818 Comm: syz-executor Tainted: G        W          syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[  118.860743][  T818] Tainted: [W]=WARN
[  118.864752][  T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[  118.874825][  T818] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  118.880471][  T818] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  118.900108][  T818] RSP: 0018:ffffc9000eb47b68 EFLAGS: 00010293
[  118.906222][  T818] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff8881456a1300
[  118.914239][  T818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  118.922237][  T818] RBP: ffffc9000eb47b90 R08: ffff888153e1d67f R09: 1ffff1102a7c3acf
[  118.930212][  T818] R10: dffffc0000000000 R11: ffffed102a7c3ad0 R12: 0000000000000000
[  118.938209][  T818] R13: dffffc0000000000 R14: ffff888153e1d5e0 R15: ffff888151a2e110
[  118.946659][  T818] FS:  00005555601cc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  118.955791][  T818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.962405][  T818] CR2: 00007ffcf97e8ff8 CR3: 0000000123e74000 CR4: 00000000003526b0
[  118.970480][  T818] Call Trace:
[  118.973882][  T818]  <TASK>
[  118.976823][  T818]  ovl_do_remove+0x7b8/0xcf0
[  118.981456][  T818]  ? ovl_set_redirect+0x780/0x780
[  118.986489][  T818]  ? down_write+0xe9/0x2a0
[  118.990905][  T818]  ? __cfi_down_write+0x10/0x10
[  118.995888][  T818]  ovl_rmdir+0x1e/0x30
[  118.999982][  T818]  vfs_rmdir+0x3e0/0x560
[  119.004242][  T818]  incfs_kill_sb+0x1a0/0x230
[  119.008847][  T818]  deactivate_locked_super+0xd5/0x2a0
[  119.014246][  T818]  deactivate_super+0xb8/0xe0
[  119.018925][  T818]  cleanup_mnt+0x3f1/0x480
[  119.023359][  T818]  __cleanup_mnt+0x1d/0x40
[  119.027771][  T818]  task_work_run+0x1e3/0x250
[  119.032374][  T818]  ? __cfi_task_work_run+0x10/0x10
[  119.037496][  T818]  ? __x64_sys_umount+0x126/0x170
[  119.042537][  T818]  ? __cfi___x64_sys_umount+0x10/0x10
[  119.047912][  T818]  ? __kasan_check_read+0x15/0x20
[  119.053041][  T818]  resume_user_mode_work+0x36/0x50
[  119.058182][  T818]  syscall_exit_to_user_mode+0x64/0xb0
[  119.063655][  T818]  do_syscall_64+0x64/0xf0
[  119.068088][  T818]  ? clear_bhb_loop+0x50/0xa0
[  119.072777][  T818]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  119.078696][  T818] RIP: 0033:0x7f692018ff17
[  119.083171][  T818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  119.103140][  T818] RSP: 002b:00007ffc8a75a818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.111760][  T818] RAX: 0000000000000000 RBX: 00007f6920211c05 RCX: 00007f692018ff17
[  119.119755][  T818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8a75a8d0
[  119.127848][  T818] RBP: 00007ffc8a75a8d0 R08: 0000000000000000 R09: 0000000000000000
[  119.135848][  T818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8a75b960
[  119.143924][  T818] R13: 00007f6920211c05 R14: 000000000001ce9f R15: 00007ffc8a75b9a0
[  119.152023][  T818]  </TASK>
[  119.155048][  T818] ---[ end trace 0000000000000000 ]---
[  119.181239][ T3823] tipc: Started in network mode
[  119.186249][ T3823] tipc: Node identity 0600f1056138, cluster identity 4711
[  119.193476][ T3823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.251531][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  119.252374][ T1079] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  119.264595][ T3822] tipc: Resetting bearer <eth:syzkaller0>
[  119.275400][ T3822] tipc: Disabling bearer <eth:syzkaller0>
[  119.326274][ T1621] rust_binder: 3822: removing orphan mapping 0:24
Connection to 10.128.1.213 closed by remote host.
[  120.023837][ T3464] bridge_slave_1: left allmulticast mode
[  120.029493][ T3464] bridge_slave_1: left promiscuous mode
[  120.035128][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.042724][ T3464] bridge_slave_0: left allmulticast mode
[  120.048352][ T3464] bridge_slave_0: left promiscuous mode
[  120.054157][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.062106][ T3464] ip6gretap0: left allmulticast mode
[  120.067400][ T3464] ip6gretap0: left promiscuous mode
[  120.072684][ T3464] bridge0: port 3(ip6gretap0) entered disabled state
[  120.079808][ T3464] bridge_slave_1: left allmulticast mode
[  120.085560][ T3464] bridge_slave_1: left promiscuous mode
[  120.091169][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.098640][ T3464] bridge_slave_0: left allmulticast mode
[  120.104448][ T3464] bridge_slave_0: left promiscuous mode
[  120.110068][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.293386][ T3464] tipc: Left network mode
[  120.298067][ T3464] tipc: Disabling bearer <udp:syz2>
[  120.303643][ T3464] tipc: Left network mode
[  120.309015][ T3464] veth1_macvtap: left promiscuous mode
[  120.314579][ T3464] veth0_vlan: left promiscuous mode
[  121.738369][ T3831] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  121.745416][ T3831] ACPI: PM: Preparing to enter system sleep state S5
[  121.752308][ T3831] kvm: exiting hardware virtualization
[  121.757799][ T3831] reboot: Power down
serialport: VM disconnected.