last executing test programs:

4.070701413s ago: executing program 3 (id=2816):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rt_sigaction(0x1003a, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0)

4.062096273s ago: executing program 3 (id=2818):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) (async)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
read(r1, &(0x7f0000000040)=""/63, 0x3f)
write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x800000}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x60de, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0xfd7f, 0x4, @loopback, 0xf58}, 0x1c)
recvmmsg(r3, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002040, 0x0) (async)
recvmmsg(r3, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002040, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) (async)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

3.559676643s ago: executing program 0 (id=2822):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r3 = dup(r2)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc9)
r4 = getpgid(0x0)
write$cgroup_pid(r3, &(0x7f0000000040)=r4, 0x12)
r5 = geteuid()
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r5, &(0x7f0000000100)={0x5, 0x1, 0x5, 0x0, 0x9, 0x4, 0xbf24, 0x1, 0x56fa})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
pidfd_send_signal(r3, 0x5, &(0x7f0000000080)={0x5, 0x7, 0xfff}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0xfffffffffffffefe}]})

3.375250416s ago: executing program 0 (id=2824):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

3.368847676s ago: executing program 0 (id=2826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]})
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)={0x2, 0x9})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0)
preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f00000014c0)=""/179, 0xb3}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000001400)=""/135, 0x87}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001580)=""/114, 0x72}, {&(0x7f00000016c0)=""/224, 0xe0}], 0xa, 0x4, 0xfffffffd)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41000, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]}) (async)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)={0x2, 0x9}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) (async)
preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f00000014c0)=""/179, 0xb3}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000001400)=""/135, 0x87}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001580)=""/114, 0x72}, {&(0x7f00000016c0)=""/224, 0xe0}], 0xa, 0x4, 0xfffffffd) (async)

3.14140617s ago: executing program 0 (id=2830):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000480)=@arm64={0x8, 0xff, 0x2, '\x00', 0x2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000)
recvmmsg(r4, &(0x7f0000000440), 0x44, 0x22, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r6)
ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000002c0)=[{}])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r9, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xffffff2b}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

2.299732077s ago: executing program 0 (id=2837):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB='trylock i'], 0xf)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000440)={0x3, 'xfrm0\x00', {0x9}, 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r8, 0x407, 0x0)
read$FUSE(r7, &(0x7f0000001180)={0x2020, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x28, 0xd1a2, 0x0, 0x1, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x3}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
write$FUSE_ENTRY(r6, &(0x7f0000000380)={0x90, 0x0, r9, {0x3, 0x2, 0x55a0af1d, 0x7, 0x4, 0x3, {0x1, 0x8, 0x100000000, 0x5, 0x5, 0x8, 0x7, 0xfffffff7, 0x6, 0x2000, 0x7fffffff, r10, r11, 0x6, 0x2}}}, 0x90)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r14, 0x4008ae93, &(0x7f0000000040)=0xf000)
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close_range(r0, 0xffffffffffffffff, 0x0)

2.047186561s ago: executing program 0 (id=2840):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x3d85, 0x7, 0x4})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000084)
syz_usb_disconnect(r1)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
syslog(0x4, &(0x7f0000000000)=""/234, 0xea)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket(0x11, 0x3, 0x8)
sendmsg$unix(r7, &(0x7f00000007c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)="a016e817", 0x4}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20, 0x80}, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x5})
syslog(0x3, &(0x7f0000000280)=""/81, 0x51)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.046937451s ago: executing program 2 (id=2841):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="54ff", @ANYRES16=r8, @ANYBLOB="00032cbd7000fbdbdf2500000000240003000000000000000000000000000000000000000000000000000000000000000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0xc000)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000180)=0x41fffffc, 0x2)
recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="030000006e6f3d345bec88f3f1e404c70be0aa152d5d12c80a540523710826f3b43aa09f53af1b76f2d0081197120581b8efb90b8c06ca3713c2b94ac508db5d62c10cbda7c6a534b075c6554d72e28d372ecf8838e7f986a2773a29450450c2ed6d5501000000bd8fc657ddb2a8ca664fec8467360be54ac09ae5bf537ca00900000000000000cbdf1ad24c72086c873549351ad3196cd05ebff85a48a32a2a87203a1a64593c49957bdb8e0e48108b2655f5c5bd0822240a766f7db035177a681019ef422c809d1328dda80e7785dd7b0900869da24860c616eea5e85070949f690a751c3529899e68ee1267ea4ba2050417b77d0274285947774d58246f1a9bb259f883662f1ff200ab4f5d1334883bd1b9421a08dd03155daa45ae3ad7659ce0e9a2c4052ef774b31866ea1b197ed42e5bec3e0b984a276316ef8d9f75c347f68f9d51f1aca0b011533753f9c89b07098047", @ANYRESHEX=r0, @ANYBLOB=',\x00'])

1.949006573s ago: executing program 2 (id=2842):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000077000/0xc000)=nil, 0xc000}, 0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c66726f75705f69643d2e51d20ab225c437ff3b375aadd88fb5d9078a1950d0a5c62f63829f53e652e5ba33f20c35f63003265da7c42716313c52d0abb5750742e4c3c85b", @ANYRESHEX=r0])
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0xffffffff80408040}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3ffff, {0x5, 0x0, 0x0, 0x4000000008, 0x460e, 0x5, {0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1.871392815s ago: executing program 2 (id=2844):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100024f27101004233b025c7bf9cce061090212"], 0xfffffffffffffffe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]})
close_range(r0, 0xffffffffffffffff, 0x0)

1.06300914s ago: executing program 3 (id=2854):
r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000003000040"])
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x8, 0x0, 0x8, 0x2, 0x8, 0x1, "530a3c0a7655e55e"}}, 0x120)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000940), 0x101080, 0x0)
ppoll(&(0x7f0000000980)=[{r7, 0x8024}], 0x1, 0x0, 0x0, 0x55)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
writev(r0, &(0x7f0000000880)=[{&(0x7f0000000080)="95231cef93d653c04174afac75441f11a3e9e6a1b3051bb193c8c7e80154c1449fcc3b9767adc604915eb9b225ac540e550e9681ccd7c17d0777", 0x3a}, {&(0x7f00000000c0)="bddf2dc7ff0663f9f04492c8228e05221ffe5eb1292e52afba331e5f442f4e5c57e1f669a41c6ebaeadab242dbd5573c07d696c79bb4f6bb88652f25b69da5e0217c42b8cc72a7d1cba606287af8684235c2ec23e844ce88eb3e8f04eac4fda345ef4c2f2b298c4a7cca874d14f4b8e6c3b4eded2e8da6763a397ac56e49", 0x7e}, {&(0x7f0000000380)="9ea01aea525d26a69c0bf780c68340e37f50b3ea459dcdb30763374ccb3e8178b736f94ab3cc907fb0530eab7a477aab74bed4f883802e1f11f4ad934a00a3be06871320cc4c7f8a664d6c7cb298f13c699c3435e20eb891a42d3d2a52b0af1f9eef84aefe63a0cd8f9519384158ea39b8c83d5e4b5ccfd55ca9108f4f13d2c6dc514ca3b5a9260480e6231fe312eb1f223b4a8ad40e1c72ccac0bfb9aadfb19cd6f62dc6a0db2140806a357d5edb67f88", 0xb1}, {&(0x7f0000000440)="4e283b79b20f3ffea0fcc30344eb7f6585a2faf1790c49c236bc3ecb0abfd017377e2c5cfacc717fa012bc4bfb856919bda4f57fd534659e20ab1a6b1c8316bf9d5261fe6b45a86becd4d3a38ca68863a8fd32d8", 0x54}, {&(0x7f00000004c0)="2e1d023a23af98e312be246aad26982bf69b3fbc0647672d60645ce066415739ed0cf253b8a131cd0215b93ee65958e00970a8c944b138b53be0926edbc9efd493a1198792aaee129912bf047a8b40ae5a54dea7874ce59757b47cdce448b8bdcc5b1d2222e0192594de38b9ed76f9478fa391c5b429c8ea691fe8edb78e64fc1bcc5a8928ab", 0x86}, {&(0x7f0000000580)="dc61ccc8d493a3289174a55e59b85f667968e46f320d20bba80ff21a2b7158487d1e13cec59ccf6a3fd74277c4282e41ecb5", 0x32}, {&(0x7f00000005c0)="446ef9b1c5a8171199f916e6517abb6f80831f45b57a1df8d1bed77a316f71eec3ee0084c332baaaacaf976b6c5f299d347994ec7d03fb618528322d573c3cb1ad217ec229dba93a54413c596386980865c924d4fe23b765686455b98ff010b44f12245edd757ef26a4f722eec481ef64641feebb0374204d15df78f5f36", 0x7e}, {&(0x7f0000000640)="6dd5c1566b7e319e6643e157cda7558f5d1de68ecb2632c4d965f63966a08582c175dd95c126d700cfddf4822fe4488004890adc95d959da63d9606eb7694184a4c1d61d3c3a73fec06de94d07feab3cf7471b6f1890afbf5a2f7e5beb3215411056c082b10ffa8eed417531f9899d7038726b572f9009af2057ac1eeba263ded510c32911fb4001867a9ebc8a33aa8fd3be0c838c85685d3daebf0d56faa293a0673230d59c58", 0xa7}, {&(0x7f0000000700)="e697a33b1dfabe89ae80dcff290c891aa51e80672f418b4f82a3fc8c5e67da765b68d1ef4bf1abc17a862c1f94b9b9c6df5455ffa4512700e012c92e76367f9cd3e6ebeadc26ceb3361b2970045c840d16246b1e535be562aa051b54c61a91fa49f15ea14e161359a994faf824ba010e4014300db9dcbe7b1f21b17abe15d6978a60e78c39b1785cb4999b098d05603439d5e8", 0x93}, {&(0x7f00000007c0)="6d117b5d94370a26dd79929f5511c2228e156aa061ed722939a1005728d1ed7fd09960a301c27fc2586def82d57773c49b6534680afef491e6a1be511642425a3c938f8d790fa92f44fe90650c629caa6e78a188de3ac32a6ba5638b731997a7aa9f1896ab37bfcb9019108bd62a8e46bb31dcd78f2f54b8a9d5fbcb07d6493db566", 0x82}], 0xa)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x12, r8, 0x4cc98000)

723.485416ms ago: executing program 2 (id=2855):
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]})
r0 = geteuid()
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r1, 0x10)
getgid()
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x304020, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@noxattr}, {@cachetag={'cachetag', 0x3d, './binderfs\x00'}}, {@aname={'aname', 0x3d, '&'}}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@access_user}, {@fscache}], [{@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@dont_appraise}, {@measure}, {@fsname={'fsname', 0x3d, 'stats=global'}}, {@hash}, {@dont_measure}]}})

722.170036ms ago: executing program 2 (id=2856):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_auto}], [{@euid_lt={'euid<', r1}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat}, {@fowner_gt={'fowner>', r1}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '$(\\!-[{}:/]'}}]})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)

721.375916ms ago: executing program 2 (id=2857):
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000500)={0x7, 0x1, "1403dbbc3323b4cb636aaae104b0b54b00f5bda85d29622c173f933871f4e4331b090ae71e54b2c720c7819ab034dafab474df55bf719e1bb440fe9d9dcc757d67160f38351432b76d4e7f67b51304224fe08bdbdb71f00b430f3ba3641dada6c6f7241add285b013bcacb22358383af41e056e268c41a29370f388ff2704841b3c61f5f92c5654fd33eb1d7af94fa2bce53c0e7dd571065c8f140595a1a5b268940ef289f00c57aa0882e0947d39bd65f956ae8c26413eaeaead76a71edd44ad811524f4474aadc25a4dea5ce5c3c95cbb4619397fdbaa9c379d3c714ae9b77914de13fe63052b73d1b3fabba42b4418b7b7126b33d5e9c9220b3fc92614d66"})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0xfffffffffffef000, 0x2000}]})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4})
setrlimit(0xc, &(0x7f0000000080)={0x6, 0xffc})
r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r6}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"})
r7 = socket(0x10, 0x803, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x20, 0x0, 0x0, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

556.88715ms ago: executing program 1 (id=2865):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x7ff, 0x4)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid\x00')
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = dup(r6)
getpeername$packet(r7, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10)
write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r8)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x158, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd89}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x94a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x14000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40000000000}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a80080005"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/11, 0xb}], 0x3}}], 0x1, 0x0, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)

544.99336ms ago: executing program 1 (id=2866):
r0 = fsopen(&(0x7f0000000000)='adfs\x00', 0x1)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xfc, 0xc, 0x3, 0x9, 0x3, 0x3e, 0x3def, 0x14, 0x38, 0x1f4, 0xa33, 0x0, 0x20, 0x2, 0x6, 0xa, 0x3}, [{0x60000000, 0xf9e, 0x9, 0x3, 0x6, 0x26, 0x3, 0x7}, {0x4, 0xffffff7a, 0x5, 0x8, 0x7fff, 0x89, 0x82, 0x4b6}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x1478)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000014c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001740)={{r2}, r3, 0x2, @inherit={0x60, &(0x7f00000016c0)={0x0, 0x3, 0x800, 0x2, {0x10, 0x689, 0x0, 0x0, 0x8001}, [0x8001, 0x3, 0x7fffffffffffffff]}}, @name="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"})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0)
write$FUSE_INIT(r4, &(0x7f0000002780)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfc6, 0x80000, 0x6, 0xe, 0xff, 0x308e, 0x0, 0x0, 0x20, 0x8}}, 0x50)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000002800))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000002840)={0x0, 'gretap0\x00', {0x4}, 0x1})
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000002880)='+]\x00', 0x0, r0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f00000028c0), &(0x7f0000002900)=0x4)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0x200200, 0x3a1)
r7 = open_tree(r6, &(0x7f0000002980)='./file0\x00', 0x100)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000029c0)={0x2, [0x0, 0x0]})
r8 = eventfd(0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000002a00)={0x4, 0xffffffffffffffda, 0x1, 0x1, 0x4, 0xf})
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000002a40))
ioctl$LOOP_CLR_FD(r7, 0x4c01)
ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000002a80))
connect$802154_dgram(r7, &(0x7f0000003a80)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
getsockname$netlink(r7, &(0x7f0000003ac0), &(0x7f0000003b00)=0xc)
ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000003b40)={0x0, 0x0, {0x0, @usage, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000003f40)={r10, 0x9, 0xfffffffffffffff7, 0x1})
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000004340), 0x4)

495.220401ms ago: executing program 1 (id=2867):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_dev$usbmon(0x0, 0x4, 0x480200)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$netlink(0x10, 0x3, 0x2)
preadv(r2, 0x0, 0x0, 0x0, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', <r5=>0x0, 0x7, 0x7, 0xabc, 0x6, {{0x2a, 0x4, 0x3, 0x3, 0xa8, 0x68, 0x0, 0x5, 0x29, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x4b, 0x3, [{0x6, 0x6, "f4edb347"}, {0x5, 0x10, "020817a5943bea0042706a1c8dbc"}, {0x6, 0x2}, {0x1, 0x4, "82ae"}, {0x5, 0xd, "f7918b3e89f46da84c3af1"}, {0x1, 0xc, "2dd47de4a648b76e20e0"}, {0x7, 0x9, "73ad2ff38462eb"}, {0x0, 0x7, "05e8b0ee67"}]}, @rr={0x7, 0x1b, 0xdc, [@broadcast, @broadcast, @empty, @multicast1, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@multicast1, 0x8}, {@broadcast, 0x1}, {@private=0xa010100, 0x200}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x436}, {@empty, 0x5}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', <r6=>0x0, 0x40, 0x8, 0x5, 0x3, {{0x11, 0x4, 0x0, 0x1, 0x44, 0x67, 0x0, 0xe, 0x2d, 0x0, @broadcast, @loopback, {[@generic={0x44, 0x3, "04"}, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x5, [{@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@local, 0xbd}, {@multicast2, 0x4}, {@loopback, 0x6}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000940)={0x40c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x210, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',$)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '([%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffeff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(+:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'J\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x8d, 0x3, "e6bd6adebb88c4f3d6f9f542a9c397b9e2116440b7cc1a98869bb3fd4a670c839e3efaceae4515d0cfedbf8581a7c6ef47716e0d6faa203787fdbe4f0899c0cc174c0a321ba6cb089fcb15171618943f4991bab3d5f20bdd87b7744f1cba9c75a898d9f01479eff5e82c569c86aee50f0842e586a287276108123fe07a8d508d573ee6e4fbd5ce7164"}, @ETHTOOL_A_WOL_SOPASS={0x35, 0x3, "c9c82a6145f231996fe8b42ea517001970ad395b086d764e981819a2687b3ce978381d05789164e8d23dab7be8efe38b51"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x97, 0x3, "e5a55701b996e27d7dc16f38502736d40dc2360dae5ad5aed62a57be13ed15a3dc9a52b13ea730f62942f50f58c1eacb2110a9243483a4c7a954c7b0726b645e4c16116747a8b6bf8bbf851ba92384875444275e2acc6ecc8e5636e2334aa7e2d6502187d135a224495d0e538d6446575e156f7e1b4423bdf6d4b251426189f8aa471641677c35cd8263b8edc2c919465d9080"}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r8, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xa0}, {0x0, 0x30}], 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[])
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000280)=r10)
mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0)
r11 = getpid()
r12 = syz_pidfd_open(r11, 0x0)
setns(r12, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

493.620981ms ago: executing program 1 (id=2868):
r0 = syz_usb_connect$cdc_ecm(0x5, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x8, 0x10, 0x81, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "92ba2348e4de"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xa8f5, 0x996}, [@mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x4, 0xff, 0xf8}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0xf5, 0x4}, @obex={0x5, 0x24, 0x15, 0xb}, @country_functional={0xa, 0x24, 0x7, 0xef, 0x1, [0x6, 0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x7, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x5, 0x7c}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x9, 0x76, 0x8}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x101, 0xc, 0x1, 0x20, 0x20, 0x7f}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x2, 0x6}]}, 0x5, [{0x31, &(0x7f0000000140)=@string={0x31, 0x3, "85030853417bbdba62fcb5c09de88814131d484f3420a369d0526ffbc45f1baa2487ced46480c77c5d0f70991913b9"}}, {0x13, &(0x7f0000000180)=@string={0x13, 0x3, "1eddd348f53559961d4f2555411611fe50"}}, {0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "99e0d9f8330baca206e082e38f2039164e7fc12118c8efccf20c155acd7ee84a297a7be971b57484f96d82cf2e16fa6aec634c27f12f062b9ef9dd1b628e27c46fde788069cc2534b39e2bb3e662f9748a2533954503d7091552d9af2eb54fe7fa5f2a6907bc04f62b4f581cb0c52ad766b815133358793f6e1cdef6657f"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "441a0801b6a70ffd4b6f4818ee6b88ba57d2ebfc4d3b44ac1187221f87b64d35e57614c64a216b146d5e3797c19b982d65bad623950fd4dd7830eda7b3957e961249fbccc42a9c7f43f7a7240f37ff97855efa84787161a9c730ee51e7e057848d3692ca4a66e4aceb6889e05cc8"}}, {0x86, &(0x7f00000002c0)=@string={0x86, 0x3, "23f3ca066f7aaf7c69a0bf242c22ed1c5d1f0e94bcfeb0923cb524c04f7ebf730697a221d51d45574b625861c3cb7b3c0b8ac4e5c7e18cc899b571ce7cff616cfecce16e23d59cb6369dcdb07b389b17f62e645c15125cd3abbf7b968f31b3f7f573150bf7db881bc067e019b104b72c8463c89f061a18304d862c7c7f6030629b56b3ff"}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0xa, 0xaa, {0xaa, 0xd, "83dbee21175a69a41be03be571d79a0a0f95643f117a4aee36da5b75e87aa6339f958d0cf7a25b2c267f7ce840b6c70e6f8d20aa60447fe05c6fa1b7eb5bf2d1ba1175fe0c6d4594056e3f3447f38efb66fe327327c158de730b712362c8db74033b39034b372d1049f065def0496cb2b90b5476bf543aeb318f5094ba0eb5fab415a0f5f47bf79abcf99602599397c551f10efa7087bd053e5d5b8eabb53e1e6d7977efcc28b432"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0x9, 0xe3, "31cedeed987b80b8595d5c6bf379897f9203091155eb3c4c6f7b6d13637f3d49c714776829e703a1151bec79bf173bfa7e2f997325cff4732fbbac1b74e6ae36d055f7fa4aa21810daad6c268ed9035f33320c28ac6170c7d10b85e476e56a15e68738e12584ac601a2476c5bef5f75eb49ca07d837bdd337ffdcd7fe2ce4adcf4f20186952e3c81de6c051f2b20534a81c7fd95f38fc71af75a77d1c72090a2b15cca8aae0d70f5db56f1da6bae1621dfb07cafb15e07be5fa674edfc255bc0ba996c12865eb6af005c5ed910f0a2161158819fa607b3e6a38eec2e2aa1bd538a7212"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x20, 0xd, 0x89, {0x89, 0x1, "8e199458ff3fd0a52977298f0bbc6e4abfc9d70ce75d1949a3bf25f72eb30b4be02c791da6a0356209179237dc307ea5c3eb3931d10b7a945c41fa15af315ab858f79d38e40d9b1f044d545967486ff97ffd8209ddc476d10faf6aa83fa38fd524e71ee1b722a4e5ab75b8ecd81bf8c26c1200fee17f5dd87766a057a907dfa6d28517e5b03054"}}, &(0x7f00000007c0)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "e93184f080822bb00c8fe998f35d4c6cd6b53534a6feb5faadb541a8fd1a01e56ae9f3e1cd7561006fcfee289c299eb3890cd3ef3905da14828932536216c693920346f766c76ace67319b035a9138de0e47bf9e429660a640a09fc9c1d006187922ec0c4ebaf179d9ee6d3ddf8a4e914ed55c459cdb826241885e"}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0x7, 0x34, "6353b690f963635a1e5b50285974c48b2188520ec59b59e2f0c4b564de77f1cb0fb49aa5e9c61cd19537be2a5b0209a6ab49fa46"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1a}, &(0x7f0000000980)={0x20, 0x81, 0x3, "3aedd5"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "db68"}, &(0x7f0000000a00)={0x20, 0x83, 0x3, "09d519"}, &(0x7f0000000a40)={0x20, 0x84, 0x1, "ef"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "8161f5"}})
r1 = syz_usb_connect(0x5, 0x45c, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0xa3, 0x7e, 0x62, 0x8, 0x2001, 0x4002, 0x8237, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44a, 0x2, 0x2, 0x3, 0x10, 0xbb, [{{0x9, 0x4, 0xbf, 0xf9, 0xa, 0xcb, 0x51, 0x49, 0x3, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0xd, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x28}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mdlm_detail={0xf3, 0x24, 0x13, 0x9, "27c6d04350268b5bb526e918c76340955d28f0104ced5c3affef5593bcec11c97f889d4818af0210ba55e87e39578fd4dc3e0569c8e97b020962d142f3b745a3ee2ddedcdd81d8a53c9ab61fe25af153aec425d2cd150709800a770bbe38ba08580276a8cb6a6a52dd1c6032e7a8351d8c92f9d19745177245a94332c0922ee850d39cb0e8c8fb10ef749fc7cf2bcaafa222975774828d5abb12528180f9178a5dca90b1d51d022688f88256d406feb6859a677e6b7320aad5e642fcc05c20f6867e01e1fecd35a9c59c5d1ca1ef5e0d9a4d84fd779de722d44262d9b62006411c9f533fa508659451290e0d11d804"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x1}]}, @generic={0xe6, 0x5, "c40cc345ccc1c6264b09baf1ab2e7696a2be9cdfe400c15d3c0dd908c459215911502170848917ece38fcda89dae87f01e5f86c26d9d4c6b2d9d3162b1586399585667bca89abb1c4ae0608c3ec89e6183ab555b62e2748381e0488acbfba87291a1fa6c8b3556ba0ad926ab758321dd01b32a04a6471d96bf56bd3d403b9f5ef0f2d17ddc8302be35a6c5d76ee691c57cd45111f79a9351deb209356d4ead0d7fbde70b539cc59679edc30bb6188ef63d428c5d6d33eae06f90b9f0f79a7ccaf6b0ff71b80facc55739182f47b7e22bbcefa51c6f907a90b894545e0f1008356988cfa4"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x91, 0x30, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x6, 0x7, 0x1, [@generic={0x71, 0x10, "7d4f0e926289ade924a8b9633aa5e829793b41d959b76c298eb2f2b750c2874a107346feb2d463e4ed24d1d845e7e9b5042c4d295e77b7d30c5f989bcc5ae4298a524845206967fe8fb6978c5bc0ab4e9042d8386ee1dc0738ba2db820e4d883a17a85c0f3b7c3f0a79e8184166a16"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffc}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x9, 0x4, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xdc, 0xb4, 0x7, [@generic={0xb, 0x9, "923eb79f47d86b9684"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xfc, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xcb87}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x5, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @generic={0x13, 0xf, "52b3b43e47befe7a41aaac03c9698b46db"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xa0, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0xd}]}}, {{0x9, 0x5, 0x80, 0x14, 0x10, 0x3, 0xfb, 0x38}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0xf6, 0x2, 0x2, [@generic={0xfe, 0x22, "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"}]}}]}}, {{0x9, 0x4, 0xea, 0x3, 0x2, 0x6b, 0x12, 0xd1, 0x1, [], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0xd, 0xe}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x250, 0x0, 0xfd, 0x81, 0xff, 0x7}, 0xad, &(0x7f0000001000)={0x5, 0xf, 0xad, 0x4, [@generic={0x93, 0x10, 0x2, "25a6ae51457552555eabc5dc0e505ba96a34aad8c288e217900a7110d709f849a19f9f13065c464bec4c07dcb5cce72d4d524baa1d71ce67f05a670470b38c3fe26cca68276eb1c8381b05d8d2608572f3fd2008a72f08884b9540cd0f3a76647fdc7f014a16c2377ed7b7f54efed277918796ace5a12b1687ce17ad836b1460e64bf04f07c9e20843d8591c27eea593"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x9, 0xd143, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x1, 0x1, 0x9}, @ptm_cap={0x3}]}, 0x6, [{0xdf, &(0x7f00000010c0)=@string={0xdf, 0x3, "e39ba1140daede387de02ddad9a14a754982309fe729607d4923a25f1973434a9a893d90dcca1cdd5c04b75ea735b40df86350421b629f082e2906a4f9a920b8aad49cac5b04b0cc2a46b1c4a1b487954d9ba28e90c689800c7be2b8a968730692f4ef4a53fc352842e3eff3be62d1a266bd950a133e2ef59db3276a0b275b711c5df3aced580d9ab78ec62410351a0dc8c9d4814684553e86b8b872a528d7bbd4e36106ec570b76f1003d0199954326c5d4e3d5221fd1a7501d93ad696d466e343b2796b5d34dd41a7d5752fdbfaa6165d1358bcfc8909ee79e01b8a3"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x1007}}, {0xe6, &(0x7f0000001200)=@string={0xe6, 0x3, "47019cbe0b2a225188f88c337b7b1659904a61257c727c81db5a7382cf9f803a27165adeb040301da2045600d550bb03ca609eee7fb661cdadf1e8562b981192d165c5fe45d4d96675723ba4f37c480f78b1b40491ce8f758d560d0e5a6ebee8b193552c86b588ac7e8fa0bc4fd9667c1d7305e8a5a6029500606c8dffeb1d24efa5a87f7204be88955e7913df2b88133d6f260f64bbd3d86fee74d320ee796d338e6cbfa44f4d01206ea368fe43b7b95f949d167fbaa04fb8a18b5d635d1560b0978fc16aefc9775be7eabd4d3844577dcdb50ae9c6e396716ff155a48a0f2b0e558d46"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x302c}}, {0xd0, &(0x7f0000001380)=@string={0xd0, 0x3, "6593581425dfb4ae3c2e077b84a4010b2614ad09d68b3c509a9183bca9e735dd2d5e9203e4713ecdcc3add58c7722a623d64d8e25894433d498343320c54a028c938c25adb8c20ce124950e66ba8edd29c4ceace8576e661727be6da9a188cdb9d7a050f64c5e3a21f447c9a57706b302076602ce1a96cbd23bfa9f56b4720a4ae6b2e12e45c4b4edf89ef1c4c1730ff54b6606867479204c2f3b64f5911d2ef56defc09e518f4cecd4419c9cc3cc0318f36c0f6a89739326668c507f7d6bc1afe6caf0fe10011583fcb064feeea"}}]})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000001500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x68, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x91, 0x20, 0x37, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "19c4f7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x1}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x1, 0xa6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x410, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x36, 0x7}}}}}}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x110, 0x2, 0x0, 0x2, 0x20, 0x5}, 0x19, &(0x7f00000015c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xd, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x6, 0x200}]}, 0x6, [{0x95, &(0x7f0000001600)=@string={0x95, 0x3, "e5ce9b504e57e82e074111cec78512c23ce8678bbae65e126843969ef6617c252f4093d939c8db9bf30d40b33a4cf564e8bc973adab3944895a60e785894b7961b8e40361cfcb4521dff4947326d5991432e7d1e3852c2552fc177a1c88cd427b0146b1af17020af8b5b5b49a98f4b25df8932842a673008971d1b87ef27a36cacbbd6270557efbf51a6ee40f729ca077a8a76"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x67, &(0x7f0000001700)=@string={0x67, 0x3, "ae36f059471f9871d21eea1c76cfde7cf343fdea88709f142152d7a24f2f97354dceb196fc1b389867593b5a03befc140d831e7c5666b6109dd416bb4d69212d7f0d3071683551a7ebf1e7e28cd16439ed3ddb362bfec2536945ec2ad65214f90f2562125c"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x3d, &(0x7f0000001800)=@string={0x3d, 0x3, "814eac9f8f70a85960cc4705788b41785ea93c3c0e7128af92c52fc13ef80dcf9a6a58115ceab6d7ec6db35e2af0b46df7f5b201f7a4880e8ab0d3"}}]})
r3 = add_key$fscrypt_provisioning(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)={0x2, 0x0, @auto=[0x36]}, 0x9, 0x0)
r4 = add_key$keyring(&(0x7f0000001980), &(0x7f00000019c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$unlink(0x9, r3, r4)
keyctl$search(0xa, r4, &(0x7f0000001a00)='id_resolver\x00', &(0x7f0000001a40)={'syz', 0x2}, r4)
syz_usb_control_io$lan78xx(r1, &(0x7f0000001bc0)={0x14, &(0x7f0000001a80)={0x0, 0xc, 0xd5, {0xd5, 0x22, "a3711e4e247078d4c9b42ec349778b0a602d3205849f261c2d7156fc562edba56491fa229c9c7e4cd5871c759363821ff557c520d5d2d37dc69a1caa69d4fbda10fe048346823bf86d597fffd9abdce2b053293b887ece565f66731529aacc57c7a4250ccbc7fe83b1717a6eabcb58b30879996782aa7466f116ded395500dc6d48c0f631bf3bf7c8b24cb95cd4f301869f656070492f1c45226d04f9b763be5705f8ad522d1dd1483aeb95038bbcb83797b211850cae8abeb44e16bd7c544cfc77df8bf6f2f3f138bae2f8275f39887fd0768"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000001e00)={0x34, &(0x7f0000001c00)={0x40, 0xf, 0x86, "3aa6df9ca41f9f605344324635d8f22f743931b0c15d8b5c1332e0475f1debb9f685e7b870f376b4cb360c52fc79aa6d1a071fee93b7f5cea1f33a69c450200c8e4dc09a1d11d27e34339524e2a011dd93a717dc01a7ecac4cbafd4a4cf8421f24aa2cfd8a75f2896d6cac2fe921f91660b7ecb0576987494bf103032bcb8bb81604a42d1809"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001d40)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000001d80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000001dc0)={0xc0, 0xa2, 0x2f, "fe47503bcba2b4b1c674f2efec57f969c90002c0cb118482afe381de57a7ead47789e2ac541d660a56f8758da94a80"}})
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000001e40)={[0xd]}, 0x8, 0x80800)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001e80)=<r7=>0x0)
tkill(r7, 0x1e)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000002000)={0x14, &(0x7f0000001ec0)={0x20, 0xd, 0xe2, {0xe2, 0x21, "e5ed8330d8a98dad377f15ac5ac67431323494d651f847471afc284b6ecdcbe2ddb5b12547ea3f82ccca3ee959be64263b33b66a0b08234fb87411decb7d0d9172ea296b1a74a0e11353ab1e3608b06bb1d44375fa2a6f38edea47f7b8437d1b8ed6999aadab235b473177c016fd65278869923c01a9b02537a5b3b2b649ba742be5c553e8c8daad9daec1d7aceb6bffacae0651478cb38c79ace50b3063c33d8c2dfcf274744786c4a04593c9808c3b35101cccd1c453beba17f77a1c67a65ea89b4d290ee2ba77bf5df8f9361668e6695efdd50a23947864a49c25321bd5c4"}}, &(0x7f0000001fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002280)={0x44, &(0x7f0000002040)={0x0, 0x31, 0x5b, "d5fbe2c3f43bc120f8c02c448dfbbb1d8f1fa5b1532eb5ab107debbed340148196c6c36c6252424efbc17e2dc4d1fa20329d6bd813307b7198a89b5e2f6e8047bffa5717e661e7a5759b95feab854876aa1e1cc01b6fdaff7fd71b"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002140)={0x20, 0x80, 0x1c, {0x6, 0x41, 0x7, 0x1, 0x8, 0x7, 0x8001, 0xffff, 0x6, 0x1000, 0x9, 0xfa9}}, &(0x7f0000002180)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000021c0)={0x20, 0x83, 0x2}, &(0x7f0000002200)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000002240)={0x20, 0x89, 0x2}})
preadv2(r6, &(0x7f0000002380)=[{&(0x7f0000002300)=""/57, 0x39}, {&(0x7f0000002340)=""/44, 0x2c}], 0x2, 0x1, 0x7ff, 0xc)
pidfd_getfd(r5, r6, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000002500)={0x14, &(0x7f00000023c0)={0x40, 0x1, 0xd4, {0xd4, 0x5, "84250fe47f2697b6e6f82fcd48e31a5191872605aee1aaf49f1bdd3b550cee9ee1a367f9317172a7354a4378bbed44d50a84ed6ead50565375698a0e639a3bbc39f3b241d8034ef79a82e28dea6113c009a539dc48e59b45440a6552b6ad53994138e3c60c6830aae2c28d80a1ee98b3e8db57b85af18dd5e5d6db5417ea946bee39a53c320f605c355fdad7649be6eb888071347bb9029da198eac654aea4821e5fa969b4bcff4eedea4b336478a4ade8cdb4e327f759264d5dd9898be2b7d6234a68ca02239a396cdda6c7818b7fec0720"}}, &(0x7f00000024c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002740)={0x44, &(0x7f0000002540)={0x40, 0xe, 0x17, "f5eddf04be40344a1b8c9348b7a06d93a67a00127a4995"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002600)={0x20, 0x80, 0x1c, {0xac, 0xd6, 0x6, 0x1ff, 0x400, 0x407a, 0x7, 0x200, 0x1, 0x2, 0x2, 0x3}}, &(0x7f0000002640)={0x20, 0x85, 0x4, 0xa}, &(0x7f0000002680)={0x20, 0x83, 0x2}, &(0x7f00000026c0)={0x20, 0x87, 0x2, 0xfe}, &(0x7f0000002700)={0x20, 0x89, 0x2}})
timer_create(0x1, &(0x7f00000028c0)={0x0, 0x3c, 0x5, @thr={&(0x7f00000027c0)="ec35", &(0x7f0000002800)="4af5c243dad4766d62466b34fe2a8f513bd47178a018c1e1432f085e638725152ec6174ec054bab66b06b9906ef571dc268c37b95a5ac7f6ab6124b07d9fc27938110fd4c175776f83ba41f916610f93ef7728d96e61fedadb17f6bd564a7a59654bf1a03f2f28b7cfe60f1f04096cce51c0c610cc9e0bea280082c18ec92fe7d46a3c2268ead67c0fef703a67392952f0865e"}}, &(0x7f0000002900))
sched_rr_get_interval(r7, &(0x7f0000002940))
signalfd4(r6, &(0x7f0000002980)={[0xfff]}, 0x8, 0x80000)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x8001, 0x12, 0x1}, 0x18)
statx(r8, &(0x7f0000002a40)='./file0\x00', 0x400, 0x80, &(0x7f0000002a80))
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000002b80)=0x1)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002bc0), &(0x7f0000002c00)=0x14)
ptrace$getregset(0x4204, r9, 0x1, &(0x7f0000002d00)={&(0x7f0000002c40)=""/141, 0x8d})
add_key$user(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x0}, &(0x7f0000002dc0), 0x0, r4)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000002e00)=0x9, 0x4)

167.312187ms ago: executing program 3 (id=2869):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) (async, rerun: 64)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000})
accept4$tipc(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0)

140.197727ms ago: executing program 3 (id=2870):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x80)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x2000})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

15.46784ms ago: executing program 3 (id=2871):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r3=>0x0)
fchown(r2, r3, 0xee00)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x80, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xa9, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]})
close_range(r0, 0xffffffffffffffff, 0x0)

11.57585ms ago: executing program 1 (id=2872):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async, rerun: 32)
ptrace$setregs(0xd, r1, 0x0, 0x0) (rerun: 32)
ptrace$cont(0x20, r1, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000080)={0x0, 0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r4=>0x0}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0)
setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffff, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1e, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x30, 0x5}}, @channel_switch={0x25, 0x3, {0x1, 0x74, 0x7}}, @random_vendor={0xdd, 0xe, "b51cddc640c1f2cdd80b406046ba"}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 64)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4008af25, &(0x7f0000000000))
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x5, {0x5, 0x0, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64)
fsmount(0xffffffffffffffff, 0x1, 0xf6) (async)
r8 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202)
ioctl$LOOP_SET_FD(r8, 0x4c00, r0)

0s ago: executing program 1 (id=2873):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, r3})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82000008000000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mlockall(0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

kernel console output (not intermixed with test programs):

:  denied  { mounton } for  pid=6253 comm="syz.1.2063" path="/syzcgroup/unified/syz1" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  126.470676][ T6254] /dev/rnullb0: Can't lookup blockdev
[  126.871914][   T36] audit: type=1400 audit(1757396933.253:1718): avc:  denied  { create } for  pid=6275 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  127.180325][   T36] audit: type=1326 audit(1757396933.553:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6286 comm="syz.0.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f702dd8ebe9 code=0x0
[  127.388044][ T6292] overlayfs: failed to clone upperpath
[  127.416086][ T6298] 9pnet_fd: Insufficient options for proto=fd
[  127.498003][ T6310] mmap: syz.3.2087 (6310): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  127.884236][ T6353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6353 comm=syz.2.2101
[  128.094274][ T6379] 9pnet: p9_errstr2errno: server reported unknown error 
[  128.202073][ T6395] fuse: Unknown parameter '0x0000000000000004'
[  128.231530][ T6398] 9pnet_fd: Insufficient options for proto=fd
[  128.251956][ T6400] veth1_macvtap: left promiscuous mode
[  128.257445][ T6400] macsec0: entered promiscuous mode
[  128.264202][ T6400] veth1_macvtap: entered promiscuous mode
[  128.270030][ T6400] macsec0: left promiscuous mode
[  128.438109][ T6443] overlay: ./file1 is not a directory
[  128.453472][ T6445] netlink: 'syz.2.2130': attribute type 27 has an invalid length.
[  129.026063][ T6459] overlayfs: failed to clone upperpath
[  129.053850][ T6461] 9p: Unknown access argument 00000000000000000000B���
: -22
[  129.143713][ T6470] 9pnet_fd: Insufficient options for proto=fd
[  129.165378][   T36] audit: type=1400 audit(1757396935.543:1720): avc:  denied  { bind } for  pid=6475 comm="syz.3.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  129.200119][   T36] audit: type=1400 audit(1757396935.573:1721): avc:  denied  { create } for  pid=6481 comm="syz.3.2146" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.073595][ T6508] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  130.718862][ T6535] __nla_validate_parse: 4 callbacks suppressed
[  130.718882][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'.
[  130.741316][ T6537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6459 sclass=netlink_route_socket pid=6537 comm=syz.2.2164
[  130.763047][   T36] audit: type=1326 audit(1757396937.143:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.2.2165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe84718ebe9 code=0x0
[  132.176392][ T6542] netlink: 'syz.0.2166': attribute type 3 has an invalid length.
[  132.184713][ T6542] overlayfs: failed to resolve './file0': -2
[  132.191740][ T6542] overlayfs: failed to clone upperpath
[  132.383477][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'.
[  133.018648][ T6576] netlink: 'syz.3.2178': attribute type 1 has an invalid length.
[  133.026417][ T6576] netlink: 'syz.3.2178': attribute type 2 has an invalid length.
[  133.555464][ T6584] netlink: 'syz.0.2188': attribute type 4 has an invalid length.
[  133.565076][ T6584] netlink: 'syz.0.2188': attribute type 5 has an invalid length.
[  133.572868][ T6584] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2188'.
[  133.582232][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'.
[  133.775550][ T6594] overlayfs: failed to clone upperpath
[  133.782626][   T36] audit: type=1400 audit(1757396940.163:1723): avc:  denied  { accept } for  pid=6593 comm="syz.2.2185" lport=11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  134.336603][   T36] audit: type=1400 audit(1757396940.713:1724): avc:  denied  { setattr } for  pid=6620 comm="syz.1.2197" name="KEY" dev="sockfs" ino=21794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  134.422359][   T36] audit: type=1400 audit(1757396940.803:1725): avc:  denied  { name_bind } for  pid=6633 comm="syz.1.2203" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  134.457718][ T6639] /dev/rnullb0: Can't lookup blockdev
[  134.470941][   T36] audit: type=1400 audit(1757396940.843:1726): avc:  denied  { execute_no_trans } for  pid=6641 comm="syz.1.2206" path="/562/file1" dev="tmpfs" ino=3041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  134.547515][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'.
[  134.564138][   T36] audit: type=1400 audit(1757396940.943:1727): avc:  denied  { lock } for  pid=6655 comm="syz.1.2212" path="socket:[21826]" dev="sockfs" ino=21826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_selinux_socket permissive=1
[  134.744558][   T36] audit: type=1326 audit(1757396941.123:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098658ebe9 code=0x7fc00000
[  134.876609][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'.
[  134.989321][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'.
[  134.999677][ T6702] 9pnet_fd: Insufficient options for proto=fd
[  135.021097][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'.
[  135.112995][ T6718] overlayfs: missing 'lowerdir'
[  135.118598][ T6718] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  135.223788][ T6733] netlink: 'syz.0.2239': attribute type 25 has an invalid length.
[  135.242538][ T6738] netlink: 'syz.0.2241': attribute type 4 has an invalid length.
[  135.619193][ T6747] 9pnet_fd: Insufficient options for proto=fd
[  135.633733][ T6749] veth1: entered allmulticast mode
[  135.639513][ T6748] veth1: left allmulticast mode
[  135.653206][ T6753] overlay: Unknown parameter 'fowner<00000000000000000000'
[  135.699360][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2252'.
[  135.710037][ T6766] overlayfs: failed to clone upperpath
[  135.716349][   T36] audit: type=1400 audit(1757396942.103:1729): avc:  denied  { shutdown } for  pid=6765 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  135.755067][   T36] audit: type=1400 audit(1757396942.133:1730): avc:  denied  { create } for  pid=6775 comm="syz.2.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[  135.821337][ T6794] netlink: 'syz.2.2262': attribute type 63 has an invalid length.
[  135.829191][ T6794] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2262'.
[  135.846494][ T6796] overlayfs: failed to resolve './file0': -2
[  135.846512][ T6797] overlayfs: failed to resolve './file0': -2
[  136.157856][   T36] audit: type=1400 audit(1757396942.533:1731): avc:  denied  { audit_read } for  pid=6814 comm="syz.1.2270" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  136.409869][ T6835] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2276'.
[  136.426755][   T36] audit: type=1400 audit(1757396942.803:1732): avc:  denied  { mounton } for  pid=6839 comm="syz.2.2277" path="/536/file0" dev="tmpfs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  136.426765][ T6840] EXT4-fs: Ignoring removed check option
[  136.426784][ T6840] No source specified
[  137.144099][ T6888] netlink: 'syz.0.2291': attribute type 27 has an invalid length.
[  137.152913][ T6888] lo: entered promiscuous mode
[  137.157805][ T6888] lo: entered allmulticast mode
[  137.161013][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.164624][ T6888] tunl0: entered promiscuous mode
[  137.176666][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.180877][ T6888] tunl0: entered allmulticast mode
[  137.181161][ T6888] gre0: entered promiscuous mode
[  137.194165][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.198934][ T6888] gre0: entered allmulticast mode
[  137.205546][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.223058][ T6888] gretap0: entered promiscuous mode
[  137.234195][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.242531][ T6888] gretap0: entered allmulticast mode
[  137.251732][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.257609][ T6888] erspan0: entered promiscuous mode
[  137.269175][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.278688][ T6888] erspan0: entered allmulticast mode
[  137.286900][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.292630][ T6888] ip_vti0: entered promiscuous mode
[  137.304462][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.314639][ T6888] ip_vti0: entered allmulticast mode
[  137.325874][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.0.2291
[  137.329645][ T6888] ip6_vti0: entered promiscuous mode
[  137.344863][ T6888] ip6_vti0: entered allmulticast mode
[  137.350598][ T6888] sit0: entered promiscuous mode
[  137.355895][ T6888] sit0: entered allmulticast mode
[  137.361348][ T6888] ip6tnl0: entered promiscuous mode
[  137.366874][ T6888] ip6tnl0: entered allmulticast mode
[  137.372650][ T6888] ip6gre0: entered promiscuous mode
[  137.377986][ T6888] ip6gre0: entered allmulticast mode
[  137.383772][ T6888] syz_tun: entered promiscuous mode
[  137.389100][ T6888] syz_tun: entered allmulticast mode
[  137.394884][ T6888] ip6gretap0: entered promiscuous mode
[  137.400754][ T6888] ip6gretap0: entered allmulticast mode
[  137.406781][ T6888] bridge0: entered promiscuous mode
[  137.412173][ T6888] bridge0: entered allmulticast mode
[  137.417775][ T6888] dummy0: entered promiscuous mode
[  137.422986][ T6888] dummy0: entered allmulticast mode
[  137.428372][ T6888] veth0: entered promiscuous mode
[  137.433638][ T6888] veth0: entered allmulticast mode
[  137.439011][ T6888] veth1: entered promiscuous mode
[  137.444306][ T6888] veth1: entered allmulticast mode
[  137.449637][ T6888] wg0: entered promiscuous mode
[  137.454717][ T6888] wg0: entered allmulticast mode
[  137.460195][ T6888] wg1: entered promiscuous mode
[  137.465438][ T6888] wg1: entered allmulticast mode
[  137.470653][ T6888] wg2: entered promiscuous mode
[  137.475986][ T6888] wg2: entered allmulticast mode
[  137.481246][ T6888] veth1_to_bridge: entered promiscuous mode
[  137.487454][ T6888] veth1_to_bridge: entered allmulticast mode
[  137.493991][ T6888] veth0_to_bond: entered promiscuous mode
[  137.499956][ T6888] veth0_to_bond: entered allmulticast mode
[  137.506132][ T6888] bond_slave_0: entered promiscuous mode
[  137.511874][ T6888] bond_slave_0: entered allmulticast mode
[  137.517813][ T6888] veth1_to_bond: entered promiscuous mode
[  137.523990][ T6888] veth1_to_bond: entered allmulticast mode
[  137.530362][ T6888] bond_slave_1: entered promiscuous mode
[  137.536254][ T6888] bond_slave_1: entered allmulticast mode
[  137.542267][ T6888] veth0_to_team: entered promiscuous mode
[  137.548044][ T6888] veth0_to_team: entered allmulticast mode
[  137.554221][ T6888] team_slave_0: entered promiscuous mode
[  137.559860][ T6888] team_slave_0: entered allmulticast mode
[  137.566081][ T6888] veth1_to_team: entered promiscuous mode
[  137.571882][ T6888] veth1_to_team: entered allmulticast mode
[  137.577987][ T6888] team_slave_1: entered promiscuous mode
[  137.583702][ T6888] team_slave_1: entered allmulticast mode
[  137.589651][ T6888] veth0_to_batadv: entered promiscuous mode
[  137.595575][ T6888] veth0_to_batadv: entered allmulticast mode
[  137.601966][ T6888] batadv_slave_0: entered promiscuous mode
[  137.607774][ T6888] batadv_slave_0: entered allmulticast mode
[  137.614125][ T6888] veth1_to_batadv: entered promiscuous mode
[  137.620243][ T6888] veth1_to_batadv: entered allmulticast mode
[  137.627182][ T6888] batadv_slave_1: entered promiscuous mode
[  137.634494][ T6888] batadv_slave_1: entered allmulticast mode
[  137.640669][ T6888] xfrm0: entered promiscuous mode
[  137.645893][ T6888] xfrm0: entered allmulticast mode
[  137.651230][ T6888] veth0_to_hsr: entered promiscuous mode
[  137.657101][ T6888] veth0_to_hsr: entered allmulticast mode
[  137.663296][ T6888] hsr_slave_0: entered promiscuous mode
[  137.668936][ T6888] hsr_slave_0: entered allmulticast mode
[  137.675132][ T6888] veth1_to_hsr: entered promiscuous mode
[  137.680761][ T6888] veth1_to_hsr: entered allmulticast mode
[  137.686884][ T6888] hsr_slave_1: entered promiscuous mode
[  137.692678][ T6888] hsr_slave_1: entered allmulticast mode
[  137.698567][ T6888] veth1_virt_wifi: entered promiscuous mode
[  137.704720][ T6888] veth1_virt_wifi: entered allmulticast mode
[  137.711137][ T6888] veth0_virt_wifi: entered promiscuous mode
[  137.717333][ T6888] veth0_virt_wifi: entered allmulticast mode
[  137.723754][ T6888] veth1_vlan: entered promiscuous mode
[  137.729253][ T6888] veth1_vlan: entered allmulticast mode
[  137.735317][ T6888] veth0_vlan: entered allmulticast mode
[  137.741335][ T6888] vlan0: entered promiscuous mode
[  137.746494][ T6888] vlan0: entered allmulticast mode
[  137.752133][ T6888] vlan1: entered promiscuous mode
[  137.757317][ T6888] vlan1: entered allmulticast mode
[  137.763074][ T6888] veth1_macvtap: entered allmulticast mode
[  137.769178][ T6888] veth0_macvtap: entered promiscuous mode
[  137.775041][ T6888] veth0_macvtap: entered allmulticast mode
[  137.781114][ T6888] macsec0: entered promiscuous mode
[  137.786582][ T6888] macsec0: entered allmulticast mode
[  137.793025][ T6888] : entered promiscuous mode
[  137.797722][ T6888] : entered allmulticast mode
[  137.806142][ T6888] syztnl0: entered promiscuous mode
[  137.811400][ T6888] syztnl0: entered allmulticast mode
[  137.817392][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'.
[  137.899909][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2307'.
[  137.965221][   T36] audit: type=1400 audit(1757396944.343:1733): avc:  denied  { map } for  pid=6947 comm="syz.3.2314" path="socket:[22949]" dev="sockfs" ino=22949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  137.988640][   T36] audit: type=1400 audit(1757396944.343:1734): avc:  denied  { read } for  pid=6947 comm="syz.3.2314" path="socket:[22949]" dev="sockfs" ino=22949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  138.075504][   T36] audit: type=1400 audit(1757396944.453:1735): avc:  denied  { execute } for  pid=6958 comm="syz.3.2317" name="file0" dev="ramfs" ino=22266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  138.098172][   T36] audit: type=1400 audit(1757396944.453:1736): avc:  denied  { execute_no_trans } for  pid=6958 comm="syz.3.2317" path="/file0" dev="ramfs" ino=22266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  138.128496][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2318'.
[  138.315114][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.322227][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.329298][ T6980] bridge_slave_0: entered allmulticast mode
[  138.335672][ T6980] bridge_slave_0: entered promiscuous mode
[  138.342658][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.349683][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.357124][ T6980] bridge_slave_1: entered allmulticast mode
[  138.363356][ T6980] bridge_slave_1: entered promiscuous mode
[  138.369424][   T60] bridge_slave_1: left allmulticast mode
[  138.375146][   T60] bridge_slave_1: left promiscuous mode
[  138.380798][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.388312][   T60] bridge_slave_0: left allmulticast mode
[  138.394026][   T60] bridge_slave_0: left promiscuous mode
[  138.399605][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.417324][   T60] bridge0 (unregistering): left allmulticast mode
[  138.469023][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'.
[  138.509154][   T60] veth1_macvtap: left promiscuous mode
[  138.514884][   T60] veth0_vlan: left promiscuous mode
[  138.570387][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.577485][ T6980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.584815][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.589117][ T7008] 9pnet_fd: Insufficient options for proto=fd
[  138.591949][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.607438][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.616301][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.625595][ T7010] netlink: 'syz.2.2334': attribute type 40 has an invalid length.
[  138.633644][ T7009] netlink: 'syz.2.2334': attribute type 40 has an invalid length.
[  138.650166][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.657341][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.665938][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.673015][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.686249][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'.
[  138.710897][ T6980] veth0_vlan: entered promiscuous mode
[  138.723504][ T6980] veth1_macvtap: entered promiscuous mode
[  138.754982][   T36] audit: type=1400 audit(1757396945.133:1737): avc:  denied  { mounton } for  pid=6980 comm="syz-executor" path="/root/syzkaller.S3xKmh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  139.079900][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'.
[  139.201941][   T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.353120][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.363056][   T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=5f47, bcdDevice= 0.e8
[  139.372357][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.381192][   T45] usb 4-1: config 0 descriptor??
[  139.715819][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'.
[  139.883319][   T45] usbhid 4-1:0.0: can't add hid device: -71
[  139.899486][   T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  139.911525][   T45] usb 4-1: USB disconnect, device number 7
[  140.081269][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.101877][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.111196][ T7091] bridge_slave_0: entered allmulticast mode
[  140.123828][ T7091] bridge_slave_0: entered promiscuous mode
[  140.138529][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.152936][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.163796][ T7091] bridge_slave_1: entered allmulticast mode
[  140.170151][ T7091] bridge_slave_1: entered promiscuous mode
[  140.241335][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.248424][ T7091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.255750][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.262962][ T7091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.287438][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.295452][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.313362][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.320438][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.332096][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.339154][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.362003][ T7091] veth0_vlan: entered promiscuous mode
[  140.374723][ T7091] veth1_macvtap: entered promiscuous mode
[  140.461523][   T36] audit: type=1400 audit(1757396946.833:1738): avc:  denied  { connect } for  pid=7111 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  140.461861][ T7112] loop2: detected capacity change from 0 to 7
[  140.491911][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.501064][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.509497][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.518760][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.527926][ T7112]  loop2: unable to read partition table
[  140.534153][ T7112] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  140.547737][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.556904][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.565124][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.574285][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.582444][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.591591][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.599788][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.609107][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.617821][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.627023][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.635106][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.644424][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.652538][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  140.661767][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  140.669602][ T7113]  loop2: unable to read partition table
[  140.717358][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'.
[  140.773140][   T36] audit: type=1400 audit(1757396947.153:1739): avc:  denied  { ioctl } for  pid=7119 comm="syz.1.2366" path="socket:[23973]" dev="sockfs" ino=23973 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.953674][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.981788][   T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  141.057643][   T12] tipc: Left network mode
[  141.062486][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.069518][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.078138][ T7131] bridge_slave_0: entered allmulticast mode
[  141.084493][ T7131] bridge_slave_0: entered promiscuous mode
[  141.134150][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.141316][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.148632][ T7131] bridge_slave_1: entered allmulticast mode
[  141.155915][   T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.168485][ T7131] bridge_slave_1: entered promiscuous mode
[  141.181207][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.193688][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.211973][   T45] usb 4-1: Product: syz
[  141.216156][   T45] usb 4-1: Manufacturer: syz
[  141.228765][   T45] usb 4-1: SerialNumber: syz
[  141.297419][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.304514][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.322684][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.329743][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.365221][ T7131] veth0_vlan: entered promiscuous mode
[  141.378480][ T7131] veth1_macvtap: entered promiscuous mode
[  141.428208][   T36] audit: type=1400 audit(1757396947.803:1740): avc:  denied  { map } for  pid=7143 comm="syz.1.2371" path="socket:[23383]" dev="sockfs" ino=23383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.466204][   T36] audit: type=1400 audit(1757396947.803:1741): avc:  denied  { read } for  pid=7143 comm="syz.1.2371" path="socket:[23383]" dev="sockfs" ino=23383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.500907][ T7152] binder: Bad value for 'max'
[  141.506076][   T36] audit: type=1400 audit(1757396947.873:1742): avc:  denied  { setopt } for  pid=7143 comm="syz.1.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.527119][ T7156] binder: Bad value for 'max'
[  141.543409][   T36] audit: type=1401 audit(1757396947.913:1743): op=fscreate invalid_context=CFA7AE
[  141.556525][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'.
[  141.570041][ T7161] fuse: Bad value for 'rootmode'
[  141.661883][ T7170] rust_binder: Error while translating object.
[  141.661943][ T7170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  141.668138][ T7170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27
[  141.764471][   T36] audit: type=1400 audit(1757396948.143:1744): avc:  denied  { connect } for  pid=7175 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  141.825365][   T36] audit: type=1400 audit(1757396948.203:1745): avc:  denied  { nlmsg_read } for  pid=7181 comm="syz.2.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  142.265660][   T45] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  142.272893][   T45] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  142.280387][   T45] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  142.401569][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'.
[  142.419810][ T7198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2388'.
[  142.440067][ T7200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2389'.
[  142.483904][   T36] audit: type=1400 audit(1757396948.863:1746): avc:  denied  { execmod } for  pid=7201 comm="syz.1.2390" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  142.502739][ T7204] x_tables: duplicate entry at hook 2
[  142.729891][ T7206] cannot load conntrack support for proto=3
[  142.750760][ T7206] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  142.758096][ T7206] rust_binder: 32: no such ref 0
[  142.951852][  T554] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  142.972112][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'.
[  142.983127][   T45] cdc_ncm 4-1:1.0: setting tx_max = 88
[  142.998602][   T45] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  143.001555][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'.
[  143.013955][   T45] usb 4-1: USB disconnect, device number 8
[  143.026130][   T45] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  143.104910][  T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.115270][  T554] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  143.124484][  T330] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  143.132101][  T554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.140840][  T554] usb 1-1: config 0 descriptor??
[  143.219296][   T36] audit: type=1400 audit(1757396949.593:1747): avc:  denied  { mounton } for  pid=7234 comm="syz.3.2401" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  143.272416][   T36] audit: type=1400 audit(1757396949.653:1748): avc:  denied  { setattr } for  pid=7234 comm="syz.3.2401" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  143.292883][  T330] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  143.303644][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.312802][  T330] usb 2-1: config 0 descriptor??
[  143.323019][   T36] audit: type=1326 audit(1757396949.703:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.3.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd57218ebe9 code=0x0
[  143.519432][  T330] usb 2-1: Cannot read MAC address
[  143.524738][  T330] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  143.538695][  T330] usb 2-1: USB disconnect, device number 12
[  143.556735][  T554] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0
[  143.641636][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.651593][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.752331][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.760907][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.769741][ T7208] rust_binder: Write failure EFAULT in pid:25
[  143.770042][  T330] usb 1-1: USB disconnect, device number 7
[  143.882259][  T600] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  143.909063][ T7260] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2408'.
[  144.033341][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'.
[  144.043422][  T600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.061170][  T600] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  144.071804][  T600] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  144.080929][  T600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.091109][  T600] usb 4-1: config 0 descriptor??
[  144.114295][ T7264] rust_binder: Write failure EFAULT in pid:38
[  144.312597][  T554] usb 4-1: USB disconnect, device number 9
[  144.551795][  T600] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.651600][ T7286] /dev/rnullb0: Can't open blockdev
[  144.684088][  T600] usb 1-1: device descriptor read/64, error -71
[  144.932313][  T600] usb 1-1: device descriptor read/64, error -71
[  144.951817][  T554] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  145.061818][  T330] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  145.081822][  T554] usb 2-1: device descriptor read/64, error -71
[  145.171809][  T600] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  145.191867][  T330] usb 4-1: device descriptor read/64, error -71
[  145.194218][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'.
[  145.207066][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'.
[  145.301799][  T600] usb 1-1: device descriptor read/64, error -71
[  145.351862][  T554] usb 2-1: device descriptor read/64, error -71
[  145.431811][  T330] usb 4-1: device descriptor read/64, error -71
[  145.551836][  T600] usb 1-1: device descriptor read/64, error -71
[  145.601784][  T554] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  145.661578][  T600] usb usb1-port1: attempt power cycle
[  145.671515][  T330] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  145.731003][  T554] usb 2-1: device descriptor read/64, error -71
[  145.800579][  T330] usb 4-1: device descriptor read/64, error -71
[  145.969201][  T554] usb 2-1: device descriptor read/64, error -71
[  145.998898][  T600] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  146.019797][  T600] usb 1-1: device descriptor read/8, error -71
[  146.038570][  T330] usb 4-1: device descriptor read/64, error -71
[  146.078333][  T554] usb usb2-port1: attempt power cycle
[  146.147893][  T330] usb usb4-port1: attempt power cycle
[  146.148802][  T600] usb 1-1: device descriptor read/8, error -71
[  146.397769][  T600] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  146.415635][  T554] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  146.426644][  T600] usb 1-1: device descriptor read/8, error -71
[  146.444460][  T554] usb 2-1: device descriptor read/8, error -71
[  146.468191][ T7349] netlink: 'syz.2.2439': attribute type 4 has an invalid length.
[  146.485697][  T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  146.506196][  T330] usb 4-1: device descriptor read/8, error -71
[  146.512622][ T7352] cgroup: fork rejected by pids controller in /syz2
[  146.565228][  T600] usb 1-1: device descriptor read/8, error -71
[  146.595417][  T554] usb 2-1: device descriptor read/8, error -71
[  146.635001][  T330] usb 4-1: device descriptor read/8, error -71
[  146.674387][  T600] usb usb1-port1: unable to enumerate USB device
[  146.832490][  T554] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  146.853352][  T554] usb 2-1: device descriptor read/8, error -71
[  146.872131][  T330] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  146.892868][  T330] usb 4-1: device descriptor read/8, error -71
[  146.982645][  T554] usb 2-1: device descriptor read/8, error -71
[  147.022136][  T330] usb 4-1: device descriptor read/8, error -71
[  147.090505][  T554] usb usb2-port1: unable to enumerate USB device
[  147.140105][  T330] usb usb4-port1: unable to enumerate USB device
[  147.349260][   T36] kauditd_printk_skb: 9 callbacks suppressed
[  147.349277][   T36] audit: type=1400 audit(1757396953.746:1759): avc:  denied  { read } for  pid=7492 comm="syz.0.2446" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  147.385163][   T36] audit: type=1400 audit(1757396953.746:1760): avc:  denied  { open } for  pid=7492 comm="syz.0.2446" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  147.409850][   T36] audit: type=1400 audit(1757396953.746:1761): avc:  denied  { ioctl } for  pid=7492 comm="syz.0.2446" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  147.447963][   T36] audit: type=1400 audit(1757396953.847:1762): avc:  denied  { load_policy } for  pid=7498 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  147.473199][ T7499] SELinux: failed to load policy
[  147.502571][   T36] audit: type=1400 audit(1757396953.897:1763): avc:  denied  { ioctl } for  pid=7500 comm="syz.0.2448" path="mnt:[4026532299]" dev="nsfs" ino=4026532299 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  147.600077][ T7511] loop0: detected capacity change from 0 to 7
[  147.606756][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.615957][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.624227][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.633489][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.641583][ T7511]  loop0: unable to read partition table
[  147.648670][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.657901][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.666399][ T7511] loop_reread_partitions: partition scan of loop0 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  147.680228][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.689390][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.697547][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.706701][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.732146][ T7514] 9pnet_fd: Insufficient options for proto=fd
[  147.738983][ T7511] Invalid logical block size (7)
[  147.744824][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.754109][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.762810][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.772155][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.780308][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.789476][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.797454][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.805403][ T7516] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004'
[  147.806612][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  147.822403][ T7512]  loop0: unable to read partition table
[  147.869232][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  147.870729][   T36] audit: type=1400 audit(1757396954.270:1764): avc:  denied  { write } for  pid=7529 comm="syz.1.2457" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  147.884520][ T7532] overlayfs: failed to clone upperpath
[  148.069890][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.077139][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.084532][ T7537] bridge_slave_0: entered allmulticast mode
[  148.090776][ T7537] bridge_slave_0: entered promiscuous mode
[  148.097532][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.104637][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.111721][ T7537] bridge_slave_1: entered allmulticast mode
[  148.117997][ T7537] bridge_slave_1: entered promiscuous mode
[  148.159902][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.166980][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.174290][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.181337][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.200344][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.207681][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.214940][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  148.225254][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.232335][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.240996][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.248058][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.269382][ T7537] veth0_vlan: entered promiscuous mode
[  148.279314][ T7537] veth1_macvtap: entered promiscuous mode
[  148.371868][   T10] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  148.380123][   T10] usb 4-1: config 0 has no interface number 1
[  148.386396][   T10] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  148.396476][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  148.408254][   T10] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  148.417539][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  148.425757][   T10] usb 4-1: SerialNumber: syz
[  148.430958][   T10] usb 4-1: config 0 descriptor??
[  148.436736][   T10] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  148.443741][   T10] usb 4-1: No valid video chain found.
[  148.519245][ T7552] pim6reg1: entered promiscuous mode
[  148.524613][ T7552] pim6reg1: entered allmulticast mode
[  148.539407][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  148.594649][ T7554] rust_binder: Write failure EFAULT in pid:68
[  148.606331][   T36] audit: type=1400 audit(1757396955.006:1765): avc:  denied  { mounton } for  pid=7558 comm="syz.0.2464" path="/" dev="configfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.646705][ T7561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  148.646729][ T7561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75
[  148.656605][ T7561] rust_binder: 75: no such ref 2
[  148.671123][ T7561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75
[  148.673569][   T36] audit: type=1400 audit(1757396955.076:1766): avc:  denied  { write } for  pid=7242 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26019 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  148.714186][ T7563] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  148.728012][    T9] usb 3-1: Using ep0 maxpacket: 32
[  148.734323][    T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  148.742759][    T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  148.751890][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  148.761142][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.771563][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  148.781814][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  148.795115][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  148.804428][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.812292][ T7565] binder: Unknown parameter 'defcontext01777777777777777777777'
[  148.815862][    T9] usb 3-1: config 0 descriptor??
[  148.987365][   T36] audit: type=1400 audit(1757396955.399:1767): avc:  denied  { ioctl } for  pid=7527 comm="syz.3.2456" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  148.995506][ T7577] rust_binder: Write failure EFAULT in pid:59
[  149.026110][    T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.044973][    T9] usb 3-1: USB disconnect, device number 12
[  149.052408][    T9] usblp0: removed
[  149.462515][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  149.611371][    T9] usb 3-1: Using ep0 maxpacket: 32
[  149.617612][    T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  149.626249][    T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  149.634997][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  149.644064][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.653718][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.663385][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.676490][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  149.685745][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.694463][    T9] usb 3-1: config 0 descriptor??
[  149.919159][  T371] Bluetooth: hci0: command 0x1003 tx timeout
[  149.919159][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  149.953477][   T36] audit: type=1400 audit(1757396956.366:1768): avc:  denied  { mount } for  pid=7583 comm="syz.1.2471" name="/" dev="ramfs" ino=25113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  149.958672][ T7584] 9pnet: bogus RWRITE count (2 > 1)
[  150.105220][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.113923][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.228528][    T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  150.242286][    T9] usb 3-1: USB disconnect, device number 13
[  150.248863][    T9] usblp0: removed
[  150.422639][ T7593] loop2: detected capacity change from 0 to 7
[  150.429498][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.438678][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  150.446759][ T7593]  loop2: unable to read partition table
[  150.452544][ T7593] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  150.488579][  T328] syzkaller0: tun_net_xmit 76
[  150.488638][ T7595] syzkaller0: create flow: hash 2634487866 index 1
[  150.493404][  T328] syzkaller0: tun_net_xmit 48
[  150.505414][ T7595] syzkaller0: delete flow: hash 2634487866 index 1
[  150.553932][ T7599] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  150.865037][ T7611] rust_binder: Read failure Err(EAGAIN) in pid:11
[  150.874857][ T7617] fuse: Bad value for 'group_id'
[  150.886290][ T7617] fuse: Bad value for 'group_id'
[  150.915473][   T31] usb 4-1: USB disconnect, device number 14
[  151.018897][ T7632] /dev/rnullb0: Can't open blockdev
[  151.034202][ T7634] rust_binder: Write failure EFAULT in pid:71
[  151.257117][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.266567][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.288479][ T7656] rust_binder: 76: no such ref 0
[  151.293681][ T7656] rust_binder: 76: no such ref 3
[  151.299167][ T7656] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  151.308056][ T7656] rust_binder: Write failure EINVAL in pid:76
[  151.320183][ T7666] netlink: 'syz.3.2497': attribute type 28 has an invalid length.
[  151.334722][ T7668] netlink: 'syz.3.2497': attribute type 28 has an invalid length.
[  151.555858][ T7682] input: syz1 as /devices/virtual/input/input8
[  151.725997][ T7242] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  151.855069][ T7242] usb 2-1: device descriptor read/64, error -71
[  151.886787][ T7684] binder: Unknown parameter 'maxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  152.093392][ T7242] usb 2-1: device descriptor read/64, error -71
[  152.130533][ T7689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95
[  152.192693][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  152.341626][ T7242] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  152.362548][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  152.374073][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.383839][    T9] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  152.393418][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.402213][    T9] usb 1-1: config 0 descriptor??
[  152.470709][ T7242] usb 2-1: device descriptor read/64, error -71
[  152.709078][ T7242] usb 2-1: device descriptor read/64, error -71
[  152.818340][ T7242] usb usb2-port1: attempt power cycle
[  152.965885][   T36] kauditd_printk_skb: 11 callbacks suppressed
[  152.965900][   T36] audit: type=1400 audit(1757396959.397:1780): avc:  denied  { write } for  pid=7697 comm="syz.3.2507" name="igmp6" dev="proc" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  152.967542][ T7699] rust_binder: 7698 RLIMIT_NICE not set
[  152.995033][ T7699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.004134][  T554] rust_binder: 7697: removing orphan mapping 0:4248
[  153.020563][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  153.026643][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  153.036437][    T9] usb 1-1: USB disconnect, device number 12
[  153.063095][ T7704] rust_binder: 104: no such ref 3
[  153.068253][ T7704] rust_binder: Error while translating object.
[  153.068275][ T7704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  153.074549][ T7704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104
[  153.155912][ T7242] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  153.186646][ T7242] usb 2-1: device descriptor read/8, error -71
[  153.325701][ T7242] usb 2-1: device descriptor read/8, error -71
[  153.563049][ T7242] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  153.579967][   T36] audit: type=1400 audit(1757396960.012:1781): avc:  denied  { append } for  pid=7711 comm="syz.0.2510" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.604857][ T7242] usb 2-1: device descriptor read/8, error -71
[  153.620711][   T36] audit: type=1400 audit(1757396960.042:1782): avc:  denied  { map } for  pid=7711 comm="syz.0.2510" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.655737][ T7710] rust_binder: Error while translating object.
[  153.655774][ T7710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.661964][ T7710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[  153.697697][ T7717] rust_binder: 7717 RLIMIT_NICE not set
[  153.706955][ T7719] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  153.712645][ T7717] __nla_validate_parse: 3 callbacks suppressed
[  153.712663][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2513'.
[  153.717652][ T7719] rust_binder: Read failure Err(EFAULT) in pid:100
[  153.748573][  T600] rust_binder: 7716: removing orphan mapping 0:1192
[  153.762501][ T7242] usb 2-1: device descriptor read/8, error -71
[  153.781569][ T7727] rust_binder: Write failure EFAULT in pid:106
[  153.796832][ T7730] rust_binder: Write failure EFAULT in pid:108
[  153.854201][ T7742] loop2: detected capacity change from 0 to 7
[  153.867054][    C0] blk_print_req_error: 6 callbacks suppressed
[  153.867068][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.871048][ T7242] usb usb2-port1: unable to enumerate USB device
[  153.873258][    C0] buffer_io_error: 6 callbacks suppressed
[  153.873274][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  153.903460][ T7743] binder: Bad value for 'stats'
[  153.908726][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.917908][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  153.925787][ T7742]  loop2: unable to read partition table
[  153.926170][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'.
[  153.940746][ T7742] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  153.955231][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.964497][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  153.975820][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.985003][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  154.001556][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.010722][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  154.020007][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.029193][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  154.037770][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.046981][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  154.249832][ T7754] rust_binder: 91: no such ref 1
[  154.254833][ T7754] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  154.254950][ T7752] rust_binder: Error in use_page_slow: ESRCH
[  154.268378][ T7752] rust_binder: use_range failure ESRCH
[  154.268404][ T7752] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  154.273943][ T7752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  154.288056][ T7752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91
[  154.337765][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  154.346063][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.496634][    T9] usb 4-1: Using ep0 maxpacket: 8
[  154.503966][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  154.513156][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.521185][    T9] usb 4-1: Product: syz
[  154.525342][    T9] usb 4-1: Manufacturer: syz
[  154.530317][    T9] usb 4-1: SerialNumber: syz
[  154.657177][ T7770] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2532'.
[  154.737007][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  154.774868][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  154.903993][  T600] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  154.924919][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00
[  154.934015][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.938482][   T45] usb 4-1: USB disconnect, device number 15
[  154.942946][   T36] audit: type=1400 audit(1757396961.391:1783): avc:  denied  { read write } for  pid=7749 comm="syz.3.2525" name="lp0" dev="devtmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  154.951333][   T45] usblp0: removed
[  154.972429][   T36] audit: type=1400 audit(1757396961.391:1784): avc:  denied  { open } for  pid=7749 comm="syz.3.2525" path="/dev/usb/lp0" dev="devtmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  155.000208][   T10] usb 3-1: config 0 descriptor??
[  155.083667][  T600] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  155.092791][  T600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.101316][  T600] usb 1-1: config 0 descriptor??
[  155.405203][   T10] wacom 0003:056A:0044.0003: Unknown device_type for 'HID 056a:0044'. Assuming pen.
[  155.415460][   T10] wacom 0003:056A:0044.0003: hidraw0: USB HID v1.01 Device [HID 056a:0044] on usb-dummy_hcd.2-1/input0
[  155.427486][   T10] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0044.0003/input/input9
[  155.452101][ T7773] rust_binder: 114: no such ref 2
[  155.457376][ T7773] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  155.465633][ T7774] rust_binder: Write failure EINVAL in pid:114
[  155.567817][ T7780] /dev/sg0: Can't lookup blockdev
[  155.605757][    T9] usb 3-1: USB disconnect, device number 14
[  155.709876][  T600] usb 1-1: Cannot set MAC address
[  155.715012][  T600] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  155.727155][  T600] usb 1-1: USB disconnect, device number 13
[  155.907149][ T7242] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  156.056098][ T7242] usb 4-1: Using ep0 maxpacket: 8
[  156.062258][ T7242] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  156.070511][ T7242] usb 4-1: config 0 has no interface number 1
[  156.076646][ T7242] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  156.087509][ T7242] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  156.099172][ T7242] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  156.110566][ T7242] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  156.120789][ T7242] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  156.137868][ T7784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  156.137899][ T7784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:76
[  156.139548][   T36] audit: type=1400 audit(1757396962.599:1785): avc:  denied  { write } for  pid=7783 comm="syz.2.2536" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  156.181146][ T7242] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81
[  156.192672][ T7242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 1024
[  156.203824][ T7242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  156.216872][ T7242] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  156.225974][ T7242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.234813][ T7242] usb 4-1: Product: syz
[  156.246545][ T7242] usb 4-1: Manufacturer: syz
[  156.251172][ T7242] usb 4-1: SerialNumber: syz
[  156.277604][ T7242] usb 4-1: config 0 descriptor??
[  156.283265][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.354139][  T371] Bluetooth: hci0: command 0x1003 tx timeout
[  156.354201][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  156.498148][ T7782] netlink: 'syz.3.2535': attribute type 4 has an invalid length.
[  156.510427][  T600] usb 4-1: USB disconnect, device number 16
[  156.562725][ T7242] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  156.712737][ T7242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.722921][ T7242] usb 3-1: config 0 has no interfaces?
[  156.728401][ T7242] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  156.737455][ T7242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.746448][ T7242] usb 3-1: config 0 descriptor??
[  156.951171][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.959679][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.970354][  T600] usb 3-1: USB disconnect, device number 15
[  157.187707][ T7817] rust_binder: Error while translating object.
[  157.187737][ T7817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  157.193968][ T7817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128
[  157.223512][ T7819] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.246850][ T7827] rust_binder: Error while translating object.
[  157.254994][ T7827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  157.261427][ T7827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115
[  157.272448][ T7829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133
[  157.307878][  T600] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  157.309540][ T7833] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  157.332396][ T7833] rust_binder: Write failure EINVAL in pid:117
[  157.334806][ T7833] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  157.348420][ T7833] rust_binder: Write failure EINVAL in pid:117
[  157.481343][  T600] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  157.497872][  T600] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  157.512980][  T600] usb 3-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.00
[  157.522120][  T600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=246
[  157.530494][  T600] usb 3-1: SerialNumber: syz
[  157.535578][  T600] usb 3-1: config 0 descriptor??
[  157.571654][ T7848] rust_binder: 7847 RLIMIT_NICE not set
[  157.572553][ T7848] rust_binder: Read failure Err(EFAULT) in pid:129
[  157.665463][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  157.740300][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.749287][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.757614][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.766117][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.774235][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.782810][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.790948][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.799513][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.807323][    T9] usb 2-1: device descriptor read/64, error -71
[  157.813974][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.822716][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.841716][  T600] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  157.864614][  T600] usb 3-1: USB disconnect, device number 16
[  157.898537][   T36] audit: type=1400 audit(1757396964.371:1786): avc:  denied  { append } for  pid=7864 comm="syz.3.2561" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  157.901016][ T7865] rust_binder: Write failure EFAULT in pid:146
[  157.977446][ T7887] FAULT_INJECTION: forcing a failure.
[  157.977446][ T7887] name failslab, interval 1, probability 0, space 0, times 1
[  157.979962][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'.
[  157.983763][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.3.2565 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  157.983790][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.983804][ T7887] Call Trace:
[  157.983810][ T7887]  <TASK>
[  157.983818][ T7887]  __dump_stack+0x21/0x30
[  157.983845][ T7887]  dump_stack_lvl+0x10c/0x190
[  157.983865][ T7887]  ? __cfi_dump_stack_lvl+0x10/0x10
[  157.983886][ T7887]  ? release_sock+0x171/0x1f0
[  157.983908][ T7887]  dump_stack+0x19/0x20
[  157.983927][ T7887]  should_fail_ex+0x3d9/0x530
[  157.983943][ T7887]  should_failslab+0xac/0x100
[  157.983961][ T7887]  kmem_cache_alloc_node_noprof+0x45/0x3b0
[  157.983983][ T7887]  ? __alloc_skb+0x10c/0x370
[  157.984004][ T7887]  __alloc_skb+0x10c/0x370
[  157.984025][ T7887]  netlink_alloc_large_skb+0xf7/0x1b0
[  157.984047][ T7887]  netlink_sendmsg+0x586/0xaf0
[  157.984065][ T7887]  ? __cfi_netlink_sendmsg+0x10/0x10
[  157.984082][ T7887]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  157.984100][ T7887]  ? security_socket_sendmsg+0x33/0xd0
[  157.984116][ T7887]  sock_write_iter+0x499/0x4f0
[  157.984135][ T7887]  ? __cfi_sock_write_iter+0x10/0x10
[  157.984161][ T7887]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  157.984183][ T7887]  vfs_write+0x694/0xe80
[  157.984199][ T7887]  ? __cfi_sock_write_iter+0x10/0x10
[  157.984217][ T7887]  ? __cfi_vfs_write+0x10/0x10
[  157.984233][ T7887]  ksys_write+0x141/0x250
[  157.984248][ T7887]  ? __cfi_ksys_write+0x10/0x10
[  157.984263][ T7887]  ? __kasan_check_read+0x15/0x20
[  157.984284][ T7887]  __x64_sys_write+0x7f/0x90
[  157.984299][ T7887]  x64_sys_call+0x271c/0x2ee0
[  157.984320][ T7887]  do_syscall_64+0x58/0xf0
[  157.984342][ T7887]  ? clear_bhb_loop+0x50/0xa0
[  157.984362][ T7887]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  157.984381][ T7887] RIP: 0033:0x7fd57218ebe9
[  157.984399][ T7887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.984414][ T7887] RSP: 002b:00007fd572f24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  157.984432][ T7887] RAX: ffffffffffffffda RBX: 00007fd5723c5fa0 RCX: 00007fd57218ebe9
[  157.984445][ T7887] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000b
[  157.984456][ T7887] RBP: 00007fd572f24090 R08: 0000000000000000 R09: 0000000000000000
[  157.984467][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.984477][ T7887] R13: 00007fd5723c6038 R14: 00007fd5723c5fa0 R15: 00007ffe38636eb8
[  157.984491][ T7887]  </TASK>
[  158.047472][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'.
[  158.108055][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'.
[  158.268874][    T9] usb 2-1: device descriptor read/64, error -71
[  158.286114][ T7892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  158.286136][ T7892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:157
[  158.323521][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.344138][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.381023][   T36] audit: type=1400 audit(1757396964.844:1787): avc:  denied  { append } for  pid=7903 comm="syz.2.2572" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  158.405111][   T36] audit: type=1326 audit(1757396964.854:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.2573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174918ebe9 code=0x0
[  158.510017][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  158.559701][  T554] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  158.573280][ T7918] cgroup: Unknown subsys name 'euid<00000000000000000000'
[  158.581847][ T7918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[  158.649150][    T9] usb 2-1: device descriptor read/64, error -71
[  158.688942][  T554] usb 4-1: device descriptor read/64, error -71
[  158.724294][   T36] audit: type=1400 audit(1757396965.196:1789): avc:  denied  { write } for  pid=7923 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.897581][    T9] usb 2-1: device descriptor read/64, error -71
[  158.927362][  T554] usb 4-1: device descriptor read/64, error -71
[  158.986987][  T600] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  159.006912][    T9] usb usb2-port1: attempt power cycle
[  159.136012][  T600] usb 3-1: Using ep0 maxpacket: 32
[  159.142293][  T600] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  159.150800][  T600] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  159.159521][  T600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  159.168520][  T600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.175795][  T554] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  159.178257][  T600] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.195500][  T600] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  159.208461][  T600] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  159.217549][  T600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.230928][  T600] usb 3-1: config 0 descriptor??
[  159.254337][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'.
[  159.294139][ T7935] loop2: detected capacity change from 0 to 7
[  159.301048][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.310252][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.318246][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.318498][  T554] usb 4-1: device descriptor read/64, error -71
[  159.327515][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.334741][ T7118]  loop2: unable to read partition table
[  159.354631][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  159.363428][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.372613][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.380870][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.385383][    T9] usb 2-1: device descriptor read/8, error -71
[  159.390151][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.404331][ T7935]  loop2: unable to read partition table
[  159.410128][ T7935] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  159.424210][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.433395][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.441502][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.441497][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.441524][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.460209][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.474961][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.484396][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.492738][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.501909][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.502556][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.518356][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.527531][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.538761][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.550353][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.559914][    T9] usb 2-1: device descriptor read/8, error -71
[  159.567729][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.578703][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.588947][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.599906][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.610313][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.619498][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  159.628682][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  159.637750][ T7935]  loop2: unable to read partition table
[  159.638588][  T554] usb 4-1: device descriptor read/64, error -71
[  159.662814][  T600] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  159.682817][  T600] usb 3-1: USB disconnect, device number 17
[  159.689617][  T600] usblp0: removed
[  159.729985][  T109]  loop2: unable to read partition table
[  159.752228][  T554] usb usb4-port1: attempt power cycle
[  159.756672][ T7937] binder: Bad value for 'stats'
[  159.762796][ T7938] binder: Bad value for 'stats'
[  159.776996][ T7940] FAULT_INJECTION: forcing a failure.
[  159.776996][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  159.790259][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.0.2585 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  159.790280][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  159.790287][ T7940] Call Trace:
[  159.790290][ T7940]  <TASK>
[  159.790295][ T7940]  __dump_stack+0x21/0x30
[  159.790313][ T7940]  dump_stack_lvl+0x10c/0x190
[  159.790325][ T7940]  ? __cfi_dump_stack_lvl+0x10/0x10
[  159.790338][ T7940]  dump_stack+0x19/0x20
[  159.790350][ T7940]  should_fail_ex+0x3d9/0x530
[  159.790361][ T7940]  should_fail+0xf/0x20
[  159.790369][ T7940]  should_fail_usercopy+0x1e/0x30
[  159.790378][ T7940]  _copy_from_iter+0x1a3/0x14b0
[  159.790390][ T7940]  ? __virt_addr_valid+0x2a6/0x380
[  159.790400][ T7940]  ? __cfi__copy_from_iter+0x10/0x10
[  159.790410][ T7940]  ? __check_object_size+0x50a/0x810
[  159.790420][ T7940]  ? __cfi___check_object_size+0x10/0x10
[  159.790429][ T7940]  ? skb_put+0x112/0x1f0
[  159.790443][ T7940]  netlink_sendmsg+0x680/0xaf0
[  159.790454][ T7940]  ? __cfi_netlink_sendmsg+0x10/0x10
[  159.790464][ T7940]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  159.790475][ T7940]  ? security_socket_sendmsg+0x33/0xd0
[  159.790484][ T7940]  sock_write_iter+0x499/0x4f0
[  159.790497][ T7940]  ? __cfi_sock_write_iter+0x10/0x10
[  159.790509][ T7940]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  159.790522][ T7940]  vfs_write+0x694/0xe80
[  159.790530][ T7940]  ? __cfi_sock_write_iter+0x10/0x10
[  159.790541][ T7940]  ? __cfi_vfs_write+0x10/0x10
[  159.790551][ T7940]  ksys_write+0x141/0x250
[  159.790560][ T7940]  ? __cfi_ksys_write+0x10/0x10
[  159.790568][ T7940]  ? fd_install+0x175/0x2e0
[  159.790578][ T7940]  ? __kasan_check_read+0x15/0x20
[  159.790591][ T7940]  __x64_sys_write+0x7f/0x90
[  159.790599][ T7940]  x64_sys_call+0x271c/0x2ee0
[  159.790612][ T7940]  do_syscall_64+0x58/0xf0
[  159.790626][ T7940]  ? clear_bhb_loop+0x50/0xa0
[  159.790638][ T7940]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  159.790650][ T7940] RIP: 0033:0x7f174918ebe9
[  159.790658][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.790666][ T7940] RSP: 002b:00007f1747be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  159.790678][ T7940] RAX: ffffffffffffffda RBX: 00007f17493c5fa0 RCX: 00007f174918ebe9
[  159.790685][ T7940] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000b
[  159.790692][ T7940] RBP: 00007f1747be3090 R08: 0000000000000000 R09: 0000000000000000
[  159.790698][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.790704][ T7940] R13: 00007f17493c6038 R14: 00007f17493c5fa0 R15: 00007ffd5b37f618
[  159.790712][ T7940]  </TASK>
[  160.051892][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  160.066859][ T7942] rust_binder: Error in use_page_slow: ESRCH
[  160.066878][ T7942] rust_binder: use_range failure ESRCH
[  160.078419][ T7942] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  160.078443][ T7942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  160.086597][ T7942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:148
[  160.096337][    T9] usb 2-1: device descriptor read/8, error -71
[  160.202012][ T7949] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  160.250110][    T9] usb 2-1: device descriptor read/8, error -71
[  160.318631][  T554] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  160.368309][  T554] usb 4-1: device descriptor read/8, error -71
[  160.368368][    T9] usb usb2-port1: unable to enumerate USB device
[  160.423256][ T7951] loop2: detected capacity change from 0 to 7
[  160.430299][ T7118]  loop2: unable to read partition table
[  160.437567][ T7951]  loop2: unable to read partition table
[  160.444342][ T7951] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  160.508521][  T554] usb 4-1: device descriptor read/8, error -71
[  160.566939][  T109]  loop2: unable to read partition table
[  160.631187][  T109]  loop2: unable to read partition table
[  160.651999][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'.
[  160.676121][  T109]  loop2: unable to read partition table
[  160.689849][ T7962] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  160.699086][ T7962] rust_binder: Write failure EINVAL in pid:152
[  160.706370][  T109]  loop2: unable to read partition table
[  160.727746][   T36] audit: type=1400 audit(1757396967.219:1790): avc:  denied  { getattr } for  pid=7963 comm="syz.2.2592" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  160.765875][  T554] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  160.777121][  T109]  loop2: unable to read partition table
[  160.796354][ T7966] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  160.797033][ T7966] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  160.806546][  T554] usb 4-1: device descriptor read/8, error -71
[  160.822985][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'.
[  160.832071][ T7968] FAULT_INJECTION: forcing a failure.
[  160.832071][ T7968] name failslab, interval 1, probability 0, space 0, times 0
[  160.844913][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.2.2594 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  160.844940][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.844951][ T7968] Call Trace:
[  160.844959][ T7968]  <TASK>
[  160.844966][ T7968]  __dump_stack+0x21/0x30
[  160.844994][ T7968]  dump_stack_lvl+0x10c/0x190
[  160.845016][ T7968]  ? __cfi_dump_stack_lvl+0x10/0x10
[  160.845039][ T7968]  dump_stack+0x19/0x20
[  160.845061][ T7968]  should_fail_ex+0x3d9/0x530
[  160.845081][ T7968]  should_failslab+0xac/0x100
[  160.845099][ T7968]  kmem_cache_alloc_node_noprof+0x45/0x3b0
[  160.845125][ T7968]  ? __alloc_skb+0x10c/0x370
[  160.845149][ T7968]  __alloc_skb+0x10c/0x370
[  160.845172][ T7968]  ? __kasan_check_read+0x15/0x20
[  160.845196][ T7968]  netlink_ack+0x155/0xa50
[  160.845213][ T7968]  ? avc_has_perm_noaudit+0x286/0x360
[  160.845238][ T7968]  ? avc_has_perm+0x144/0x220
[  160.845265][ T7968]  netlink_rcv_skb+0x2b2/0x4a0
[  160.845281][ T7968]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[  160.845304][ T7968]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  160.845323][ T7968]  ? netlink_autobind+0x1c0/0x1c0
[  160.845343][ T7968]  ? is_vmalloc_addr+0x11/0x40
[  160.845362][ T7968]  rtnetlink_rcv+0x20/0x30
[  160.845383][ T7968]  netlink_unicast+0x8c0/0xa60
[  160.845409][ T7968]  netlink_sendmsg+0x7f0/0xaf0
[  160.845428][ T7968]  ? __cfi_netlink_sendmsg+0x10/0x10
[  160.845447][ T7968]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  160.845468][ T7968]  ? security_socket_sendmsg+0x33/0xd0
[  160.845486][ T7968]  sock_write_iter+0x499/0x4f0
[  160.845507][ T7968]  ? __cfi_sock_write_iter+0x10/0x10
[  160.845529][ T7968]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  160.845553][ T7968]  vfs_write+0x694/0xe80
[  160.845569][ T7968]  ? __cfi_sock_write_iter+0x10/0x10
[  160.845590][ T7968]  ? __cfi_vfs_write+0x10/0x10
[  160.845609][ T7968]  ksys_write+0x141/0x250
[  160.845625][ T7968]  ? __cfi_ksys_write+0x10/0x10
[  160.845642][ T7968]  ? __kasan_check_read+0x15/0x20
[  160.845665][ T7968]  __x64_sys_write+0x7f/0x90
[  160.845693][ T7968]  x64_sys_call+0x271c/0x2ee0
[  160.845716][ T7968]  do_syscall_64+0x58/0xf0
[  160.845741][ T7968]  ? clear_bhb_loop+0x50/0xa0
[  160.845763][ T7968]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  160.845782][ T7968] RIP: 0033:0x7fa2b118ebe9
[  160.845796][ T7968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.845809][ T7968] RSP: 002b:00007fa2b1f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  160.845827][ T7968] RAX: ffffffffffffffda RBX: 00007fa2b13c5fa0 RCX: 00007fa2b118ebe9
[  160.845841][ T7968] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000b
[  160.845852][ T7968] RBP: 00007fa2b1f85090 R08: 0000000000000000 R09: 0000000000000000
[  160.845865][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.845876][ T7968] R13: 00007fa2b13c6038 R14: 00007fa2b13c5fa0 R15: 00007ffc2792f358
[  160.845892][ T7968]  </TASK>
[  161.005343][  T554] usb 4-1: device descriptor read/8, error -71
[  161.146288][  T109]  loop2: unable to read partition table
[  161.148916][ T7971] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  161.161009][ T7971] overlayfs: missing 'lowerdir'
[  161.185453][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  161.234527][   T36] audit: type=1400 audit(1757396967.722:1791): avc:  denied  { unmount } for  pid=7131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  161.242550][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  161.263461][  T554] usb usb4-port1: unable to enumerate USB device
[  161.270277][  T109]  loop2: unable to read partition table
[  161.305537][ T7979] SELinux:  Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped).
[  161.305807][ T7983] rust_binder: Write failure EFAULT in pid:126
[  161.315342][   T36] audit: type=1400 audit(1757396967.812:1792): avc:  denied  { relabelto } for  pid=7978 comm="syz.0.2597" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0"
[  161.325351][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'.
[  161.357380][   T36] audit: type=1400 audit(1757396967.812:1793): avc:  denied  { associate } for  pid=7978 comm="syz.0.2597" name="ashmem" dev="devtmpfs" ino=201 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_key_t:s0"
[  161.424527][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'.
[  161.460924][ T7998] syz.3.2604 (7998): /proc/7996/oom_adj is deprecated, please use /proc/7996/oom_score_adj instead.
[  161.472791][ T7986] overlay: ./file1 is not a directory
[  161.602852][ T8004] SELinux:  Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped).
[  161.612682][   T36] audit: type=1400 audit(1757396968.104:1794): avc:  denied  { relabelto } for  pid=8003 comm="syz.1.2606" name="file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  161.613172][ T8004] fuse: Unknown parameter '9�W4��fd'
[  161.639195][   T36] audit: type=1400 audit(1757396968.104:1795): avc:  denied  { associate } for  pid=8003 comm="syz.1.2606" name="file0" dev="tmpfs" ino=260 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0"
[  161.739893][  T600] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  161.888886][  T600] usb 1-1: Using ep0 maxpacket: 8
[  161.894929][  T600] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  161.906034][  T600] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  161.919204][  T600] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.925800][  T600] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  161.934892][  T600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.943761][  T600] usb 1-1: config 0 descriptor??
[  162.305710][ T8007] binder: Unknown parameter 'context�'
[  162.349403][  T600] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0
[  162.383159][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2609'.
[  162.548774][  T600] usb 1-1: USB disconnect, device number 14
[  162.556370][    T9] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19
[  163.127028][ T8035] kvm: pic: non byte write
[  163.191188][  T371] Bluetooth: hci0: command 0x1003 tx timeout
[  163.197225][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  163.210981][   T36] audit: type=1326 audit(1757396969.704:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57218ebe9 code=0x7fc00000
[  163.288967][ T8047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  163.289003][ T8047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:164
[  163.456771][ T8055] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  163.514067][ T8062] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  163.521478][ T8062] rust_binder: Write failure EINVAL in pid:195
[  163.539498][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2627'.
[  163.554815][ T8064] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  163.555032][ T8064] rust_binder: got new transaction with bad transaction stack
[  163.561474][ T8064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199
[  163.581149][    T9] rust_binder: 8063: removing orphan mapping 0:1192
[  163.589617][  T554] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  163.610661][ T8069] can: request_module (can-proto-7) failed.
[  163.748919][  T554] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  163.761810][  T554] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  163.770858][  T554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.779467][  T554] usb 3-1: config 0 descriptor??
[  163.867101][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  164.017302][    T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  164.026513][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.035110][    T9] usb 4-1: config 0 descriptor??
[  164.143815][   T36] kauditd_printk_skb: 67 callbacks suppressed
[  164.143831][   T36] audit: type=1400 audit(1757396970.649:1864): avc:  denied  { setopt } for  pid=8079 comm="syz.0.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  164.176480][ T8080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  164.176522][ T8080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180
[  164.228075][  T554] usbhid 3-1:0.0: can't add hid device: -71
[  164.248581][   T36] audit: type=1326 audit(1757396970.760:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.3.2630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57218ebe9 code=0x0
[  164.260973][  T554] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  164.281909][  T554] usb 3-1: USB disconnect, device number 18
[  164.358218][   T36] audit: type=1400 audit(1757396970.870:1866): avc:  denied  { accept } for  pid=8087 comm="syz.0.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  164.415768][   T36] audit: type=1400 audit(1757396970.931:1867): avc:  denied  { watch } for  pid=8087 comm="syz.0.2636" path="/60/file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  164.595502][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'.
[  164.732073][  T554] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  164.861290][  T554] usb 3-1: device descriptor read/64, error -71
[  165.099885][  T554] usb 3-1: device descriptor read/64, error -71
[  165.125778][   T36] audit: type=1400 audit(1757396971.635:1868): avc:  denied  { execstack } for  pid=8118 comm="syz.1.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  165.338519][  T554] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  165.467753][  T554] usb 3-1: device descriptor read/64, error -71
[  165.706375][  T554] usb 3-1: device descriptor read/64, error -71
[  165.758744][   T36] audit: type=1400 audit(1757396972.278:1869): avc:  denied  { getopt } for  pid=8126 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.815934][  T554] usb usb3-port1: attempt power cycle
[  166.152521][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.160564][  T554] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  166.160583][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.176909][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.184919][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.193839][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.194180][  T554] usb 3-1: device descriptor read/8, error -71
[  166.201999][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.216622][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.224636][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.233439][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.241345][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.249838][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.257774][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.266563][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.274480][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.282884][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.290803][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.299879][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.307854][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.316384][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.324295][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.333122][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.333826][  T554] usb 3-1: device descriptor read/8, error -71
[  166.341055][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.341206][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.363553][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.372359][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.380311][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.388838][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.396752][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.405473][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.413406][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.421813][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.429727][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.438416][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.446346][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.454896][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.466142][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.475183][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.483777][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.492389][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.500324][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.509815][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.517832][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.523691][ T8137] selinux_netlink_send: 23 callbacks suppressed
[  166.523710][ T8137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8137 comm=syz.1.2655
[  166.526666][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.552976][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.561769][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.569667][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.578280][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.586225][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.594987][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.601268][  T554] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  166.602987][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.621342][    T9] usb 4-1: Cannot set autoneg
[  166.626511][    T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  166.631493][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.639256][    T9] usb 4-1: USB disconnect, device number 21
[  166.649909][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.660525][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.660865][  T554] usb 3-1: device descriptor read/8, error -71
[  166.668739][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.683115][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.691142][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.699932][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.707925][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.716358][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.724444][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.733244][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.741210][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.749691][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.757793][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.767063][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.775129][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.783584][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.791656][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.800428][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.808337][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.816781][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.821069][  T554] usb 3-1: device descriptor read/8, error -71
[  166.824757][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.840059][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.847966][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.856485][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.864424][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.873119][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.881031][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.889469][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.897398][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.906081][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.914037][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.922458][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.930645][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.939336][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.947270][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.949424][  T554] usb usb3-port1: unable to enumerate USB device
[  166.955715][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.969913][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.979421][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.987326][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.995775][ T8132] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  167.003679][ T8132] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  167.055284][   T36] audit: type=1400 audit(1757396973.576:1870): avc:  denied  { lock } for  pid=8144 comm="syz.1.2659" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  167.145015][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'.
[  167.218143][ T8172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  167.218176][ T8172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213
[  167.240356][ T8180] overlayfs: failed to clone upperpath
[  167.261913][ T8182] tipc: Started in network mode
[  167.266830][ T8182] tipc: Node identity 4, cluster identity 4711
[  167.273488][ T8182] tipc: Node number set to 4
[  167.327244][   T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  167.496265][   T45] usb 1-1: Using ep0 maxpacket: 16
[  167.503582][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.514161][   T45] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  167.523397][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  167.534399][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.542277][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'.
[  167.544302][   T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  167.563881][   T45] usb 1-1: config 1 interface 1 has no altsetting 0
[  167.576884][   T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.589815][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.598649][   T45] usb 1-1: Product: syz
[  167.604317][   T45] usb 1-1: Manufacturer: syz
[  167.606028][ T8196] 9pnet_fd: Insufficient options for proto=fd
[  167.609193][   T45] usb 1-1: SerialNumber: syz
[  167.616404][ T8196] 9pnet_fd: Insufficient options for proto=fd
[  167.647449][ T8203] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  167.673641][   T36] audit: type=1400 audit(1757396974.199:1871): avc:  denied  { unmount } for  pid=7537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  167.808058][ T8212] bpf: Bad value for 'gid'
[  167.812973][ T8212] overlayfs: missing 'lowerdir'
[  167.837362][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'.
[  167.885207][ T8147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217
[  167.948260][   T45] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  167.965305][   T45] usb 1-1: 2:1 : format type 9 is not supported yet
[  167.980042][   T45] usb 1-1: USB disconnect, device number 15
[  168.124887][   T36] audit: type=1400 audit(1757396974.652:1872): avc:  denied  { mounton } for  pid=8232 comm="syz.3.2691" path="/73/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  168.134345][ T8233] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  168.156973][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.164400][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.171733][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.178950][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.186111][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.193332][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.200711][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.207915][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.215135][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.222436][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.229535][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.236751][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.243889][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.251001][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.258257][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.265470][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.272694][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.279809][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.287142][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.294349][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.301445][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.308681][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.315864][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.323106][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.330318][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.337522][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.344699][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.351926][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.359026][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.366690][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.373939][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.381127][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.388405][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.395634][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.402811][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.409921][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.417069][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.424276][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.431454][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.438597][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.445763][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.452942][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.460417][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.467794][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.475226][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.475611][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'.
[  168.491303][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.499511][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.507099][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.514383][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.530555][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.538180][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.545629][ T8241] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  168.546486][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.570296][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.578560][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.585905][   T36] audit: type=1400 audit(1757396975.104:1873): avc:  denied  { accept } for  pid=8244 comm="syz.1.2695" path="socket:[30917]" dev="sockfs" ino=30917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.612168][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.619908][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.627618][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.638765][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.649202][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.656735][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.666144][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.673547][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.681177][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.688493][ T8233] overlay: filesystem on ./bus not supported as upperdir
[  168.721009][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  168.832977][ T8273] rust_binder: Write failure EFAULT in pid:235
[  168.896972][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'.
[  168.898566][  T554] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  168.982625][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[  168.989120][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[  169.067626][  T554] usb 3-1: Using ep0 maxpacket: 16
[  169.073910][  T554] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  169.082046][  T554] usb 3-1: config 0 has no interface number 0
[  169.088167][  T554] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  169.098001][  T554] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  169.107913][  T554] usb 3-1: config 0 interface 41 has no altsetting 0
[  169.116076][  T554] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  169.125159][  T554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.133165][  T554] usb 3-1: Product: syz
[  169.137355][  T554] usb 3-1: Manufacturer: syz
[  169.141939][  T554] usb 3-1: SerialNumber: syz
[  169.147314][  T554] usb 3-1: config 0 descriptor??
[  169.152549][ T8259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.159785][ T8259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.366721][ T8259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.373997][ T8259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.442921][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'.
[  169.465618][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  169.465634][   T36] audit: type=1400 audit(1757396976.009:1876): avc:  denied  { connect } for  pid=8302 comm="syz.0.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  169.580797][ T8259] fuse: Bad value for 'fd'
[  169.586286][  T554] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  169.595973][  T554] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  169.605532][  T554] usb 3-1: USB disconnect, device number 23
[  170.022472][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'.
[  170.451459][   T36] audit: type=1326 audit(1757396976.994:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.2730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a7038ebe9 code=0x0
[  170.470130][  T554] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  170.504507][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'.
[  170.629947][  T554] usb 3-1: not running at top speed; connect to a high speed hub
[  170.638550][  T554] usb 3-1: config 95 has an invalid interface number: 1 but max is 0
[  170.646819][  T554] usb 3-1: config 95 has no interface number 0
[  170.653022][  T554] usb 3-1: config 95 interface 1 has no altsetting 0
[  170.661120][  T554] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  170.670205][  T554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.678290][  T554] usb 3-1: Product: syz
[  170.682465][  T554] usb 3-1: Manufacturer: syz
[  170.687057][  T554] usb 3-1: SerialNumber: syz
[  170.903761][   T36] audit: type=1400 audit(1757396977.447:1878): avc:  denied  { relabelfrom } for  pid=8348 comm="syz.0.2733" name="NETLINK" dev="sockfs" ino=31152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  170.921611][ T8349] binder: Unknown parameter '017777777777777777777770x0000000000000003'
[  170.939526][  T554] usb 3-1: USB disconnect, device number 24
[  170.955060][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'.
[  170.956036][ T7118] udevd[7118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  170.987516][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  171.014069][ T8354] binder: Unknown parameter '0xffffffffffffffff'
[  171.015307][ T8355] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2736'.
[  171.265906][ T7242] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  171.415147][ T7242] usb 4-1: Using ep0 maxpacket: 8
[  171.422107][ T7242] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  171.432211][ T7242] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  171.438134][   T36] audit: type=1326 audit(1757396977.980:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.1.2745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7038ebe9 code=0x0
[  171.444313][ T7242] usb 4-1: string descriptor 0 read error: -22
[  171.466039][   T36] audit: type=1326 audit(1757396978.020:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.2746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2b118ebe9 code=0x0
[  171.471618][ T7242] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.503334][ T7242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.755737][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.764642][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.804927][ T7242] cdc_ncm 4-1:1.0: bind() failure
[  171.810725][ T7242] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  171.817554][ T7242] cdc_ncm 4-1:1.1: bind() failure
[  171.825087][ T7242] usb 4-1: USB disconnect, device number 22
[  172.220040][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'.
[  172.237070][ T8389] xt_NFQUEUE: number of total queues is 0
[  172.779661][ T8405] netlink: 'syz.1.2754': attribute type 10 has an invalid length.
[  172.787478][ T8405] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2754'.
[  172.814248][ T8410] overlayfs: failed to clone upperpath
[  173.722064][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'.
[  174.048631][ T8424] overlay: Unknown parameter 'euid<00000000000000000000'
[  174.073539][ T8431] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  174.081474][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.090375][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.190300][ T8439] cgroup2: Unknown parameter 'memory_levents'
[  174.196516][ T8436] cgroup2: Unknown parameter 'memory_levents'
[  174.219345][ T8441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:266
[  174.594118][   T36] audit: type=1326 audit(1757396981.156:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.1.2773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7038ebe9 code=0x0
[  174.907350][  T600] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  175.036682][  T600] usb 3-1: device descriptor read/64, error -71
[  175.108819][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'.
[  175.275546][  T600] usb 3-1: device descriptor read/64, error -71
[  175.365433][  T554] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  175.514344][  T600] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  175.515419][  T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.531768][  T554] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  175.540953][  T554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.549478][  T554] usb 4-1: config 0 descriptor??
[  175.643711][  T600] usb 3-1: device descriptor read/64, error -71
[  175.882669][  T600] usb 3-1: device descriptor read/64, error -71
[  175.954893][   T36] audit: type=1400 audit(1757396982.522:1882): avc:  denied  { associate } for  pid=8474 comm="syz.3.2777" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  175.977860][  T554] usbhid 4-1:0.0: can't add hid device: -71
[  175.983848][  T554] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  175.992789][  T554] usb 4-1: USB disconnect, device number 23
[  175.994173][  T600] usb usb3-port1: attempt power cycle
[  176.340369][  T600] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  176.361150][  T600] usb 3-1: device descriptor read/8, error -71
[  176.490567][  T600] usb 3-1: device descriptor read/8, error -71
[  176.728437][  T600] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  176.749314][  T600] usb 3-1: device descriptor read/8, error -71
[  176.878787][  T600] usb 3-1: device descriptor read/8, error -71
[  176.987277][  T600] usb usb3-port1: unable to enumerate USB device
[  177.081863][ T8490] rust_binder: Write failure EFAULT in pid:281
[  177.121964][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'.
[  177.186591][   T36] audit: type=1400 audit(1757396983.768:1883): avc:  denied  { unmount } for  pid=7131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  177.227094][ T8518] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=8518 comm=syz.3.2792
[  177.260408][ T8525] incfs: Options parsing error. -22
[  177.265705][ T8525] incfs: mount failed -22
[  177.294350][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'.
[  177.355592][ T8533] rust_binder: Failed to allocate buffer. len:18446744073709551392, is_oneway:true
[  177.355619][ T8533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  177.364943][ T8533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:310
[  177.414587][ T8539] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2801'.
[  177.446050][   T36] audit: type=1326 audit(1757396984.030:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.0.2802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174918ebe9 code=0x0
[  177.446762][ T8545] overlayfs: missing 'lowerdir'
[  177.496437][ T8546] rust_binder: Error while translating object.
[  177.496479][ T8546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  177.502651][ T8546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:279
[  177.674097][ T8548] SELinux: security_context_str_to_sid () failed with errno=-22
[  177.742779][ T8551] netlink: 'syz.2.2804': attribute type 1 has an invalid length.
[  177.750613][ T8551] netlink: 'syz.2.2804': attribute type 2 has an invalid length.
[  177.974859][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'.
[  177.992353][ T8561] FAT-fs (rnullb0): bogus number of reserved sectors
[  177.999130][ T8561] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  178.153816][ T8565] fuse: Unknown parameter 'gq���froup_id'
[  178.160359][ T8565] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  178.163484][ T8565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  178.170006][ T8565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:245
[  178.228037][  T390] rust_binder: 8536: removing orphan mapping 0:24
[  178.252238][ T8582] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2814'.
[  178.306133][ T8594] input: syz1 as /devices/virtual/input/input14
[  178.312800][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'.
[  178.356800][   T36] audit: type=1326 audit(1757396984.934:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.2.2819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fa2b1185ba7 code=0x0
[  178.416587][ T8600] netlink: 'syz.0.2820': attribute type 4 has an invalid length.
[  178.449285][   T36] audit: type=1326 audit(1757396985.024:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.2818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd572185ba7 code=0x0
[  178.473308][   T36] audit: type=1326 audit(1757396985.054:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.3.2818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd572185ba7 code=0x0
[  178.775660][ T8606] SELinux: failed to load policy
[  178.784831][ T8606] binder: Bad value for 'max'
[  179.207501][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.220186][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.237004][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.245569][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.254235][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.264203][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.286349][   T36] audit: type=1326 audit(1757396985.868:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.0.2830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174918ebe9 code=0x0
[  179.325932][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'.
[  179.347827][ T8639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  179.376958][ T8642] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  179.785884][ T8651] overlayfs: failed to clone lowerpath
[  180.069624][   T36] audit: type=1400 audit(1757396986.652:1889): avc:  denied  { read write } for  pid=8655 comm="syz.0.2837" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  180.094173][   T36] audit: type=1400 audit(1757396986.652:1890): avc:  denied  { open } for  pid=8655 comm="syz.0.2837" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  180.135688][   T13] syzkaller0: tun_net_xmit 76
[  180.153072][   T13] syzkaller0: tun_net_xmit 48
[  180.159088][ T8656] syzkaller0: create flow: hash 2634487866 index 1
[  180.165867][   T64] syzkaller0: tun_net_xmit 76
[  180.224687][ T8656] syzkaller0: delete flow: hash 2634487866 index 1
[  180.282882][ T8662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  180.282917][ T8662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:284
[  180.377859][ T8666] 9pnet_fd: Insufficient options for proto=fd
[  180.426727][ T8669] fuse: Unknown parameter 'froup_id'
[  180.557272][ T8678] overlayfs: failed to clone upperpath
[  180.615643][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2849'.
[  180.689964][   T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  180.839298][   T45] usb 3-1: Using ep0 maxpacket: 16
[  180.844897][   T45] usb 3-1: too many configurations: 97, using maximum allowed: 8
[  180.853614][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.863922][   T45] usb 3-1: config 0 has no interfaces?
[  180.870357][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.880595][   T45] usb 3-1: config 0 has no interfaces?
[  180.886920][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.897325][   T45] usb 3-1: config 0 has no interfaces?
[  180.903779][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.914168][   T45] usb 3-1: config 0 has no interfaces?
[  180.920532][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.930885][   T45] usb 3-1: config 0 has no interfaces?
[  180.937089][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.947714][   T45] usb 3-1: config 0 has no interfaces?
[  180.954098][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.964428][   T45] usb 3-1: config 0 has no interfaces?
[  180.970971][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.981366][   T45] usb 3-1: config 0 has no interfaces?
[  181.080771][   T45] usb 3-1: string descriptor 0 read error: -71
[  181.087529][   T45] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  181.097250][   T45] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  181.107328][   T45] usb 3-1: config 0 descriptor??
[  181.116273][   T45] usb 3-1: can't set config #0, error -71
[  181.123279][   T45] usb 3-1: USB disconnect, device number 29
[  181.342905][ T7242] hid-generic 0000:0008:0002.0005: unknown main item tag 0x5
[  181.350368][ T7242] hid-generic 0000:0008:0002.0005: item fetching failed at offset 7/8
[  181.358668][ T7242] hid-generic 0000:0008:0002.0005: probe with driver hid-generic failed with error -22
[  181.596023][ T8700] binder: Binderfs stats mode cannot be changed during a remount
[  181.614803][ T8702] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  181.634039][   T36] audit: type=1400 audit(1757396988.229:1891): avc:  denied  { read } for  pid=8703 comm="syz.2.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  181.634968][ T8704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  181.709083][ T8714] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  181.738070][ T8723] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2864'.
[  181.826007][ T8731] No source specified
[  182.194929][ T8735] rust_binder: 331: no such ref 0
[  182.200488][ T8736] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  182.207787][ T8736] rust_binder: 331: no such ref 0
[  182.249273][ T8739] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  182.257684][ T8739] rust_binder: Write failure EINVAL in pid:334
[  182.257759][ T8740] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  182.272294][ T8740] rust_binder: Write failure EINVAL in pid:334
[  182.325552][ T8742] ------------[ cut here ]------------
[  182.337211][ T8742] WARNING: CPU: 1 PID: 8742 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0
[  182.347059][ T8742] Modules linked in:
[  182.350958][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.3.2871 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  182.362686][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  182.373114][ T8742] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0
[  182.379213][ T8742] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0
[  182.398961][ T8742] RSP: 0018:ffffc9000b7efc88 EFLAGS: 00010202
[  182.405061][ T8742] RAX: 1ffffd1ffff87d32 RBX: ffffc90001efd8e8 RCX: ffffffff816dc9a9
[  182.413066][ T8742] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc3e990
[  182.421062][ T8742] RBP: ffffc9000b7efcf0 R08: ffffe8ffffc3e997 R09: 1ffffd1ffff87d32
[  182.429067][ T8742] R10: dffffc0000000000 R11: fffff91ffff87d33 R12: dffffc0000000000
[  182.437061][ T8742] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc3e990
[  182.445066][ T8742] FS:  00007fd572f246c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  182.453988][ T8742] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.460592][ T8742] CR2: 000000110c2bd202 CR3: 00000001217be000 CR4: 00000000003526b0
[  182.468771][ T8742] Call Trace:
[  182.472082][ T8742]  <TASK>
[  182.475042][ T8742]  kvm_put_kvm+0x1100/0x12b0
[  182.479642][ T8742]  ? __cfi_kvm_vm_release+0x10/0x10
[  182.484850][ T8742]  kvm_vm_release+0x47/0x70
[  182.489400][ T8742]  __fput+0x1fe/0xa00
[  182.493405][ T8742]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  182.498977][ T8742]  ____fput+0x20/0x30
[  182.502967][ T8742]  task_work_run+0x1e3/0x250
[  182.507582][ T8742]  ? __cfi_task_work_run+0x10/0x10
[  182.512699][ T8742]  ? __kasan_check_write+0x18/0x20
[  182.517839][ T8742]  resume_user_mode_work+0x36/0x50
[  182.523041][ T8742]  syscall_exit_to_user_mode+0x64/0xb0
[  182.528513][ T8742]  do_syscall_64+0x64/0xf0
[  182.532959][ T8742]  ? clear_bhb_loop+0x50/0xa0
[  182.537741][ T8742]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  182.543653][ T8742] RIP: 0033:0x7fd57218ebe9
[  182.548082][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.567747][ T8742] RSP: 002b:00007fd572f24038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  182.576183][ T8742] RAX: 0000000000000000 RBX: 00007fd5723c5fa0 RCX: 00007fd57218ebe9
[  182.584161][ T8742] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  182.592153][ T8742] RBP: 00007fd572211e19 R08: 0000000000000000 R09: 0000000000000000
[  182.600152][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.608161][ T8742] R13: 00007fd5723c6038 R14: 00007fd5723c5fa0 R15: 00007ffe38636eb8
[  182.616256][ T8742]  </TASK>
[  182.619273][ T8742] ---[ end trace 0000000000000000 ]---