last executing test programs:

8.216319824s ago: executing program 3 (id=395):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4)
futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x80030}], 0x1, 0xe7b, 0x0, 0x41)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xae, "9108cf28306ea51de54c6dc89be2b9120c3dbcec7e5ffcbbf6a49c42f6079d1059e41ed1f8a10edc6abba95734e653d63ff7d6406527f00b823a976d4bc051e1d19de1e196ca44c19aff0ea9721a2246c78c4108e22501e3554423226ce4a095e816235173732d5f5b8cf9c09b9a7dceddfa2455a864b5fda0fb863166de8df2039a86a7943b3941e6c808f07003f65c1b746f9e514811afa07cddc6c25925f5ce3f82feccdd62ab391acd74ad94"}, &(0x7f0000000140)=0xd2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7, 0x49be})

7.931962236s ago: executing program 3 (id=400):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x80080)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x1000, 0x1, "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"})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x10f, 0x15, 0x0, 0x62)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = dup(r6)
getpeername$packet(r7, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x8000000000000000)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010002"], 0x1c}}, 0x814)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x46, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

7.929963766s ago: executing program 3 (id=401):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x9, 0x9, 0xfe, 0x4}, {0x7fff, 0x2, 0x8, 0x3}, {0x8, 0x4, 0x5, 0x3}, {0x100, 0xff, 0x5, 0x9}, {0x101, 0x80, 0x81, 0x1}, {0x5, 0x5, 0x9, 0x8}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x9, 0x9, 0xfe, 0x4}, {0x7fff, 0x2, 0x8, 0x3}, {0x8, 0x4, 0x5, 0x3}, {0x100, 0xff, 0x5, 0x9}, {0x101, 0x80, 0x81, 0x1}, {0x5, 0x5, 0x9, 0x8}]})
epoll_create1(0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @generic="334924eb"]}]}]}, 0x2c}}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x267, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\a\x00'/13], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\a\x00'/13], 0x0, 0x0, 0x0, 0x0}, 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) (async)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c00140014"], 0x30}}, 0xc840)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) (async)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0x2000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

4.868296131s ago: executing program 3 (id=421):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdjo=', @ANYRESHEX=r4, @ANYBLOB=',cache=loose,\x00'])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r7, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2000c519000045303265178197f47af56d16011c223195f81f7043ffffffffffff348e9187148f258ce1c51708ff7f000000000000465ec4627d454c0f84a4bfa30c43ce1055c03a000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r10 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000300), 0x0)
fallocate(r11, 0x0, 0x0, 0x10fff9)

3.820383665s ago: executing program 2 (id=429):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
memfd_secret(0x80000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080), 0x0, 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)

3.808268046s ago: executing program 2 (id=430):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x8, 0x2})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000080)={{r0}, "01f93692b6a24312bc263543730136c27249c4cd72bcc360b62b4d0ec5e61e5f7996336697768de1cc2cc4cb29d3313975b03220a8b65a6cc8504be873893bb38e3ee6d0f950c64066dc9ef24efdbbccc3c8cce2e5991522f8485e555fff66ad256c165d828ae76684a5f8f4b93fc8e0ef4500ff55c8e7720b4469c064e935a874e36b668f86bcd19c0a09413b93e15ef339fcfb227bbbfcd9f4467117f27dca11fb95e0842dfe43b0d0f001cf9e186505c8c803a700e9ac719193965e40a66aeeda1941c7432ad9505f5ef5c1a8621d388d98e794f6e21b22f8cdb23aec65d77e245b48c1ec7dd82d5c17cb60e045c7c5748932bffb6eb1f7b4340043400c3984b8a0ca235b77536f877f0215bec2059ee19d12e996066f5c1d85dea648ef34345ba0bc04f2e26a372e99fa2245bc0d773e861dbb013f69e8ba100c00e6e856a0b550a61c3033fc6400cf6ebe847506bbd5995a40e3a6e602408f454e2d082aa660bd5f4cae381110972cc36d22b082d89bbfc0adc6dcd092c36b7fc3e96778b5171f1da643ef7a8dc5db9510afc04ed5ab4f56a8e5d44dd946abc91a106daf63b9c2b3025034b7de407b1fe81552752fac43ea36858fed94a60461d8459cdf8a70abe1efb82b2f3b096c6a7f2537578d07c72e9c65c7f8f9c6a823940c1a6e93a69d4f40ea819dafa6666922242c2710e3c32bf6c354d1f437af47402d8404a0afdd6003dbddd96dce2e1ab89fd095853146e1e3b8977500b6d2d33b45866c6991f242f08e88138d6e0bc730d13bdcf41341b7c2c4642ca106eef766f5289f246b02d42873ae00794909b83babaad05f517f03df62d8cc6d5dd42bbb363c76fff26750fc84f6630d3783024784f07b746b2d2f1b100fef3d5ea5f1a98b822a190c0156373ba8a8fd578f9453f522dd28e738c7d401b0b7cbd8ae4e1f4b624e8dbc7b49a66f253b2a7738f9c6d6dd3177309ba84d17722dff3d96db1e4ec278e2450ac6751eec13928d9bbea1a1268b248b6f00aad62b3774a4cad054b5cdac3af96e57b5593663030207e3b6766b0ea790a2c0cafbe75a91f5177d5ba0ee3e23a6c34859f50704a2e4397ee6599389cd69b28561ed884f6b00658c5a5f0abf709f730e240d92e8d55fac947b9e63bff902798738d2a9ab0c5b2146b496a8b901505b02a3409c9189b9d14fd7abbded13ae9ec1d09625a6b4ad494cf847e42f88001ba35e56b64854ed5feaea7e3cda579d0551e603f352809316294b37b924d614273222fe7a461ed658c8376699f9689f29bd5876a591620d63907a3b4cc392788e54f707fe15b79b466cd394521e232616bc2d4d56287bb9bd8626ce0084913590e856852983c42c0003fdcfd19b13a106b88d51ee7ed7fd0c5fa80819dba343a916449951b8fd4f39db801403a3578a50173c89a60fa9aecc22f42425cfc76a43a410ffb3c59a0d150092ae161dea6790f9cde8e29caba64511c482381efa794aa13d8c1cc359d76be4b191b698c737cd1073eb068caf7d8241a1950df7669752b972b970595173c4446ae0bdb99dc47c52c6f81190c93801127c5cb05e9df10fa29cae709275e2c702ecc9dd6a60cee1ff5cf6ccb7fe27c09a2f71eaa56b49dff5df6f1780c18b5a47fb8613ae3718cceaf6872b1b4d0ccdbebd6005be656a74513107771eda6bc59f3b250bab14127b6db7d0d46b728cc602a20f0a52108b76134023b0635ffebc040b174974efbf65acf8667566e16a1da98f80faeaa714f83df336f9ebd567925f54cae541c3db0a7d18f4501d90ab9e5826e362915fd3d3f78662c5d187e2a893f8d1569dff631291bc832cb30230e8344e5526f862f52e0517bafc75294765e7b2ea0e5da96a79f47869c4906823a7bf997e3ef191358f8269a94e098fb76139b70da3b58708571cb55913024e69f11fe4581fe15f600dd547cdfdb37402b7e76c10e67ec75076708f25fddb92da6e2161f6884d09d4dd060deedfa216aabb3b399230e4a8e4d118c8891a24dbe2d20edea44014fe931a6f2a9319b4d51f5ba56a7b4e196c042c44e856ad2bcb23b8bde71f5494ac30b5dac46d182858d176b180deea62ef15dd5d17337631f67628073bc43b208917f288aa72ac933d3a32551029796389d0d251b498c75bf939f70d9ba08e78b951300285160a08b8d71771ed790186b8768f0044dc8a408a4568cf61f956e8d2904b6916e506f1df0334e6041ff0399a69adbb560638d37336a60defccc6b1a05381be8eca21c1e0a2fe28d39d21957be24ccb0c10b9f8b85bd9555edddc6b1fcbad671c681fae0f646984cefa760948f05adbbe296aa85aba147b6aa52ee0f712f2b4fdace856b2fdbe20b3188e4f85d6e450f2147b8e1f99eb5dd14689977bfa9e43d138e26c979f263cef9c5dddd97ae5e1673b24e2ecd631d8021bd9eb0b7ba6c9f258e8230d9226a487c489b5638e3011d09124174f196ca6226a8455abce0bbdcc2eb337bd51be248e4f7273385501e90fd58efa9f0bf9f0b516e7dfcefd2203582bb7a1c6bed83232a74ca28a35bfe7d259817c957fd9ba81f7cb11112e8acf24f540ea3f474974e6ab6d45a7383c43cf8b4ce85bfcacc466fe09974e92a7a0f250f20d3b0595fbd8d50d898cabd099b3dee7b26c7ffb250b362e81694fd9d32ed1e140da60eed227b47adcce325c69eb481b22def898b8d9f4f3d9fe76f67295ba9e93efbfa1c7667802d84a71076a1dc13c51795abd579ff10a208514594dfa411e0a4581d3a36a74fb119fd217539ce53a31d689bf0b950e7dbd3ee6502caf64ef99e5a4bd9ee8e899a03b81eb36eeef347bfd7cb4879b0f11938940943e00b0333bc10b54a539534e2c3a7de6d346e6538f1a8f5f9cc8ce63710653c52b7c28896319fbb1636b033054e3fa420a59065782c57e7cbf51863bf8d3400f8455ea81da4d0b315a986b59ba27ef8ca2039b273660684f853921ccf75d9ac0e6b67c1e89228d52bdeee062936821e45c39b9abeb473212319b664ec7dabcad56afbde7a08a84f1e89e0cbce6f8f9501eafb9126c85432f50cc7d9c4d6c1a9b734ef239fa2513de9cd7ca2e8d42ab324d79cd8e12c996cc91932c29a32bcc2f95353f821df3788290f5c1868502d1e0665eb339d6651fd6318047e01bdc4c3a33bbbb9449953f0d8e050c18c5ae98c10e56190d4954fa1f284417c890b32d36e9e2d746e779bb9c67a02a5f976a6d9086527b3e53d4ad6825ecc3eaca27d8c0b80b2952ea2f40cb4f3825ac3deceb342c67a10b76394bd4b37f44ef3bcf89c3346342296415eb230384db3b9e860352e0157a02d0f3b9b253c51dc1058832ac58d0b7d3e4871e8cddd5ac95044c5e83cfbc4476be951b7d07d3d6bf30918a243d87f15b72a9206444d8e809d9fc9aa380af30397c20643e72e0691ece1583c87514efa352b3cfb815fc39c34485a85d6bff9ada94f7d2d7459be1627d20e94c249d6bdbca175f91a567a1b5b64efc65e2741df2ef9cef9d8ec62342f0d5dca50f383ff4133654f2fee6fb23ae4d39b5257cd6de72412ef8e783f9e5173ca40b56c9f5acfd09f6c185a146ef1302ba9853aa1f28c04136133c58ab4be4acc3bb8ac7708584d4a751d29ae8d48a9c3e2b5c9e465a2973ef4c615db5e3ea233c18e491563af11bf7e9bc9b19e52abdbbbfb12498bd27e0c973bf12966ec5de1b41529049b5c4db485feba6144afb826f06f33e2346ed73e7ba54ac381d9c58118a00f846a88fba467fe90b032aa32bd3957d43df7321f126dfb6cb14e0dc190c1ef96b300b878851bed7de3a2346bda125cb103b2604bb0255f137c83020df468f14e71e24fd22498fc526fd74ca9e044686de485723fc2a912c0bb6698f72fc5214a05bbd7c748dd73c9a830a3be925fa55c84bac7a5766a4be7c834890c8e9ac0417b6d1038620cad0b1b18628c26ef1842458077693d68755b1caea1be03150cd932c3c1c38c4c709fddf314eb68c2a1a3e0146eba4abd9d1197a03b1d6d772e618328ff068817d526d757b9183e54b6efd9fa08eeb3a202dd464a99858f3a5a2886a7f36e27d3014e9722dd9326fa294cecf9c8a71446e4bae91de71d44228121c910e762e3f36f37a58750a878d3ef1a103bce2db8ef9ff2dfa3efa2dee07f9bf6d43890d1429649207b267e06bed34736d01ff413aa584f59f3fac796afaf583e41fae2248e02a9dcdcd7d7f62154b595ddcba19a050629be62e0655c341cd773aba0143616f6915158f6629167d0145d9d7dee1b200b7a6b95120beb29a0f446b9d5f490f7ca0f83fc8ce392654ab9ff24bc8d55d6566b1142fa6120f938ef000221ed6247beff7678139174514c4eb851cd80bd6528e2c3fcf062a5b9c625932157d3f96aabfcc3d2951eb8cfdeebdf6a5d11e6168004b538cb7358e3c1463aa9ca984adc0c174c378ab53f0464fc1b12bc16cf6b989bf3456d99ceefa690454537132c2160933831b7bafff9fc65877ba82657aa194a85e4299469f71d048dbf4d7d9c54b95181325fbb6eda02c917d94245380d33cfa01cc918221be7d7d2931dd47a0254b983f9bc21c7f5d3919c9d19396dd9d8c63bb69258e09630e9101ed970099895c65c68959d9eb4085adeb5bab2723183a7df6f1a9724810e83250615f30a08adef2c9ff0fc2e37eaa4a6b6f59629f00b3692960a714c83a3bc9c4f06d1164238c6326deceaa589672d747231e49675187a560f7f4366959b41fa9029066e313ed11377bb82b25b064ad05ac6ce3e455264315cdf23a989114a48efa2bf2e9311ab2d17b4f262713616d6a21307f0c02728b5fdf58dda3beda7cfdcd638634ffb668f0830d66c608386a4b3ff71c0b9430843735f15221e6b8f9e8672303e3cd0e0923efc57e920e6e6fe86ae012f9f31ff9c2ac7dee5b8f299711b377a28495bdae27daff0124b58c4d1ab3a322b6ecd4dd76b06f05449179ca284000d3ccd118e4d9c5f1b3cdfb04114ee3c925fa98b756a4c0b647e1e400f3f07568c05087aa41305dd115607c8355344fa29ad524807e31767879bcd9018e6a1a92a242ca9e8136a6df0a2a139499a67e090d62c6bf72912c3491ec260eac92496780b8d1669c35c6210bb36b9e8ef787e443679bb9a66358396ac534f5cf4b65f67b60844d650be306188f433007ef57cf89584fe22ee1778d5fbab503618f89f755fbfcf9da0d98f69df268a96098d6d93ad8c22cf637f7ad680229626a80c87f8ec6cb606eae88207e4f10a4af9fb986846ce3186196db2554baa671190c92ee8dd3bb68e3726eff6e35aa50dac2d2206e5b0d54f2050177edfb8ebae1a08be56539bf2057f8f2606ea50be9f085aba57b7460797626720c90249d43e00626bd8e718fb0ca7b9f76a3e80d767e8815c8e9948c81ac0dc2e0f3d3def9ad86129743bf21bcbf19f492f7d6f5f3cb60fdb0703fce2d5aea5c35e86d38a595873d7fa396be2c85fbeb061fd271d3fa073d708a98f34f5c8dde39691b9b9eeff057b784ce458d83a6721a1ce8707e613fa4c8957c13ed76c6b2f8cf53cb0df4f75d6833ade4b3090daf22e5f62c8c4b85aed25ea682a25ad101ce60f7a7875363283dbc4ec6d46471ef22d31967d66817ecac63e3ec0e763ba0c3b80f64b532a9caab70b58696e9dde6024c671b13dc3a3c11fb904647c7c2cb4ba32d10264ea72658546d1275457512683ef633f9052198a7f1fa6944578cea4482555d04d158a9af8948836a9d65ecf19e9f930d2c4ae738"})
preadv2(r0, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/50, 0x32}, {&(0x7f00000010c0)=""/136, 0x88}, {&(0x7f0000001180)=""/183, 0xb7}, {&(0x7f0000001240)=""/81, 0x51}], 0x4, 0x0, 0x9, 0x2)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001300)='\x00', 0x0, r0)
r1 = syz_usb_connect$cdc_ecm(0x5, 0xe3, &(0x7f0000001340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x1, 0x1, 0x1, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x25, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "241da5bc"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xb7, 0x8001, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0x0, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x200, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x400}, @mdlm_detail={0x76, 0x24, 0x13, 0x6, "0cf78920545fb9683d0bd770be24816031179909ac3d237a6b67599e79cea0276ebc5bd7f2e0ac689493f90da48bdf2e1b6c60e401798a41ac4510ad19be39740c72e974fce17667c47c83eb665a526d125ad34440abfffbbe946341cc9f468f6d0d50ebf625d1f79fe2734146c7b1dc45de"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xf, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x8, 0x4}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x250, 0x1, 0xf, 0x2, 0x8, 0x1}, 0x38, &(0x7f0000001480)={0x5, 0xf, 0x38, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x5, 0xf000, 0xfff, [0xf, 0xf, 0xc000, 0xc0cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2ad3e7613eaff8ebfe7a9c5ff794d23e"}]}, 0x4, [{0xe2, &(0x7f00000014c0)=@string={0xe2, 0x3, "0a5bcbd11392a46578f9482cb66e374fe4a2034ac2e77bd7a8c859ece756d0350452b9b037c72c1a94d4a3d1938cb3a6db25cf19b952133df1f28e696265463889d752a877e06a534cfde74499f0763a25c8485833c76bcb0bc8ae549c3852ee6165925f8e89ff8e882c9a0382ed9085d7e48a3c775005a1fc28a2f3aca019240645ac987e65ae629f138c04c0c1b8a984dd8d94965a9055729ba57cf63e566cdf4e9ef73704632466e6e6a36e505bc7880ab3fe250ba9f341c60d3cc3b9c91f7387ada5833197adbd2c5870ec480da20300b5fac4be8975f4f483bea8656cbd"}}, {0x7f, &(0x7f00000015c0)=@string={0x7f, 0x3, "d70469935c40c1ad4aef7fc3c046ad7105e361afe5f51a13041a530596b66522ba25f647fea3096090c3ce86ed3aaee52a564bf761b865edb62fc33a0f7d577bac2c2d37d91345fc5219e8dc2c8e730d10f0306a266b4562f614ede5be752e7c56ddcd7ea54b900837038cb5f5e5af45892449fee6460a8bd0791e92a7"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x2425}}]})
syz_usb_control_io(r1, &(0x7f00000018c0)={0x2c, &(0x7f0000001740)={0x20, 0xf, 0x46, {0x46, 0xf, "4bc435606a6f92f33087325730a3bd4f5c4e441254d2cc719efe873fab680ec3c6c4f69aedf7952d1d2a75cc662f68f4597e1ae137d37ca6a9ed151afaf740c05e706b20"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000001800)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0xf, 0x1ef00, 0x8, [0x3f00, 0xffffc0, 0xf, 0x30, 0x30, 0xff00c0]}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x3, 0x8, "c6726463", "4fb99519"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x5, 0xb9, 0x9, 0x3, 0x6}}}, &(0x7f0000001d40)={0x84, &(0x7f0000001900)={0x0, 0x17, 0x75, "1fe20bb1b11bfc11566d1f8598afddab8e127b35c7b0c4e21dfab43db6c3c9cdd4d92bba5e8400a78427a3a94b2b57eec242acc4c6d098df2f798fd28da4ef8a2fe81c7e90082bf5b96883e2abb4e5bac00c2c81d29f57724746615b990e14bf253bbe96bf7a7114ef0871e76e06aba27910c20f71"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x400, 0x80}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0x26}, &(0x7f0000001b00)={0x40, 0xb, 0x2, "66f9"}, &(0x7f0000001b40)={0x40, 0xf, 0x2}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @random="f25c4c992996"}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000001c00)={0x40, 0x19, 0x2, "1438"}, &(0x7f0000001c40)={0x40, 0x1a, 0x2}, &(0x7f0000001c80)={0x40, 0x1c, 0x1, 0xc8}, &(0x7f0000001cc0)={0x40, 0x1e, 0x1, 0xec}, &(0x7f0000001d00)={0x40, 0x21, 0x1, 0xf}})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000001e00), &(0x7f0000001e40)='./file0\x00', 0x8, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001e80), 0x88926b5f718deb4e, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000001ec0)={0xe, 0x9, {0x51, 0x4, 0x5c1c, {0x8, 0x8000}, {0xbb, 0x80}, @ramp={0x80, 0x6, {0xe336, 0x4c0, 0x401, 0x7}}}, {0x51, 0x1, 0xb, {0xfffb, 0x7}, {0x5, 0x80}, @const={0x401, {0xfffe, 0xfffa, 0x535, 0x4}}}})
ioctl$int_out(r2, 0xf4171241892275f6, &(0x7f0000001f40))
r3 = socket$netlink(0x10, 0x3, 0x5)
getsockname$netlink(r3, &(0x7f0000001f80), &(0x7f0000001fc0)=0xc)
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000002000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000002040)=0x28)
r4 = syz_open_dev$rtc(&(0x7f0000002080), 0xb626, 0x4000c0)
ioctl$RTC_PIE_OFF(r4, 0x7006)
pipe(&(0x7f00000020c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000002100)={0x6, 0x8, 0x24, 0x8fe1, 0x4, "19c9a4d68d6eb5e620282bffb1898c4b0b1628", 0x8, 0x2})
connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e21, 0xffff, @loopback, 0x3}, 0x1c)
cachestat(r5, &(0x7f0000002180)={0x9, 0x4}, &(0x7f00000021c0), 0x0)
ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000002200))
ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000002240)={0x8, 0xc1})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000002280))
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002300)=[@textreal={0x8, &(0x7f00000022c0)="0f0174f3f0800d83b808008ec80f1add67dd00baf80c66b894e9918366efbafc0c66b8dd45f81766ef440f20c0663502000000440f22c00f01c50f090fa7c0", 0x3f}], 0x1, 0x30, &(0x7f0000002340)=[@dstype0={0x6, 0x2}, @cr4={0x1, 0x1}], 0x2)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000002380)={0x5, 0x2c, 0x1, 0x19, 0xa, 0x100, 0x2, 0x35, 0x1})
ioctl$RTC_UIE_ON(r6, 0x7003)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = signalfd4(r7, &(0x7f00000023c0)={[0xff]}, 0x8, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000002400)={0xdb, 0x0, 0x6})
sendmsg$can_raw(r8, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)=@can={{0x2, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "379fa6c7d090dbde"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

3.293924567s ago: executing program 3 (id=433):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x1002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="25010000000800010075000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2800c844}, 0xc0c0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9a5b465440ab119eb065b19a0e7c5f55d30f3423fda9912f9a1da3ffe7c0f422b64ab5e45f2e831a5009a368cfaa26f4263d399f8c0153b1795bd8e5bd014ddde175f6ca2d803bf602e9ce6076d3cc6050a94baed9d1e4f79d12a2388e2c5c833428f7fac048b5dbf932584cdf6dd90e567d177f0d85861141084cb13e9f5a6de7", @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x64044011)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) (async)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'bridge_slave_0\x00', {0x2, 0x0, @private}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000100))
unshare(0x62040200)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r9, 0x0)
mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x30012, r9, 0x82b2d000) (async)
mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x30012, r9, 0x82b2d000)
r10 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff) (async)
ftruncate(r1, 0xffff)
fcntl$addseals(r10, 0x409, 0x7) (async)
fcntl$addseals(r10, 0x409, 0x7)
r11 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r10, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r11, 0xc0086202, &(0x7f0000000440)=0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

3.121229451s ago: executing program 3 (id=434):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000002400)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000004b40)=0x2c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004bc0), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000006080)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006040)={&(0x7f0000005fc0)={0x58, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x185}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4084, 0xff4}], 0x5}, 0x8}, {{0x0, 0x0, 0x0, 0x64}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xffff22cb}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000002400)}, {&(0x7f0000004500)=""/158}, {&(0x7f0000004640)=""/31}], 0x0, &(0x7f00000046c0)=""/250}, 0x9}, {{&(0x7f00000047c0)=@ax25={{}, [@remote, @null, @default, @default, @netrom, @remote, @netrom, @rose]}, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004840)=""/45}, {&(0x7f0000004880)=""/2}, {&(0x7f00000048c0)=""/219}, {&(0x7f00000049c0)=""/120}, {&(0x7f0000004a40)=""/206}, {&(0x7f0000005f00)=""/155}, {&(0x7f0000004c00)=""/4096}, {&(0x7f0000005c00)=""/67}], 0x0, &(0x7f0000005d00)=""/86}, 0xfff}], 0x4, 0x40012002, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, <r7=>0x0, 0x0, <r8=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0)
tee(r4, r5, 0x400, 0x4a0d3d2f92a1dadf)
getpeername$packet(r4, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000022c0)=0x14)
write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0xffffffff90809082, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r6, &(0x7f00000024c0)={0x2020, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10)
syz_fuse_handle_req(r6, &(0x7f0000009080)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x0, 0x6, 0x1, 0x3fffffffffe, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xbfffffff, r10, r8, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r11, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
write$P9_RWSTAT(r11, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7)
r12 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}, @free_buffer={0x40086303, r12}], 0x0, 0x0, 0x0})

1.357241911s ago: executing program 1 (id=444):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xa, 0xb, 0x2, 0xe6f0, 0x6, 0xac4a, 0xc, 0x4, 0x3, 0x2, 0x7ff, 0x6}}, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r3, &(0x7f0000000080)={0xd, 0x8, 0x0, 0x2}) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) (async)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x2, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x8804) (async)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async)
r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r9, 0x40184810, 0x0)
ioctl$HIDIOCGPHYS(r9, 0x80404812, &(0x7f00000000c0)) (async)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="a1081f0000002c2400f4387006c2836f285175714452948eb748ac84dee6ccbe85f9941a6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
listen(r1, 0x8001)

748.4446ms ago: executing program 2 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x8, 0x3}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x20009dc6, 0x0, 0x0, 0xf})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0x2, 0x4}}, 0x26) (async)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0x2, 0x4}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000000ac0))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0)

715.685873ms ago: executing program 2 (id=446):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) (async, rerun: 64)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 64)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)='qH', 0x2}], 0x1) (async)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

662.103377ms ago: executing program 2 (id=447):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x40, &(0x7f0000000000)=0x3d, 0x4)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
fadvise64(r2, 0x6b, 0x4000000000f7c, 0x4)

565.944215ms ago: executing program 1 (id=448):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setresuid(0xee00, 0xee00, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="72772c004e96910cab7eff3cad6748f889b6178a5c044462b2f7358c87008cfe9ee9fa3ab0e713416372ec01fe3718c31c99525ad23d6d633bf2186ac64e4ebba29a7042c5ad10bff63c051f953b4408012d6fe7bf534c505fe45e4967a4112b03f447f337771e23674f84da8a2523a0b87f22549e422046e3834998981262e466c0de8e039cb182e30d1e342ac6eea4c20fbf82bd"])

448.603024ms ago: executing program 1 (id=451):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2) (async)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$P9_RREAD(r5, &(0x7f0000000280)={0xb, 0x75, 0x2}, 0xb)
io_setup(0x3, &(0x7f00000000c0)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) (async)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
write$cgroup_int(r3, &(0x7f0000000040)=0xffffffffffffffd5, 0x12) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224effffffff", 0x58}], 0x1) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r0, 0x22fb5000) (async)
pipe2$9p(0x0, 0x0)

446.068004ms ago: executing program 0 (id=452):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r0, 0x7fffffffffffffff, 0x0)
r1 = timerfd_create(0x0, 0x0)
sendfile(r0, r1, 0x0, 0x240000000000)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0xfffd, 0xb, 0x29, 0x0, @remote, @remote}}}})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='seclabal,\x00'])

445.411204ms ago: executing program 0 (id=453):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x74886000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0xb)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0))
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000000)=""/177, 0xb1, 0x9)

411.460387ms ago: executing program 1 (id=454):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xff, 0x1}, 0x1c)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0xc)
getgroups(0x2, &(0x7f0000000000)=[0x0, <r4=>0x0])
setresgid(0xffffffffffffffff, 0x0, r4)
r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000980)=ANY=[], 0x1f)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}})
keyctl$setperm(0x5, 0x0, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xff, 0x1}, 0x1c) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r2, 0x0, 0xc) (async)
getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) (async)
setresgid(0xffffffffffffffff, 0x0, r4) (async)
openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) (async)
write$cgroup_subtree(r5, &(0x7f0000000980)=ANY=[], 0x1f) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) (async)
keyctl$setperm(0x5, 0x0, 0x10) (async)

378.07893ms ago: executing program 1 (id=455):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = eventfd(0x2000)
r2 = eventfd2(0x5, 0x80000)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setreuid(0xffffffffffffffff, 0xee00)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e)
listen(r3, 0x7c)
signalfd4(r0, &(0x7f00000001c0)={[0x8]}, 0x8, 0x0) (async)
r5 = signalfd4(r0, &(0x7f00000001c0)={[0x8]}, 0x8, 0x0)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0xa)
fchdir(r7) (async)
fchdir(r7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) (async)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r8, 0x101, 0x1)
getdents64(r8, 0x0, 0x4f)
io_submit(0x0, 0x4, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa, 0xfffd, r0, &(0x7f0000000080), 0x0, 0x5, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000280)="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", 0x1000, 0x5, 0x0, 0x0, r2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000012c0)="e3c8f7bd01aa31004862d83ca72591d278351daa8f36488ca4600dad29313f60304187d05313c181b518b824d311bb94c0dc4462a4df0664432b4e21037b43604e4330d4c613aa080ed5cf43c5b49557e047f8aaf8e3c9a19f6a96e126ab94dc3c119b", 0x63, 0x100000003, 0x0, 0x7, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40, r5, &(0x7f0000001440)="16851903ae4eab179faface30e0a5de1ce2b6965c6ceaf5ddeed3bd8532010dd8123f46468284c37d5072599c0274d99098420ce52fedcec97031d6134e1d062c61422719719635225bd52554ec8b9a90ee0cff4c0ea0d50e01fd9bf3b1c9dd0fb0dd59f5d5f58d966ce789a6ac3141e54029199be40729e08f970ae40a19b52760b996530eec7bdde4a9a926b3ebee28b1b73f44f3947d14fc475accaa0457fc292a302ab36fdfeb8fd3ae81ea42684a979ffa26438b1f2ff", 0xb9, 0x8000000000000001, 0x0, 0x1}]) (async)
io_submit(0x0, 0x4, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa, 0xfffd, r0, &(0x7f0000000080), 0x0, 0x5, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000280)="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", 0x1000, 0x5, 0x0, 0x0, r2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000012c0)="e3c8f7bd01aa31004862d83ca72591d278351daa8f36488ca4600dad29313f60304187d05313c181b518b824d311bb94c0dc4462a4df0664432b4e21037b43604e4330d4c613aa080ed5cf43c5b49557e047f8aaf8e3c9a19f6a96e126ab94dc3c119b", 0x63, 0x100000003, 0x0, 0x7, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40, r5, &(0x7f0000001440)="16851903ae4eab179faface30e0a5de1ce2b6965c6ceaf5ddeed3bd8532010dd8123f46468284c37d5072599c0274d99098420ce52fedcec97031d6134e1d062c61422719719635225bd52554ec8b9a90ee0cff4c0ea0d50e01fd9bf3b1c9dd0fb0dd59f5d5f58d966ce789a6ac3141e54029199be40729e08f970ae40a19b52760b996530eec7bdde4a9a926b3ebee28b1b73f44f3947d14fc475accaa0457fc292a302ab36fdfeb8fd3ae81ea42684a979ffa26438b1f2ff", 0xb9, 0x8000000000000001, 0x0, 0x1}])
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0)
bind$inet(r0, &(0x7f0000001280)={0x2, 0x4e23, @private=0xa010102}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00')
getdents(r10, &(0x7f0000000100)=""/117, 0x75) (async)
getdents(r10, &(0x7f0000000100)=""/117, 0x75)
getdents64(r7, 0x0, 0x20)
listen(r10, 0xa400) (async)
listen(r10, 0xa400)
r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r11, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30)
syz_kvm_setup_cpu$x86(r10, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001340)=[@text16={0x10, &(0x7f00000013c0)="6766c74424002fab00006766c74424020a0000006766c744240600000000670f011c2464663ed8d30f01c366b8030000000f23c80f21f86635080070000f23f866b90d0400000f320f61842a52360eeab17e1c01b822010f00d83626260f01ca", 0x60}], 0x1, 0x2, &(0x7f0000001440), 0x0) (async)
syz_kvm_setup_cpu$x86(r10, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001340)=[@text16={0x10, &(0x7f00000013c0)="6766c74424002fab00006766c74424020a0000006766c744240600000000670f011c2464663ed8d30f01c366b8030000000f23c80f21f86635080070000f23f866b90d0400000f320f61842a52360eeab17e1c01b822010f00d83626260f01ca", 0x60}], 0x1, 0x2, &(0x7f0000001440), 0x0)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{}, {0x94, 0x83, 0xff}]})

295.614756ms ago: executing program 1 (id=456):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x11, 0x4, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4004}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r5, 0x0, 0x13, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0)
keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x8}}}}}]}}]}}, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, "4c676faf"}, @local=@item_4={0x3, 0x2, 0x4, "0aabfb88"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200008c4)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}], 0x400000000000131, 0x9200000000000000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x183142, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'erspan0\x00', @local})
r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r10, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

273.101648ms ago: executing program 0 (id=457):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) (async, rerun: 32)
madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

155.775067ms ago: executing program 0 (id=458):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x1e702)
ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000000c0)=[0x2, 0xfffffffa])
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6})
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r6, r5, 0x4, 0x0, 0x0, 0x3, 0xe, 0x3, 0x6, 0xcf4, 0x1, 0x9, 'syz0\x00'})

12.288159ms ago: executing program 0 (id=459):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x63, @mcast1}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r5 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x2, 0x22}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
writev(r3, &(0x7f0000000140), 0x54)
sendmmsg$inet6(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='T', 0x1}], 0x1}}], 0x1, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x4, 0x12)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r7, &(0x7f0000002a00)=ANY=[@ANYRES16=r6, @ANYRESHEX=r5, @ANYBLOB="ff45ef854f6d5a5c0c2ec54d3fabb35420653648095df866e791c85dc1ae17627abdd69143b6012d13bf8396ee9031d96c315f7b7ab87aa3b5affaa4d70a673489d20e011dae116cc4d2acc40afbe216047e501e0d0bb65cfc53b56c9f7c19b634bbbff4b8e88ead97fb968daca9d284a5d88ea35377851ea6f1d13705108810cde8fb44d2f70cdecf863ef8ca52d32ee3b38de45340e2861611ca1689ffcbb6792400433f15a8a817f8aec878665bb8a7d461fb0d520b40330be11211aa5954a59cde01b0eb660827cffe6295641a8466c61c7f525aca6010d5c4205d4d2ba11807ad6b609c0a8b5fd2b8c2e9c173506c9e0000", @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB="d1ebfcaa918bbf466e5a0ae3050298336e5c293f282b73e8efeabd2e853990c5cb0924a4bd9b0a5fc0e47e8f0316b398b784cf04748238dfb8733ed6dee3c52b6d0ea39004702dc38518c3c69518cda66723ec3558033a800ab1e007bb5952db8c0ccf1ffb419de2369ce4dd446bd2096900f9394659319735b46eb3b32fb63b1f03edba347e9d8349a0e2ef18c20d0c86c7b72eec15b6358236a7864ef1f48c7f2e48ffee2aee7410620b72775142bc099fcbd2ff34", @ANYRESHEX=r2, @ANYRES16=r3], 0xfffffc82)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f00000002c0)=0xd)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"])
r8 = socket$key(0xf, 0x3, 0x2)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x400c8c0)
sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000300000028bd7000fedbdf2505001a0000000000000000000000000000090000000000000000000000000000000000002c003000"], 0x38}}, 0x40408c0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4)

10.857449ms ago: executing program 2 (id=460):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000700)={"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"})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000700)={"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"}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

0s ago: executing program 0 (id=461):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x400002, r3})
sigaltstack(&(0x7f0000000040)={&(0x7f00000001c0)=""/161, 0x0, 0xa1}, &(0x7f0000000100)={&(0x7f0000000080)=""/38, 0x0, 0x26}) (async)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, r3}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts.
[   20.901449][   T36] audit: type=1400 audit(1755996494.400:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.902515][  T281] cgroup: Unknown subsys name 'net'
[   20.924125][   T36] audit: type=1400 audit(1755996494.400:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.951491][   T36] audit: type=1400 audit(1755996494.420:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.951684][  T281] cgroup: Unknown subsys name 'devices'
[   21.131790][  T281] cgroup: Unknown subsys name 'hugetlb'
[   21.137390][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.290163][   T36] audit: type=1400 audit(1755996494.790:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.313514][   T36] audit: type=1400 audit(1755996494.790:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.338354][   T36] audit: type=1400 audit(1755996494.790:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.346810][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.370260][   T36] audit: type=1400 audit(1755996494.870:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.395711][   T36] audit: type=1400 audit(1755996494.870:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.430162][   T36] audit: type=1400 audit(1755996494.930:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.430627][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.455641][   T36] audit: type=1400 audit(1755996494.930:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.688517][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.695892][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.702973][  T289] bridge_slave_0: entered allmulticast mode
[   22.709303][  T289] bridge_slave_0: entered promiscuous mode
[   22.715659][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.722705][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.729755][  T291] bridge_slave_0: entered allmulticast mode
[   22.736016][  T291] bridge_slave_0: entered promiscuous mode
[   22.742157][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.749179][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.756273][  T290] bridge_slave_0: entered allmulticast mode
[   22.762446][  T290] bridge_slave_0: entered promiscuous mode
[   22.769760][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.776825][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.783895][  T289] bridge_slave_1: entered allmulticast mode
[   22.790087][  T289] bridge_slave_1: entered promiscuous mode
[   22.796097][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.803185][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.810262][  T291] bridge_slave_1: entered allmulticast mode
[   22.816401][  T291] bridge_slave_1: entered promiscuous mode
[   22.822545][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.829574][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.836677][  T290] bridge_slave_1: entered allmulticast mode
[   22.842872][  T290] bridge_slave_1: entered promiscuous mode
[   22.865395][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.872455][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.879503][  T288] bridge_slave_0: entered allmulticast mode
[   22.885756][  T288] bridge_slave_0: entered promiscuous mode
[   22.902354][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.909386][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.916502][  T288] bridge_slave_1: entered allmulticast mode
[   22.922678][  T288] bridge_slave_1: entered promiscuous mode
[   23.072769][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.079817][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.087108][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.094156][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.108194][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.115262][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.122546][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.129572][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.140493][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.147527][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.154812][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.161846][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.175615][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.182663][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.189877][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.196909][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.246347][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.253681][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.261469][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.268661][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.275897][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.283276][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.290483][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.304247][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.311304][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.319291][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.326339][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.337066][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.344148][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.353124][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.360190][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.376817][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.383868][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.405926][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.413018][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.421146][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.428166][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.451868][  T291] veth0_vlan: entered promiscuous mode
[   23.472058][  T291] veth1_macvtap: entered promiscuous mode
[   23.486692][  T289] veth0_vlan: entered promiscuous mode
[   23.495637][  T290] veth0_vlan: entered promiscuous mode
[   23.519741][  T288] veth0_vlan: entered promiscuous mode
[   23.530445][  T289] veth1_macvtap: entered promiscuous mode
[   23.548372][  T290] veth1_macvtap: entered promiscuous mode
[   23.559144][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.575556][  T288] veth1_macvtap: entered promiscuous mode
[   23.680531][  T346] process 'syz.2.5' launched './file0' with NULL argv: empty string added
[   23.688356][  T348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   23.689074][  T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4
[   23.720540][  T356] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   23.763012][  T366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   23.774005][  T366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:7
[   23.793018][  T371] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.820054][  T372] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   23.840525][  T372] overlayfs: missing 'lowerdir'
[   23.855833][  T376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   23.860297][  T378] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   23.952846][  T388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.008580][  T358] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   24.159978][  T358] usb 4-1: Using ep0 maxpacket: 8
[   24.166738][  T358] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[   24.175827][  T358] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   24.185918][  T358] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   24.195358][  T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.269996][   T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.406717][  T354] fuse: Unknown parameter '�5vfd'
[   24.413181][  T358] usb 4-1: string descriptor 0 read error: -71
[   24.423862][   T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.425471][  T358] usb 4-1: USB disconnect, device number 2
[   24.443166][   T67] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   24.452397][   T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.461158][   T67] usb 1-1: config 0 descriptor??
[   24.755457][  T398] netlink: 'syz.2.22': attribute type 6 has an invalid length.
[   24.817195][  T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   24.817229][  T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:14
[   24.852416][  T408] SELinux:  Context system_u:object_r:var_log_t:s0 is not valid (left unmapped).
[   24.871101][  T407] fuse: Bad value for 'fd'
[   24.872042][   T67] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   24.885878][   T67] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[   24.906831][  T413] Zero length message leads to an empty skb
[   24.959797][   T67] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   24.981059][  T422] SELinux: security_context_str_to_sid () failed with errno=-22
[   25.279998][  T389] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   25.288447][  T358] usb 1-1: USB disconnect, device number 2
[   25.420001][  T389] usb 4-1: device descriptor read/64, error -71
[   25.623011][  T431] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   25.623033][  T431] rust_binder: Read failure Err(EFAULT) in pid:41
[   25.641832][  T433] /dev/rnullb0: Can't open blockdev
[   25.666258][  T435] rust_binder: Error while translating object.
[   25.666295][  T435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   25.670199][  T389] usb 4-1: device descriptor read/64, error -71
[   25.672615][  T435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45
[   25.810430][  T450] capability: warning: `syz.0.38' uses deprecated v2 capabilities in a way that may be insecure
[   25.830128][  T448] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[   25.843275][  T453] /dev/rnullb0: Can't open blockdev
[   25.919582][   T36] kauditd_printk_skb: 113 callbacks suppressed
[   25.919597][   T36] audit: type=1326 audit(1755996499.410:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=460 comm="syz.0.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f527a98ebe9 code=0x0
[   25.950088][  T389] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   26.020062][   T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.022217][  T462] /dev/rnullb0: Can't open blockdev
[   26.080135][  T389] usb 4-1: device descriptor read/64, error -71
[   26.180122][   T67] usb 3-1: Using ep0 maxpacket: 8
[   26.186187][   T67] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2
[   26.195162][   T67] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   26.205033][   T67] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   26.214075][   T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.320011][  T389] usb 4-1: device descriptor read/64, error -71
[   26.423788][  T441] fuse: Unknown parameter '�5vfd'
[   26.430290][   T67] usb 3-1: string descriptor 0 read error: -71
[   26.431227][  T389] usb usb4-port1: attempt power cycle
[   26.439207][   T67] usb 3-1: USB disconnect, device number 2
[   26.765272][   T36] audit: type=1400 audit(1755996500.260:188): avc:  denied  { execute_no_trans } for  pid=464 comm="syz.0.42" path="/10/file1" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   26.790089][  T389] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   26.811156][  T389] usb 4-1: device descriptor read/8, error -71
[   26.941629][  T389] usb 4-1: device descriptor read/8, error -71
[   26.952585][   T36] audit: type=1400 audit(1755996500.450:189): avc:  denied  { read } for  pid=472 comm="syz.2.44" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   26.975517][   T36] audit: type=1400 audit(1755996500.450:190): avc:  denied  { open } for  pid=472 comm="syz.2.44" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   27.055858][   T36] audit: type=1400 audit(1755996500.550:191): avc:  denied  { write } for  pid=472 comm="syz.2.44" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   27.079330][   T36] audit: type=1400 audit(1755996500.550:192): avc:  denied  { setattr } for  pid=472 comm="syz.2.44" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   27.105366][   T36] audit: type=1400 audit(1755996500.550:193): avc:  denied  { ioctl } for  pid=472 comm="syz.2.44" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   27.130748][   T36] audit: type=1400 audit(1755996500.600:194): avc:  denied  { read write } for  pid=476 comm="syz.2.45" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.155585][   T36] audit: type=1400 audit(1755996500.600:195): avc:  denied  { open } for  pid=476 comm="syz.2.45" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.179696][   T36] audit: type=1400 audit(1755996500.600:196): avc:  denied  { ioctl } for  pid=476 comm="syz.2.45" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   27.204983][  T389] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   27.230960][  T389] usb 4-1: device descriptor read/8, error -71
[   27.363327][  T389] usb 4-1: device descriptor read/8, error -71
[   27.376022][  T488] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   27.376043][  T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   27.384240][  T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:68
[   27.441879][  T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   27.450995][  T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70
[   27.469759][  T493] /dev/rnullb0: Can't open blockdev
[   27.470152][  T389] usb usb4-port1: unable to enumerate USB device
[   27.479395][  T493] /dev/rnullb0: Can't open blockdev
[   27.595239][  T503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   27.595271][  T503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:83
[   27.721322][  T512] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   27.771788][  T505] incfs_lookup_dentry err:-103
[   27.776663][  T505] incfs: Can't find or create .index dir in ./file0
[   27.783695][  T505] incfs: mount failed -103
[   27.985205][  T526] rust_binder: 20: no such ref 2
[   28.029971][  T389] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   28.180273][  T389] usb 1-1: Using ep0 maxpacket: 8
[   28.186386][  T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[   28.197611][  T389] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[   28.206684][  T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.216116][  T389] usb 1-1: config 0 descriptor??
[   28.622479][  T389] hid (null): bogus close delimiter
[   28.628527][  T389] uclogic 0003:28BD:0055.0002: interface is invalid, ignoring
[   28.842336][  T534] SELinux: security_context_str_to_sid () failed with errno=-22
[   28.869113][  T538] rust_binder: Error while translating object.
[   28.869140][  T538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.875554][  T538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27
[   28.876893][  T389] usb 1-1: USB disconnect, device number 3
[   29.172520][  T552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   29.220350][   T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   29.389984][   T67] usb 4-1: Using ep0 maxpacket: 16
[   29.396143][   T67] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[   29.404296][   T67] usb 4-1: config 0 has no interface number 0
[   29.410635][   T67] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   29.420708][   T67] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   29.430652][   T67] usb 4-1: config 0 interface 41 has no altsetting 0
[   29.438679][   T67] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   29.447758][   T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.455765][   T67] usb 4-1: Product: syz
[   29.459935][   T67] usb 4-1: Manufacturer: syz
[   29.464520][   T67] usb 4-1: SerialNumber: syz
[   29.469879][   T67] usb 4-1: config 0 descriptor??
[   29.475149][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   29.482681][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   29.690756][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   29.698055][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   29.795878][  T560] rust_binder: Read failure Err(EFAULT) in pid:34
[   29.806177][  T562] 9pnet_fd: Insufficient options for proto=fd
[   29.828957][  T564] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   29.836628][  T564] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.74'.
[   29.859481][  T567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41
[   29.859812][  T567] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   29.910248][  T568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   30.106448][   T67] Error reading MAC address
[   30.120490][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   30.127737][  T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   30.269986][  T389] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   30.421006][  T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.431968][  T389] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   30.441034][  T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.450539][  T389] usb 3-1: config 0 descriptor??
[   30.689980][  T392] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   30.766026][   T67] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, b2:5e:c1:f0:f6:40
[   30.780405][   T67] usb 4-1: USB disconnect, device number 7
[   30.786675][   T67] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet
[   30.851309][  T392] usb 1-1: not running at top speed; connect to a high speed hub
[   30.860444][  T570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.860644][  T392] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   30.869472][  T570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.878120][  T392] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   30.889083][  T389] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[   30.897226][  T392] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.906415][  T389] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7
[   30.925249][  T392] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   30.934811][  T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.943027][  T392] usb 1-1: Product: ည
[   30.947229][  T392] usb 1-1: Manufacturer: _
[   30.951900][  T392] usb 1-1: SerialNumber: Ⰹ
[   30.987324][  T389] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   31.169441][  T392] usb 1-1: 0:2 : does not exist
[   31.190039][  T392] usb 1-1: USB disconnect, device number 4
[   31.209650][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   31.209666][   T36] audit: type=1400 audit(1755996504.700:224): avc:  denied  { ioctl } for  pid=586 comm="syz.1.82" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5053 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   31.259094][   T36] audit: type=1400 audit(1755996504.750:225): avc:  denied  { map } for  pid=588 comm="syz.3.83" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   31.320969][  T389] usb 3-1: USB disconnect, device number 4
[   31.377040][  T597] mmap: syz.1.86 (597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.468442][   T13] tipc: Subscription rejected, illegal request
[   31.475116][   T36] audit: type=1400 audit(1755996504.970:226): avc:  denied  { read } for  pid=600 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.584983][   T36] audit: type=1400 audit(1755996505.080:227): avc:  denied  { getattr } for  pid=600 comm="syz.1.87" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   31.855626][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.855654][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.879997][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.902995][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.919955][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.938303][  T608] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.006057][   T36] audit: type=1400 audit(1755996505.500:228): avc:  denied  { setopt } for  pid=615 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.071279][   T36] audit: type=1400 audit(1755996505.570:229): avc:  denied  { nlmsg_read } for  pid=625 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.092445][  T626] binder: Unknown parameter 'defcontext01777777777777777777777'
[   32.092453][   T36] audit: type=1400 audit(1755996505.590:230): avc:  denied  { remount } for  pid=625 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   32.137017][  T632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'.
[   32.167952][  T634] exFAT-fs (rnullb0): invalid boot record signature
[   32.183421][  T634] exFAT-fs (rnullb0): failed to read boot sector
[   32.189838][  T634] exFAT-fs (rnullb0): failed to recognize exfat type
[   32.251010][   T36] audit: type=1400 audit(1755996505.750:231): avc:  denied  { mount } for  pid=639 comm="syz.2.99" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   32.298172][   T36] audit: type=1400 audit(1755996505.750:232): avc:  denied  { mounton } for  pid=639 comm="syz.2.99" path="/34/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[   32.339419][  T640] capability: warning: `syz.2.99' uses 32-bit capabilities (legacy support in use)
[   32.350249][  T641] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.357183][  T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116
[   32.415526][  T652] batadv_slave_0: entered promiscuous mode
[   32.422292][  T652] batadv_slave_0: left promiscuous mode
[   32.457548][   T36] audit: type=1400 audit(1755996505.950:233): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   32.478368][   T67] rust_binder: 643: removing orphan mapping 0:4120
[   32.492535][   T67] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   32.503462][  T658] binder: Bad value for 'stats'
[   32.509512][   T67] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   32.537015][  T660] fido_id[660]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   32.549614][  T663] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   32.561120][  T662] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[   32.580039][  T662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[   32.659964][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   32.673631][  T672] kvm: kvm [670]: vcpu6, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[   32.801699][  T679] binder: Bad value for 'defcontext'
[   32.829968][   T10] usb 1-1: Using ep0 maxpacket: 16
[   32.841036][   T10] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[   32.860004][   T67] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   32.868679][   T10] usb 1-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb
[   32.889943][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.897950][   T10] usb 1-1: Product: syz
[   32.902142][   T10] usb 1-1: Manufacturer: syz
[   32.906735][   T10] usb 1-1: SerialNumber: syz
[   33.009952][   T67] usb 4-1: Using ep0 maxpacket: 32
[   33.016239][   T67] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   33.024571][   T67] usb 4-1: config 0 has no interface number 0
[   33.032148][   T67] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   33.041394][   T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.049408][   T67] usb 4-1: Product: syz
[   33.053644][  T392] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.062177][   T67] usb 4-1: Manufacturer: syz
[   33.066840][   T67] usb 4-1: SerialNumber: syz
[   33.073760][   T67] usb 4-1: config 0 descriptor??
[   33.079942][   T67] smsc95xx v2.0.0
[   33.219981][  T392] usb 3-1: Using ep0 maxpacket: 16
[   33.226338][  T392] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[   33.234826][  T392] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   33.245152][  T392] usb 3-1: config 0 has no interface number 0
[   33.252778][  T392] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   33.262143][  T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.270329][  T392] usb 3-1: Product: syz
[   33.274607][  T392] usb 3-1: Manufacturer: syz
[   33.279234][  T392] usb 3-1: SerialNumber: syz
[   33.291421][  T392] usb 3-1: config 0 descriptor??
[   33.299127][   T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   33.318184][  T392] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[   33.329047][  T392] usb 3-1: No valid video chain found.
[   33.334880][   T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   33.346484][   T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   33.360250][   T67] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   33.380623][   T67] usb 4-1: USB disconnect, device number 8
[   33.525520][  T392] usb 3-1: USB disconnect, device number 5
[   33.590370][  T688] __vm_enough_memory: pid: 688, comm: syz.3.112, bytes: 18014402804453376 not enough memory for the allocation
[   33.628048][   T67] usb 1-1: USB disconnect, device number 5
[   33.646945][  T691] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   34.174640][  T715] __vm_enough_memory: pid: 715, comm: syz.2.122, bytes: 18014402804453376 not enough memory for the allocation
[   34.644635][  T730] fuse: Bad value for 'fd'
[   35.095270][  T743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.449972][  T392] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   35.601476][  T392] usb 3-1: unable to get BOS descriptor or descriptor too short
[   35.609957][  T676] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   35.611488][  T392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[   35.628371][  T392] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[   35.638642][  T392] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[   35.648651][  T392] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   35.660214][  T392] usb 3-1: string descriptor 0 read error: -22
[   35.666755][  T392] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   35.675882][  T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.686328][  T720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   35.694136][  T392] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[   35.707882][  T392] cdc_ncm 3-1:1.0: bind() failure
[   35.714608][  T392] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   35.721707][  T392] cdc_ncm 3-1:1.1: bind() failure
[   35.771699][  T676] usb 1-1: config 128 has an invalid interface number: 164 but max is 1
[   35.780170][  T676] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   35.790712][  T676] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 2
[   35.799742][  T676] usb 1-1: config 128 has no interface number 0
[   35.806216][  T676] usb 1-1: config 128 interface 164 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   35.819468][  T676] usb 1-1: config 128 interface 164 has no altsetting 0
[   35.827783][  T676] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=3b.3b
[   35.836883][  T676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.844907][  T676] usb 1-1: Product: syz
[   35.849059][  T676] usb 1-1: Manufacturer: syz
[   35.853667][  T676] usb 1-1: SerialNumber: syz
[   36.168112][  T779] rust_binder: Error while translating object.
[   36.168163][  T779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   36.174439][  T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:130
[   36.325417][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   36.325454][   T36] audit: type=1400 audit(1755996509.820:261): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   36.629966][  T392] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   36.732986][   T36] audit: type=1400 audit(1755996510.230:262): avc:  denied  { write } for  pid=802 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   36.763477][  T808] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   36.772184][  T808] rust_binder: Write failure EINVAL in pid:108
[   36.779964][  T392] usb 2-1: Using ep0 maxpacket: 32
[   36.793668][  T810] =======================================================
[   36.793668][  T810] WARNING: The mand mount option has been deprecated and
[   36.793668][  T810]          and is ignored by this kernel. Remove the mand
[   36.793668][  T810]          option from the mount to silence this warning.
[   36.793668][  T810] =======================================================
[   36.794356][  T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.829222][  T810] tmpfs: Unknown parameter 's�ze'
[   36.839522][  T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.839551][  T392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   36.839582][  T392] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[   36.876183][  T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.885809][  T392] usb 2-1: config 0 descriptor??
[   36.925607][  T812] binder: Unknown parameter 'appraise_type'
[   36.946392][   T36] audit: type=1400 audit(1755996510.440:263): avc:  denied  { read append } for  pid=813 comm="syz.3.153" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.967707][  T814] netfs: Couldn't get user pages (rc=-14)
[   36.973490][  T814] netfs: Zero-sized read [R=2]
[   37.308578][  T392] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input9
[   37.348405][  T392] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input10
[   37.370034][  T735] usb 3-1: USB disconnect, device number 6
[   37.388983][  T392] kye 0003:0458:5013.0005: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[   37.438480][   T36] audit: type=1400 audit(1755996510.930:264): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   37.560728][  T463] usb 2-1: USB disconnect, device number 2
[   37.849971][  T735] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.999967][  T735] usb 3-1: Using ep0 maxpacket: 32
[   38.006267][  T735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.018342][  T735] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   38.027719][  T735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.036182][  T735] usb 3-1: Product: syz
[   38.040649][  T735] usb 3-1: Manufacturer: syz
[   38.045305][   T36] audit: type=1400 audit(1755996511.540:265): avc:  denied  { bind } for  pid=826 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.065784][  T735] usb 3-1: SerialNumber: syz
[   38.071299][  T735] usb 3-1: config 0 descriptor??
[   38.076424][   T36] audit: type=1400 audit(1755996511.540:266): avc:  denied  { setopt } for  pid=826 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.099874][  T735] usb 3-1: bad CDC descriptors
[   38.105953][  T735] usb 3-1: unsupported MDLM descriptors
[   38.308506][  T463] usb 3-1: USB disconnect, device number 7
[   38.380123][  T847] __vm_enough_memory: pid: 847, comm: syz.3.163, bytes: 18014402804453376 not enough memory for the allocation
[   38.394646][  T676] zaurus 1-1:128.164: skipping garbage
[   38.411358][  T676] usb 1-1: bad CDC descriptors
[   38.417340][  T676] usb 1-1: USB disconnect, device number 6
[   38.487347][   T36] audit: type=1400 audit(1755996511.980:267): avc:  denied  { block_suspend } for  pid=851 comm="syz.2.165" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   38.513777][   T36] audit: type=1400 audit(1755996512.010:268): avc:  denied  { create } for  pid=856 comm="syz.2.167" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   38.538262][   T36] audit: type=1400 audit(1755996512.030:269): avc:  denied  { write } for  pid=856 comm="syz.2.167" name="file2" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   38.560780][   T36] audit: type=1400 audit(1755996512.030:270): avc:  denied  { open } for  pid=856 comm="syz.2.167" path="/44/file2" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   38.591995][  T855] netlink: 'syz.3.166': attribute type 4 has an invalid length.
[   38.616336][  T855] netlink: 'syz.3.166': attribute type 4 has an invalid length.
[   38.625754][  T855] rust_binder: Write failure EINVAL in pid:131
[   38.644464][  T863] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   38.695060][  T860] rust_binder: Write failure EINVAL in pid:138
[   38.702790][  T866] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   38.766242][  T869] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.829966][  T735] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   38.949981][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   38.991220][  T735] usb 3-1: unable to get BOS descriptor or descriptor too short
[   38.999651][  T735] usb 3-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config
[   39.009984][  T735] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   39.019059][  T735] usb 3-1: config 1 interface 1 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 27
[   39.032231][  T735] usb 3-1: config 1 interface 1 has no altsetting 0
[   39.040126][  T735] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   39.049162][  T735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.057177][  T735] usb 3-1: Product: syz
[   39.061379][  T735] usb 3-1: Manufacturer: syz
[   39.065967][  T735] usb 3-1: SerialNumber: syz
[   39.110981][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.121971][   T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   39.131088][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.139754][   T31] usb 4-1: config 0 descriptor??
[   39.278935][  T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.287447][  T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.304283][  T735] usb 3-1: 0:2 : does not exist
[   39.314036][  T735] usb 3-1: USB disconnect, device number 8
[   39.321185][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.449519][  T873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.458103][  T873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.472572][  T873] rust_binder: Error in use_page_slow: ESRCH
[   39.472594][  T873] rust_binder: use_range failure ESRCH
[   39.478572][  T873] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   39.484143][  T874] rust_binder: Error in use_page_slow: ESRCH
[   39.492241][  T874] rust_binder: use_range failure ESRCH
[   39.498222][  T874] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   39.503720][  T873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   39.511757][  T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   39.511802][  T873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99
[   39.521297][  T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99
[   39.548460][   T31] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   39.567296][   T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input11
[   39.634029][   T31] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   39.679996][  T676] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   39.809984][  T676] usb 2-1: device descriptor read/64, error -71
[   39.954950][  T463] usb 4-1: USB disconnect, device number 9
[   40.049968][  T676] usb 2-1: device descriptor read/64, error -71
[   40.199961][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   40.251411][  T891] devpts: called with bogus options
[   40.265313][  T893] binder: Unknown parameter 'defcontext01777777777777777777777'
[   40.265537][  T894] binder: Unknown parameter 'defcontext01777777777777777777777'
[   40.289970][  T676] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   40.360943][   T31] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config
[   40.371266][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   40.380870][   T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   40.390002][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   40.397997][   T31] usb 3-1: SerialNumber: syz
[   40.420361][  T676] usb 2-1: device descriptor read/64, error -71
[   40.511732][  T899] fuse: Bad value for 'fd'
[   40.609195][   T31] usb 3-1: 0:2 : does not exist
[   40.615678][   T31] usb 3-1: USB disconnect, device number 9
[   40.628361][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.659964][  T676] usb 2-1: device descriptor read/64, error -71
[   40.739967][  T735] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   40.770030][  T676] usb usb2-port1: attempt power cycle
[   40.889955][  T735] usb 4-1: Using ep0 maxpacket: 16
[   40.896224][  T735] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   40.904972][  T735] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.915057][  T735] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   40.925309][  T735] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   40.934372][  T735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.942355][  T735] usb 4-1: Product: syz
[   40.946507][  T735] usb 4-1: Manufacturer: syz
[   40.951111][  T735] usb 4-1: SerialNumber: syz
[   41.109972][  T676] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   41.131000][  T676] usb 2-1: device descriptor read/8, error -71
[   41.261282][  T676] usb 2-1: device descriptor read/8, error -71
[   41.312767][  T904] /dev/rnullb0: Can't open blockdev
[   41.382256][  T908] netlink: 'syz.0.182': attribute type 2 has an invalid length.
[   41.411781][  T735] usb 4-1: 0:2 : does not exist
[   41.418978][  T735] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[   41.431312][  T735] usb 4-1: USB disconnect, device number 10
[   41.441588][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   41.463440][  T908] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   41.499974][  T676] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   41.521159][  T676] usb 2-1: device descriptor read/8, error -71
[   41.535938][  T909] rust_binder: Read failure Err(EAGAIN) in pid:161
[   41.651046][  T676] usb 2-1: device descriptor read/8, error -71
[   41.699779][  T918] rust_binder: 917 RLIMIT_NICE not set
[   41.702919][   T10] rust_binder: 916: removing orphan mapping 0:4248
[   41.726932][  T922] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   41.734208][  T922] rust_binder: Write failure EINVAL in pid:175
[   41.754629][  T927] rust_binder: Failed copying into alloc: EFAULT
[   41.760847][  T927] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   41.767294][  T927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   41.775735][  T676] usb usb2-port1: unable to enumerate USB device
[   41.790326][  T927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:180
[   41.927810][  T931] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   41.954214][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   41.962012][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   41.969692][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   41.977486][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   41.985294][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   41.993951][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.001970][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.009799][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.020066][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.027968][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.035849][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.043695][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.051412][  T676] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   42.059006][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.067043][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.074828][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.082693][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.090457][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.098147][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.105939][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.113704][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.121439][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.129159][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.137059][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.144796][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.152518][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.160244][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.167934][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.175657][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.183365][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.191255][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.198964][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.206709][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.214483][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.222260][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.230140][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.237914][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.245692][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.249954][  T735] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   42.253422][  T676] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[   42.270605][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.278310][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.286116][  T676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.294343][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.294891][  T676] usb 1-1: config 0 descriptor??
[   42.305418][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.314744][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.322698][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.330547][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.338404][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.346365][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.354188][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.361963][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.369676][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.377479][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.385212][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.392945][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.400699][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.408406][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.416151][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.421062][  T735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.423900][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.435012][  T735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.442477][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.452563][  T735] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   42.465162][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.472957][  T735] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   42.485156][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.491606][  T735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.502528][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.516302][  T735] usb 3-1: config 0 descriptor??
[   42.517632][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.536168][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.544111][  T940] /dev/rnullb0: Can't open blockdev
[   42.549407][  T941] /dev/rnullb0: Can't open blockdev
[   42.549506][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.562520][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.576370][  T934] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.605299][  T946] ptm ptm26: ldisc open failed (-12), clearing slot 26
[   42.842701][  T966] rust_binder: Error while translating object.
[   42.842782][  T966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.849032][  T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156
[   42.903783][  T974] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000040486311 not found
[   42.920132][  T929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.921973][  T974] rust_binder: Write failure EINVAL in pid:162
[   42.931401][  T735] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   42.949395][  T929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.976374][  T735] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   43.120698][  T929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.129228][  T929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.181598][  T676] usbhid 1-1:0.0: can't add hid device: -71
[   43.187576][  T676] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   43.196476][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   43.196493][   T36] audit: type=1400 audit(1755996516.670:286): avc:  denied  { name_bind } for  pid=928 comm="syz.0.191" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   43.225508][  T676] usb 1-1: USB disconnect, device number 7
[   43.291095][  T463] usb 3-1: USB disconnect, device number 10
[   43.391134][   T36] audit: type=1400 audit(1755996516.890:287): avc:  denied  { getopt } for  pid=1001 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.498090][  T292] Bluetooth: hci0: Frame reassembly failed (-90)
[   43.504579][ T1007] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.516025][ T1006] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.522741][ T1006] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.663703][   T36] audit: type=1400 audit(1755996517.160:288): avc:  denied  { getopt } for  pid=1017 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.779079][ T1020] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.218'.
[   43.796624][ T1024] rust_binder: Error while translating object.
[   43.796662][ T1024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.804080][ T1024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185
[   44.009747][ T1041] rust_binder: Write failure EFAULT in pid:187
[   44.032061][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.048959][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.091968][   T36] audit: type=1400 audit(1755996517.580:289): avc:  denied  { mount } for  pid=1049 comm="syz.3.228" name="/" dev="configfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.114651][   T36] audit: type=1400 audit(1755996517.580:290): avc:  denied  { search } for  pid=1049 comm="syz.3.228" name="/" dev="configfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.137084][   T36] audit: type=1400 audit(1755996517.580:291): avc:  denied  { read } for  pid=1049 comm="syz.3.228" name="/" dev="configfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.159089][   T36] audit: type=1400 audit(1755996517.580:292): avc:  denied  { open } for  pid=1049 comm="syz.3.228" path="/" dev="configfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.181525][   T36] audit: type=1400 audit(1755996517.580:293): avc:  denied  { write } for  pid=1049 comm="syz.3.228" name="/" dev="configfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.203522][   T36] audit: type=1400 audit(1755996517.580:294): avc:  denied  { add_name } for  pid=1049 comm="syz.3.228" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.225121][   T36] audit: type=1400 audit(1755996517.580:295): avc:  denied  { create } for  pid=1049 comm="syz.3.228" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[   44.586782][ T1056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188
[   44.600951][ T1059] fuse: Invalid rootmode
[   44.925322][  T676] rust_binder: 1075: removing orphan mapping 0:24
[   44.959302][ T1081] rust_binder: Write failure EFAULT in pid:201
[   45.539953][ T1008] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   45.552298][ T1016] Bluetooth: hci0: command 0x1003 tx timeout
[   45.619959][ T1008] Bluetooth: hci1: command 0x1003 tx timeout
[   45.626027][ T1009] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   45.920909][  T676] rust_binder: 1102: removing orphan mapping 0:4120
[   46.149972][  T735] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   46.239967][  T676] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   46.289975][  T463] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   46.301671][  T735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.312619][  T735] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   46.321656][  T735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.330307][  T735] usb 4-1: config 0 descriptor??
[   46.391082][  T676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   46.400961][  T676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   46.412279][  T676] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   46.421473][  T676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.429511][  T676] usb 3-1: Product: syz
[   46.435841][  T676] usb 3-1: Manufacturer: syz
[   46.440486][  T463] usb 1-1: Using ep0 maxpacket: 32
[   46.445670][  T676] usb 3-1: SerialNumber: syz
[   46.453262][  T463] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   46.466274][  T676] usb 3-1: config 0 descriptor??
[   46.472478][  T463] usb 1-1: config 1 interface 0 has no altsetting 0
[   46.472524][ T1130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   46.480508][  T463] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40
[   46.486409][ T1130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   46.495481][  T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.510839][  T463] usb 1-1: Product: 䀊
[   46.515024][  T463] usb 1-1: Manufacturer: ꋢ׋؝㳍韟߁䅗뢃◖混霉Êꁳ깣䒋캻쩤ꆫᢱ욥汉疕뾇ᮛ泤型첂밎䰪鋤乸䙸鎸崯땴騌팛홫륰ჳ°丼Ե殚쎣═㛧綳㜋澿ﲿ默쑻ᵶ꾭鍷릞箍☂鹂ᾂ繝娐⻪鰫ꕏ팬毃구抔癐黈烁ԯᴓ㼱鮷菄挞놧騦杔岈
[   46.542763][  T463] usb 1-1: SerialNumber: Ђ
[   46.714665][ T1130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   46.721921][ T1130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   46.739786][  T735] usbhid 4-1:0.0: can't add hid device: -71
[   46.745794][  T735] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   46.754541][  T735] usb 4-1: USB disconnect, device number 11
[   46.869942][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   46.951692][  T463] usbhid 1-1:1.0: can't add hid device: -71
[   46.957671][  T463] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   46.967463][  T463] usb 1-1: USB disconnect, device number 8
[   46.999974][    T9] usb 2-1: device descriptor read/64, error -71
[   47.130218][  T676] Error reading MAC address
[   47.239997][    T9] usb 2-1: device descriptor read/64, error -71
[   47.479959][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   47.520007][  T676] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[   47.552793][ T1166] netlink: 'syz.0.263': attribute type 4 has an invalid length.
[   47.609959][    T9] usb 2-1: device descriptor read/64, error -71
[   47.620925][  T389] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   47.640070][  T389] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   47.681295][  T676] usb 4-1: unable to read config index 0 descriptor/start: -61
[   47.699031][  T676] usb 4-1: can't read configurations, error -61
[   47.829998][  T676] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   47.859977][    T9] usb 2-1: device descriptor read/64, error -71
[   47.861890][ T1180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   47.936379][ T1187] rust_binder: Error while translating object.
[   47.936402][ T1187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.942609][ T1187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254
[   47.968311][ T1191] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96
[   47.986870][    T9] usb usb2-port1: attempt power cycle
[   47.993599][  T676] usb 4-1: unable to read config index 0 descriptor/start: -61
[   48.001259][  T676] usb 4-1: can't read configurations, error -61
[   48.008845][  T676] usb usb4-port1: attempt power cycle
[   48.261690][ T1200] rust_binder: Write failure EFAULT in pid:267
[   48.329963][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   48.349985][  T676] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   48.360928][    T9] usb 2-1: device descriptor read/8, error -71
[   48.381719][  T676] usb 4-1: unable to read config index 0 descriptor/start: -61
[   48.389385][  T676] usb 4-1: can't read configurations, error -61
[   48.500978][    T9] usb 2-1: device descriptor read/8, error -71
[   48.519963][  T676] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[   48.541543][  T676] usb 4-1: unable to read config index 0 descriptor/start: -61
[   48.549147][  T676] usb 4-1: can't read configurations, error -61
[   48.555593][  T676] usb usb4-port1: unable to enumerate USB device
[   48.739967][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   48.760930][    T9] usb 2-1: device descriptor read/8, error -71
[   48.891090][    T9] usb 2-1: device descriptor read/8, error -71
[   48.991422][   T67] usb 3-1: USB disconnect, device number 11
[   49.001272][    T9] usb usb2-port1: unable to enumerate USB device
[   49.019964][  T676] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   49.136138][ T1211] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   49.136162][ T1211] rust_binder: Read failure Err(EFAULT) in pid:205
[   49.147351][    T9] rust_binder: 1210: removing orphan mapping 0:24
[   49.160489][    T9] rust_binder: 0: removing orphan mapping 24:1048
[   49.181096][  T676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.192098][  T676] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   49.201145][  T676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.209842][  T676] usb 1-1: config 0 descriptor??
[   49.469991][   T67] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   49.615928][ T1205] can: request_module (can-proto-0) failed.
[   49.622006][   T67] usb 3-1: Using ep0 maxpacket: 16
[   49.628973][  T676] usbhid 1-1:0.0: can't add hid device: -71
[   49.633277][   T67] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[   49.646328][   T67] usb 3-1: config 0 has no interface number 0
[   49.649986][  T676] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   49.654771][   T67] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   49.661521][ T1226] syz.0.282 uses obsolete (PF_INET,SOCK_PACKET)
[   49.670182][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   49.670196][   T36] audit: type=1400 audit(1755996523.160:308): avc:  denied  { map } for  pid=1223 comm="syz.0.282" path="socket:[10690]" dev="sockfs" ino=10690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.680830][  T676] usb 1-1: USB disconnect, device number 9
[   49.683321][   T67] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   49.719564][   T36] audit: type=1400 audit(1755996523.160:309): avc:  denied  { read } for  pid=1223 comm="syz.0.282" path="socket:[10690]" dev="sockfs" ino=10690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.723610][   T67] usb 3-1: config 0 interface 41 has no altsetting 0
[   49.743987][   T36] audit: type=1400 audit(1755996523.210:310): avc:  denied  { ioctl } for  pid=1223 comm="syz.0.282" path="socket:[10690]" dev="sockfs" ino=10690 ioctlcmd=0x4b6d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.752282][   T67] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   49.775745][   T36] audit: type=1400 audit(1755996523.210:311): avc:  denied  { read } for  pid=1223 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.784581][   T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.811541][   T67] usb 3-1: Product: syz
[   49.815686][   T67] usb 3-1: Manufacturer: syz
[   49.820293][   T67] usb 3-1: SerialNumber: syz
[   49.825647][   T67] usb 3-1: config 0 descriptor??
[   49.830891][ T1217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   49.838052][ T1217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   50.045600][ T1217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   50.056725][   T67] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[   50.065132][  T735] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   50.075850][   T67] usb 3-1: USB disconnect, device number 12
[   50.229985][  T735] usb 2-1: Using ep0 maxpacket: 8
[   50.236160][  T735] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[   50.246534][  T735] usb 2-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0
[   50.255678][  T735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.271510][  T735] ftdi_sio 2-1:254.0: Ignoring interface reserved for JTAG
[   50.294318][ T1235] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   50.423856][ T1241] can0: slcan on ptm0.
[   50.433315][   T36] audit: type=1400 audit(1755996523.930:312): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.455238][   T36] audit: type=1400 audit(1755996523.930:313): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   50.477331][   T36] audit: type=1400 audit(1755996523.930:314): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   50.502555][   T67] usb 2-1: USB disconnect, device number 11
[   50.517965][   T36] audit: type=1400 audit(1755996523.930:315): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   50.544308][ T1239] mmap: syz.3.287 (1239): VmData 17453056 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   50.555059][   T36] audit: type=1400 audit(1755996523.970:316): avc:  denied  { read } for  pid=1245 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.581987][   T36] audit: type=1400 audit(1755996523.970:317): avc:  denied  { open } for  pid=1245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.669973][  T735] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[   50.730403][ T1263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.730437][ T1263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225
[   50.812215][ T1267] batadv_slave_1: entered promiscuous mode
[   50.831031][  T735] usb 3-1: config 0 has no interfaces?
[   50.836582][  T735] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   50.845976][  T735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.854845][  T735] usb 3-1: config 0 descriptor??
[   50.902735][ T1267] batadv_slave_1: left promiscuous mode
[   51.018999][ T1276] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   51.066574][   T31] usb 3-1: USB disconnect, device number 13
[   51.105092][ T1240] can0 (unregistered): slcan off ptm0.
[   51.189969][  T735] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   51.351173][  T735] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   51.360928][  T735] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   51.370637][  T735] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.385389][  T735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   51.394868][  T735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.402905][  T735] usb 1-1: Product: syz
[   51.407076][  T735] usb 1-1: Manufacturer: syz
[   51.411677][  T735] usb 1-1: SerialNumber: syz
[   51.418211][  T735] hub 1-1:1.0: bad descriptor, ignoring hub
[   51.424187][  T735] hub 1-1:1.0: probe with driver hub failed with error -5
[   51.467289][ T1317] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.559956][   T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   51.625568][  T735] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   51.630592][ T1320] FAULT_INJECTION: forcing a failure.
[   51.630592][ T1320] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   51.649562][ T1320] CPU: 0 UID: 0 PID: 1320 Comm: syz.2.302 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   51.649588][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   51.649600][ T1320] Call Trace:
[   51.649604][ T1320]  <TASK>
[   51.649608][ T1320]  __dump_stack+0x21/0x30
[   51.649633][ T1320]  dump_stack_lvl+0x10c/0x190
[   51.649646][ T1320]  ? __cfi_dump_stack_lvl+0x10/0x10
[   51.649660][ T1320]  ? avc_has_extended_perms+0x921/0xdd0
[   51.649675][ T1320]  dump_stack+0x19/0x20
[   51.649687][ T1320]  should_fail_ex+0x3d9/0x530
[   51.649703][ T1320]  should_fail+0xf/0x20
[   51.649717][ T1320]  should_fail_usercopy+0x1e/0x30
[   51.649726][ T1320]  _copy_from_user+0x22/0xb0
[   51.649737][ T1320]  hidp_sock_ioctl+0x230/0x530
[   51.649749][ T1320]  ? __cfi_hidp_sock_ioctl+0x10/0x10
[   51.649762][ T1320]  ? proc_fail_nth_write+0x17e/0x210
[   51.649776][ T1320]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   51.649789][ T1320]  sock_do_ioctl+0x102/0x330
[   51.649800][ T1320]  ? sock_show_fdinfo+0xd0/0xd0
[   51.649819][ T1320]  ? __cfi_vfs_write+0x10/0x10
[   51.649828][ T1320]  ? __kasan_check_write+0x18/0x20
[   51.649842][ T1320]  ? mutex_unlock+0x8b/0x240
[   51.649857][ T1320]  sock_ioctl+0x634/0x7b0
[   51.649867][ T1320]  ? __cfi_sock_ioctl+0x10/0x10
[   51.649877][ T1320]  ? __fget_files+0x2c5/0x340
[   51.649887][ T1320]  ? bpf_lsm_file_ioctl+0xd/0x20
[   51.649911][ T1320]  ? security_file_ioctl+0x34/0xd0
[   51.649928][ T1320]  ? __cfi_sock_ioctl+0x10/0x10
[   51.649944][ T1320]  __se_sys_ioctl+0x132/0x1b0
[   51.649961][ T1320]  __x64_sys_ioctl+0x7f/0xa0
[   51.649978][ T1320]  x64_sys_call+0x1878/0x2ee0
[   51.649999][ T1320]  do_syscall_64+0x58/0xf0
[   51.650018][ T1320]  ? clear_bhb_loop+0x50/0xa0
[   51.650034][ T1320]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   51.650059][ T1320] RIP: 0033:0x7f52ab78ebe9
[   51.650082][ T1320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.650096][ T1320] RSP: 002b:00007f52ac65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   51.650118][ T1320] RAX: ffffffffffffffda RBX: 00007f52ab9b5fa0 RCX: 00007f52ab78ebe9
[   51.650131][ T1320] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000004
[   51.650141][ T1320] RBP: 00007f52ac65f090 R08: 0000000000000000 R09: 0000000000000000
[   51.650152][ T1320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.650161][ T1320] R13: 00007f52ab9b6038 R14: 00007f52ab9b5fa0 R15: 00007ffee91ca628
[   51.650174][ T1320]  </TASK>
[   51.650374][  T735] usb 1-1: USB disconnect, device number 10
[   51.909244][  T735] usblp0: removed
[   51.923440][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.934975][   T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   51.944118][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.958475][   T31] usb 2-1: config 0 descriptor??
[   51.967416][  T389] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   51.990643][  T389] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   52.013587][ T1339] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false
[   52.087189][ T1344] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   52.087206][ T1343] rust_binder: Error while translating object.
[   52.087223][ T1344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   52.095350][ T1343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.103532][ T1344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:296
[   52.110933][ T1343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[   52.153870][ T1348] FAULT_INJECTION: forcing a failure.
[   52.153870][ T1348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.176134][ T1348] CPU: 1 UID: 0 PID: 1348 Comm: syz.0.311 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   52.176161][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.176172][ T1348] Call Trace:
[   52.176180][ T1348]  <TASK>
[   52.176188][ T1348]  __dump_stack+0x21/0x30
[   52.176216][ T1348]  dump_stack_lvl+0x10c/0x190
[   52.176240][ T1348]  ? __cfi_dump_stack_lvl+0x10/0x10
[   52.176263][ T1348]  dump_stack+0x19/0x20
[   52.176283][ T1348]  should_fail_ex+0x3d9/0x530
[   52.176307][ T1348]  should_fail+0xf/0x20
[   52.176333][ T1348]  should_fail_usercopy+0x1e/0x30
[   52.176349][ T1348]  _copy_to_user+0x24/0xa0
[   52.176367][ T1348]  simple_read_from_buffer+0xed/0x160
[   52.176391][ T1348]  proc_fail_nth_read+0x19e/0x210
[   52.176409][ T1348]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   52.176427][ T1348]  ? bpf_lsm_file_permission+0xd/0x20
[   52.176441][ T1348]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   52.176454][ T1348]  vfs_read+0x278/0xb60
[   52.176469][ T1348]  ? sock_show_fdinfo+0xd0/0xd0
[   52.176480][ T1348]  ? __cfi_vfs_read+0x10/0x10
[   52.176495][ T1348]  ? __kasan_check_write+0x18/0x20
[   52.176511][ T1348]  ? mutex_lock+0x92/0x1c0
[   52.176526][ T1348]  ? __cfi_mutex_lock+0x10/0x10
[   52.176540][ T1348]  ? __fget_files+0x2c5/0x340
[   52.176552][ T1348]  ksys_read+0x141/0x250
[   52.176561][ T1348]  ? __cfi_ksys_read+0x10/0x10
[   52.176570][ T1348]  ? __kasan_check_read+0x15/0x20
[   52.176583][ T1348]  __x64_sys_read+0x7f/0x90
[   52.176593][ T1348]  x64_sys_call+0x2638/0x2ee0
[   52.176607][ T1348]  do_syscall_64+0x58/0xf0
[   52.176620][ T1348]  ? clear_bhb_loop+0x50/0xa0
[   52.176630][ T1348]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   52.176646][ T1348] RIP: 0033:0x7f527a98d5fc
[   52.176656][ T1348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   52.176666][ T1348] RSP: 002b:00007f527b782030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.176678][ T1348] RAX: ffffffffffffffda RBX: 00007f527abb5fa0 RCX: 00007f527a98d5fc
[   52.176686][ T1348] RDX: 000000000000000f RSI: 00007f527b7820a0 RDI: 0000000000000003
[   52.176693][ T1348] RBP: 00007f527b782090 R08: 0000000000000000 R09: 0000000000000000
[   52.176700][ T1348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.176706][ T1348] R13: 00007f527abb6038 R14: 00007f527abb5fa0 R15: 00007fff65cbd918
[   52.176715][ T1348]  </TASK>
[   52.423339][ T1350] 9pnet_fd: Insufficient options for proto=fd
[   52.546776][ T1356] fuseblk: Bad value for 'fd'
[   52.741244][ T1360] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   52.750829][ T1360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:240
[   52.973947][ T1371] tipc: Started in network mode
[   52.987961][ T1371] tipc: Node identity 4, cluster identity 4711
[   52.994152][ T1371] tipc: Node number set to 4
[   53.059971][  T735] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[   53.224082][  T735] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.234268][  T735] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.243912][  T735] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   53.253059][  T735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   53.261083][  T735] usb 4-1: SerialNumber: syz
[   53.267423][  T735] usb 4-1: 0:2 : does not exist
[   53.419949][   T67] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   53.572250][   T67] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   53.581426][   T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.589409][   T67] usb 3-1: Product: syz
[   53.593614][   T67] usb 3-1: Manufacturer: syz
[   53.598256][   T67] usb 3-1: SerialNumber: syz
[   53.610578][  T676] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.761054][  T676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.772045][  T676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.781856][  T676] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[   53.791054][  T676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.799664][  T676] usb 1-1: config 0 descriptor??
[   54.158690][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.167309][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.176097][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.184752][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.206392][  T676] usbhid 1-1:0.0: can't add hid device: -71
[   54.213331][  T676] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   54.224034][  T676] usb 1-1: USB disconnect, device number 11
[   54.336164][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   54.342792][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   54.353776][   T31] usb 2-1: USB disconnect, device number 12
[   54.356864][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176
[   54.879483][ T1432] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   54.946386][ T1431] kvm: kvm [1429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xccec
[   54.955189][ T1431] kvm: kvm [1429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x12d7
[   54.955758][ T1434] rust_binder: 1432 RLIMIT_NICE not set
[   54.967514][ T1431] kvm: kvm [1429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xc570
[   54.979210][ T1439] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.989024][ T1431] kvm: kvm [1429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xe85b
[   55.004773][ T1431] kvm: kvm [1429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d46
[   55.036343][ T1441] rust_binder: 184: no such ref 3
[   55.041502][ T1441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184
[   55.132756][ T1443] input: syz1 as /devices/virtual/input/input15
[   55.237709][ T1448] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[   55.245428][ T1448] netlink: 160 bytes leftover after parsing attributes in process `syz.0.337'.
[   55.255215][ T1448] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   55.255231][ T1448] rust_binder: Read failure Err(EFAULT) in pid:337
[   55.767171][  T676] usb 4-1: USB disconnect, device number 16
[   55.922551][ T1452] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.922979][ T1452] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[   55.929757][ T1452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188
[   56.075729][ T1455] binder: Bad value for 'defcontext'
[   56.119944][  T676] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   56.190341][   T31] usb 3-1: USB disconnect, device number 14
[   56.249447][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   56.249464][   T36] audit: type=1400 audit(1755996529.740:335): avc:  denied  { setattr } for  pid=1474 comm="syz.0.347" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   56.279969][  T676] usb 4-1: Using ep0 maxpacket: 8
[   56.288851][  T676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.302644][  T676] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[   56.311727][  T676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.323970][  T676] usb 4-1: config 0 descriptor??
[   56.481140][   T67] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   56.521395][   T36] audit: type=1400 audit(1755996530.020:336): avc:  denied  { bind } for  pid=1491 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   56.619957][   T67] usb 2-1: device descriptor read/64, error -71
[   56.757179][   T36] audit: type=1326 audit(1755996530.250:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.3.338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f236638ebe9 code=0x0
[   56.810257][  T676] belkin 0003:050D:3201.000A: unknown main item tag 0x0
[   56.819795][  T676] belkin 0003:050D:3201.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0
[   56.859951][   T67] usb 2-1: device descriptor read/64, error -71
[   57.011736][ T1500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.020339][ T1500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.028921][ T1500] IPv6: NLM_F_CREATE should be specified when creating new route
[   57.037215][    T9] usb 4-1: USB disconnect, device number 17
[   57.042410][ T1500] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   57.043282][ T1500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   57.051451][ T1500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:246
[   57.099980][   T67] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   57.239977][   T67] usb 2-1: device descriptor read/64, error -71
[   57.369973][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   57.480000][   T67] usb 2-1: device descriptor read/64, error -71
[   57.499955][    T9] usb 4-1: device descriptor read/64, error -71
[   57.599952][   T67] usb usb2-port1: attempt power cycle
[   57.608520][ T1511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   57.608553][ T1511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280
[   57.638819][   T31] rust_binder: 1508: removing orphan mapping 0:24
[   57.661283][ T1513] netlink: 64 bytes leftover after parsing attributes in process `syz.2.359'.
[   57.759961][    T9] usb 4-1: device descriptor read/64, error -71
[   57.909969][  T735] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[   57.939983][   T67] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   57.961004][   T67] usb 2-1: device descriptor read/8, error -71
[   57.999966][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   58.060901][  T735] usb 3-1: config 1 interface 0 has no altsetting 0
[   58.068744][  T735] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   58.077862][  T735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.085888][  T735] usb 3-1: Product: syz
[   58.090117][  T735] usb 3-1: Manufacturer: syz
[   58.094737][  T735] usb 3-1: SerialNumber: syz
[   58.100031][   T67] usb 2-1: device descriptor read/8, error -71
[   58.130012][    T9] usb 4-1: device descriptor read/64, error -71
[   58.339986][   T67] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   58.360980][   T67] usb 2-1: device descriptor read/8, error -71
[   58.370013][    T9] usb 4-1: device descriptor read/64, error -71
[   58.480091][    T9] usb usb4-port1: attempt power cycle
[   58.500899][   T67] usb 2-1: device descriptor read/8, error -71
[   58.610059][   T67] usb usb2-port1: unable to enumerate USB device
[   58.708486][  T735] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[   58.820013][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   59.059590][   T36] audit: type=1400 audit(1755996532.550:338): avc:  denied  { read write } for  pid=1512 comm="syz.2.359" name="lp0" dev="devtmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   59.083136][   T36] audit: type=1400 audit(1755996532.550:339): avc:  denied  { open } for  pid=1512 comm="syz.2.359" path="/dev/usb/lp0" dev="devtmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   59.089077][  T676] usb 3-1: USB disconnect, device number 15
[   59.116698][  T676] usblp0: removed
[   59.240040][    T9] usb 4-1: device not accepting address 20, error -71
[   59.284649][   T36] audit: type=1400 audit(1755996532.780:340): avc:  denied  { connect } for  pid=1532 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.285082][ T1533] rust_binder: Write failure EFAULT in pid:206
[   59.539986][  T735] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[   59.579959][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   59.601250][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.611439][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.624224][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.630319][ T1535] rust_binder: 288: no such ref 1
[   59.638055][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.638351][ T1535] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   59.646296][    T9] usb 4-1: SerialNumber: syz
[   59.658023][ T1535] rust_binder: Error while translating object.
[   59.658046][ T1535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.664261][ T1535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288
[   59.676222][ T1535] rust_binder: inc_ref_done called when no active inc_refs
[   59.713864][  T735] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[   59.729490][  T735] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[   59.737602][  T735] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[   59.746558][  T735] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   59.757462][  T735] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   59.769030][  T735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   59.780077][  T735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   59.791033][  T735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   59.806314][  T735] usb 2-1: string descriptor 0 read error: -22
[   59.812567][  T735] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   59.821677][  T735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.830388][  T735] usb 2-1: config 0 descriptor??
[   59.835629][ T1533] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   59.843492][  T735] hub 2-1:0.0: bad descriptor, ignoring hub
[   59.849410][  T735] hub 2-1:0.0: probe with driver hub failed with error -5
[   59.852516][    T9] usb 4-1: 0:2 : does not exist
[   59.857352][  T735] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16
[   59.869025][    T9] usb 4-1: unit 14 not found!
[   59.881078][ T1540] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   59.901198][    T9] usb 4-1: USB disconnect, device number 21
[   60.344272][ T1543] bpf: Bad value for 'uid'
[   60.349197][   T36] audit: type=1400 audit(1755996533.840:341): avc:  denied  { shutdown } for  pid=1542 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.377473][ T1547] SELinux: security_context_str_to_sid () failed with errno=-22
[   60.620798][ T1559] binder: Binderfs stats mode cannot be changed during a remount
[   60.656164][  T735] rust_binder: 1538: removing orphan mapping 0:112
[   60.750444][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   60.823995][   T36] audit: type=1400 audit(1755996534.320:342): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   60.853293][ T1571] fuse: Bad value for 'user_id'
[   60.858256][ T1571] fuse: Bad value for 'user_id'
[   60.910197][    T9] usb 4-1: Using ep0 maxpacket: 16
[   60.921135][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   60.926230][ T1579] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[   60.933462][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.949404][   T36] audit: type=1400 audit(1755996534.430:343): avc:  denied  { relabelto } for  pid=1578 comm="syz.2.384" name="file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   60.976291][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.985302][   T36] audit: type=1400 audit(1755996534.430:344): avc:  denied  { associate } for  pid=1578 comm="syz.2.384" name="file0" dev="tmpfs" ino=518 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0"
[   61.013907][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   61.023018][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.031153][    T9] usb 4-1: Product: syz
[   61.035369][    T9] usb 4-1: Manufacturer: syz
[   61.040038][    T9] usb 4-1: SerialNumber: syz
[   61.300009][  T389] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[   61.429957][  T389] usb 3-1: device descriptor read/64, error -71
[   61.447750][    T9] usb 4-1: 0:2 : does not exist
[   61.669968][  T389] usb 3-1: device descriptor read/64, error -71
[   61.909957][  T389] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[   62.039962][  T389] usb 3-1: device descriptor read/64, error -71
[   62.279948][  T389] usb 3-1: device descriptor read/64, error -71
[   62.293192][  T735] usb 2-1: USB disconnect, device number 17
[   62.400027][  T389] usb usb3-port1: attempt power cycle
[   62.654042][ T1557] kvm: pic: non byte read
[   62.673537][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   62.673552][   T36] audit: type=1326 audit(1755996536.170:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1556 comm="syz.3.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236638ebe9 code=0x0
[   62.760016][  T389] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[   62.780854][  T389] usb 3-1: device descriptor read/8, error -71
[   62.882706][ T1601] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   62.890015][ T1601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216
[   62.910925][  T389] usb 3-1: device descriptor read/8, error -71
[   63.159942][  T389] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[   63.180925][  T389] usb 3-1: device descriptor read/8, error -71
[   63.310947][  T389] usb 3-1: device descriptor read/8, error -71
[   63.420068][  T389] usb usb3-port1: unable to enumerate USB device
[   63.631293][ T1609] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.799524][    T9] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[   63.819256][    T9] usb 4-1: USB disconnect, device number 22
[   63.855348][   T36] audit: type=1400 audit(1755996537.350:347): avc:  denied  { create } for  pid=1611 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   63.875297][   T36] audit: type=1400 audit(1755996537.360:348): avc:  denied  { getopt } for  pid=1611 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   63.921015][ T1621] syz.0.396 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   63.931468][  T735] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   63.948864][ T1621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'.
[   63.958017][ T1621] netlink: 43 bytes leftover after parsing attributes in process `syz.0.396'.
[   63.967037][ T1621] netlink: 'syz.0.396': attribute type 6 has an invalid length.
[   63.989986][ T1621] netlink: 'syz.0.396': attribute type 5 has an invalid length.
[   63.997791][ T1621] netlink: 43 bytes leftover after parsing attributes in process `syz.0.396'.
[   64.007464][ T1623] bridge0: port 3(erspan0) entered blocking state
[   64.029955][ T1623] bridge0: port 3(erspan0) entered disabled state
[   64.036456][ T1623] erspan0: entered allmulticast mode
[   64.042420][ T1623] erspan0: entered promiscuous mode
[   64.047762][ T1623] bridge0: port 3(erspan0) entered blocking state
[   64.054223][ T1623] bridge0: port 3(erspan0) entered forwarding state
[   64.067361][   T36] audit: type=1400 audit(1755996537.560:349): avc:  denied  { setopt } for  pid=1620 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   64.067580][ T1621] erspan0: left allmulticast mode
[   64.097174][ T1621] erspan0: left promiscuous mode
[   64.102625][ T1621] bridge0: port 3(erspan0) entered disabled state
[   64.103901][  T735] usb 2-1: device descriptor read/64, error -71
[   64.149413][   T36] audit: type=1400 audit(1755996537.640:350): avc:  denied  { read } for  pid=1627 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.184735][ T1632] rust_binder: Write failure EINVAL in pid:272
[   64.254018][ T1635] rust_binder: Error in use_page_slow: ESRCH
[   64.254043][ T1635] rust_binder: use_range failure ESRCH
[   64.262704][ T1635] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   64.268204][ T1635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   64.276313][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:274
[   64.359974][  T735] usb 2-1: device descriptor read/64, error -71
[   64.441502][ T1644] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   64.609970][  T735] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   64.739959][  T735] usb 2-1: device descriptor read/64, error -71
[   64.893227][ T1651] __vm_enough_memory: pid: 1651, comm: syz.2.405, bytes: 18014402804453376 not enough memory for the allocation
[   64.950810][ T1655] rust_binder: Error while translating object.
[   64.950835][ T1655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   64.957006][ T1655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:331
[   64.980099][  T735] usb 2-1: device descriptor read/64, error -71
[   65.100058][  T735] usb usb2-port1: attempt power cycle
[   65.226889][    T9] rust_binder: 1641: removing orphan mapping 0:112
[   65.240440][   T36] audit: type=1400 audit(1755996538.740:351): avc:  denied  { bind } for  pid=1659 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.241216][ T1660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   65.259723][   T36] audit: type=1400 audit(1755996538.740:352): avc:  denied  { name_bind } for  pid=1659 comm="syz.0.409" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   65.260137][ T1660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:396
[   65.269279][   T36] audit: type=1400 audit(1755996538.740:353): avc:  denied  { node_bind } for  pid=1659 comm="syz.0.409" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   65.309784][ T1662] netlink: 'syz.0.410': attribute type 4 has an invalid length.
[   65.328513][ T1662] netlink: 'syz.0.410': attribute type 4 has an invalid length.
[   65.439998][  T735] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   65.461052][  T735] usb 2-1: device descriptor read/8, error -71
[   65.558249][   T36] audit: type=1400 audit(1755996539.050:354): avc:  denied  { create } for  pid=1673 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[   65.592937][  T735] usb 2-1: device descriptor read/8, error -71
[   65.699163][   T36] audit: type=1400 audit(1755996539.190:355): avc:  denied  { setopt } for  pid=1680 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   65.839983][  T735] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   65.861001][  T735] usb 2-1: device descriptor read/8, error -71
[   65.959998][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   66.000962][  T735] usb 2-1: device descriptor read/8, error -71
[   66.109958][    T9] usb 3-1: Using ep0 maxpacket: 16
[   66.110077][  T735] usb usb2-port1: unable to enumerate USB device
[   66.116191][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   66.132712][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.145522][    T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[   66.154573][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.163123][    T9] usb 3-1: config 0 descriptor??
[   66.571830][    T9] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[   66.649871][ T1684] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.770707][    T9] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 9: -71
[   66.787261][    T9] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -71
[   66.796512][    T9] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense
[   66.805578][    T9] playstation 0003:054C:0DF2.000B: Failed to create dualsense.
[   66.807276][ T1684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'.
[   66.823161][    T9] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71
[   66.844969][    T9] usb 3-1: USB disconnect, device number 20
[   67.210002][ T1697] 9pnet_fd: Insufficient options for proto=fd
[   67.449957][  T463] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   67.599993][  T463] usb 4-1: Using ep0 maxpacket: 8
[   67.606598][  T463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[   67.617686][  T463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[   67.629381][  T463] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[   67.638426][  T463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.647286][  T463] usb 4-1: config 0 descriptor??
[   67.887574][ T1705] rust_binder: Error while translating object.
[   67.887612][ T1705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   67.893893][ T1705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:240
[   68.191255][ T1709] netlink: 'syz.1.427': attribute type 12 has an invalid length.
[   68.262562][  T463] usbhid 4-1:0.0: can't add hid device: -71
[   68.269743][  T463] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   68.282102][  T463] usb 4-1: USB disconnect, device number 23
[   68.323361][   T36] audit: type=1400 audit(1755996541.820:356): avc:  denied  { ioctl } for  pid=1715 comm="syz.2.430" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.569998][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   68.699961][    T9] usb 3-1: device descriptor read/64, error -71
[   68.844736][ T1723] netlink: 9 bytes leftover after parsing attributes in process `syz.3.433'.
[   68.853918][ T1723] gretap0: entered promiscuous mode
[   68.859214][ T1722] netlink: 9 bytes leftover after parsing attributes in process `syz.3.433'.
[   68.868321][ T1723] netlink: 5 bytes leftover after parsing attributes in process `syz.3.433'.
[   68.877151][ T1723] 0��{X��: renamed from gretap0
[   68.882861][ T1723] 0��{X��: left promiscuous mode
[   68.887877][ T1723] 0��{X��: entered allmulticast mode
[   68.893569][ T1723] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   68.939974][    T9] usb 3-1: device descriptor read/64, error -71
[   69.060270][   T36] audit: type=1400 audit(1755996542.550:357): avc:  denied  { getopt } for  pid=1724 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.063263][ T1728] rust_binder: Write failure EFAULT in pid:247
[   69.080450][   T36] audit: type=1400 audit(1755996542.550:358): avc:  denied  { write } for  pid=1724 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.085585][ T1728] devpts: called with bogus options
[   69.112153][ T1729] rust_binder: 1725 RLIMIT_NICE not set
[   69.179956][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   69.329994][    T9] usb 3-1: device descriptor read/64, error -71
[   69.579947][    T9] usb 3-1: device descriptor read/64, error -71
[   69.699963][    T9] usb usb3-port1: attempt power cycle
[   70.039986][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   70.061207][    T9] usb 3-1: device descriptor read/8, error -71
[   70.114549][ T1748] rust_binder: validate_parent_fixup: new_min_offset=562949953422394, sg_entry.length=238
[   70.114576][ T1748] rust_binder: Error while translating object.
[   70.125710][ T1748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.131921][ T1748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266
[   70.142067][   T36] audit: type=1400 audit(1755996543.640:359): avc:  denied  { append } for  pid=1747 comm="syz.1.441" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   70.190893][    T9] usb 3-1: device descriptor read/8, error -71
[   70.430017][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   70.450947][    T9] usb 3-1: device descriptor read/8, error -71
[   70.581097][    T9] usb 3-1: device descriptor read/8, error -71
[   70.690085][    T9] usb usb3-port1: unable to enumerate USB device
[   70.765902][ T1756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.000063][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   71.161089][    T9] usb 2-1: config index 0 descriptor too short (expected 8028, got 92)
[   71.169394][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.179528][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.191933][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.201040][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.209053][    T9] usb 2-1: Product: syz
[   71.213232][    T9] usb 2-1: Manufacturer: syz
[   71.217827][    T9] usb 2-1: SerialNumber: syz
[   71.414557][   T36] audit: type=1400 audit(1755996544.910:360): avc:  denied  { relabelto } for  pid=1762 comm="syz.2.446" name="file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   71.457296][   T36] audit: type=1400 audit(1755996544.950:361): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   71.495489][    T9] cdc_ncm 2-1:1.0: bind() failure
[   71.516245][    T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   71.520311][   T36] audit: type=1400 audit(1755996545.010:362): avc:  denied  { write } for  pid=1772 comm="syz.1.448" path="socket:[15865]" dev="sockfs" ino=15865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.523453][    T9] cdc_ncm 2-1:1.1: bind() failure
[   71.564096][    T9] usb 2-1: USB disconnect, device number 22
[   71.650760][ T1785] binder: Unknown parameter 'seclabal'
[   71.718135][ T1790] 9pnet_fd: Insufficient options for proto=fd
[   71.726224][ T1791] 9pnet_fd: Insufficient options for proto=fd
[   71.752523][   T36] audit: type=1400 audit(1755996545.250:363): avc:  denied  { listen } for  pid=1793 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.965841][   T36] audit: type=1400 audit(1755996545.460:364): avc:  denied  { write } for  pid=1804 comm="syz.0.458" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   72.049997][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   72.068467][ T1808] rust_binder: Error while translating object.
[   72.068498][ T1808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.074808][ T1808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428
[   72.145835][ T1724] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI
[   72.167530][ T1724] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[   72.175939][ T1724] CPU: 1 UID: 0 PID: 1724 Comm: syz.3.434 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   72.187368][ T1724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   72.197400][ T1724] RIP: 0010:fuse_file_release+0x29e/0x400
[   72.203106][ T1724] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc
[   72.222697][ T1724] RSP: 0018:ffffc9000e9cfae0 EFLAGS: 00010202
[   72.228791][ T1724] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811c810000
[   72.236744][ T1724] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811b7dce78
[   72.244694][ T1724] RBP: ffffc9000e9cfb28 R08: 0000000000000003 R09: 0000000000000004
[   72.252652][ T1724] R10: dffffc0000000000 R11: fffff52001d39f2c R12: 0000000000008000
[   72.260603][ T1724] R13: ffff88812f967180 R14: ffff88811b7dce00 R15: 00000000000000c8
[   72.268551][ T1724] FS:  0000555590cc9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.277456][ T1724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.284027][ T1724] CR2: 00007ffe08159fc8 CR3: 00000001328c6000 CR4: 00000000003526b0
[   72.291991][ T1724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.299946][ T1724] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   72.307895][ T1724] Call Trace:
[   72.311154][ T1724]  <TASK>
[   72.314069][ T1724]  fuse_release+0x13e/0x1b0
[   72.318551][ T1724]  ? __cfi_fuse_release+0x10/0x10
[   72.323550][ T1724]  __fput+0x1fe/0xa00
[   72.327511][ T1724]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   72.333040][ T1724]  ____fput+0x20/0x30
[   72.336998][ T1724]  task_work_run+0x1e3/0x250
[   72.341566][ T1724]  ? __cfi_task_work_run+0x10/0x10
[   72.346654][ T1724]  get_signal+0x1307/0x14f0
[   72.351135][ T1724]  ? __kasan_check_write+0x18/0x20
[   72.356229][ T1724]  ? _raw_spin_lock+0x8c/0x120
[   72.360971][ T1724]  ? __cfi__raw_spin_lock+0x10/0x10
[   72.366167][ T1724]  ? fput+0x1a5/0x240
[   72.370125][ T1724]  arch_do_signal_or_restart+0x96/0x720
[   72.375652][ T1724]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   72.381786][ T1724]  ? __kasan_check_write+0x18/0x20
[   72.386960][ T1724]  syscall_exit_to_user_mode+0x58/0xb0
[   72.392394][ T1724]  do_syscall_64+0x64/0xf0
[   72.396786][ T1724]  ? clear_bhb_loop+0x50/0xa0
[   72.401435][ T1724]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   72.407307][ T1724] RIP: 0033:0x7f236638ebe9
[   72.411699][ T1724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.431284][ T1724] RSP: 002b:00007ffe0815a008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   72.439676][ T1724] RAX: 0000000000000000 RBX: 00007f23665b7da0 RCX: 00007f236638ebe9
[   72.447622][ T1724] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   72.455567][ T1724] RBP: 00007f23665b7da0 R08: 0000000000000204 R09: 0000001b0815a2ff
[   72.463513][ T1724] R10: 00007f23665b7cb0 R11: 0000000000000246 R12: 00000000000110b9
[   72.471475][ T1724] R13: 00007f23665b6180 R14: ffffffffffffffff R15: 00007ffe0815a120
[   72.479424][ T1724]  </TASK>
[   72.482420][ T1724] Modules linked in:
[   72.486356][ T1726] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#2] PREEMPT SMP KASAN PTI
[   72.486539][ T1724] ---[ end trace 0000000000000000 ]---
[   72.498941][ T1726] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[   72.498962][ T1726] CPU: 0 UID: 0 PID: 1726 Comm: syz.3.434 Tainted: G      D            syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   72.508619][ T1724] RIP: 0010:fuse_file_release+0x29e/0x400
[   72.512834][ T1726] Tainted: [D]=DIE
[   72.512842][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   72.512854][ T1726] RIP: 0010:fuse_file_release+0x29e/0x400
[   72.525886][ T1724] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc
[   72.531487][ T1726] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc
[   72.531505][ T1726] RSP: 0018:ffffc9000e40fae0 EFLAGS: 00010202
[   72.531524][ T1726] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[   72.535741][ T1724] RSP: 0018:ffffc9000e9cfae0 EFLAGS: 00010202
[   72.545249][ T1726] RDX: dffffc0000000000 RSI: 000000000000034e RDI: 000000000000034f
[   72.545267][ T1726] RBP: ffffc9000e40fb28 R08: 0000000000000003 R09: 0000000000000004
[   72.545279][ T1726] R10: dffffc0000000000 R11: fffff52001c81f2c R12: 0000000000129002
[   72.545292][ T1726] R13: ffff88812f967180 R14: ffff88811b7dc800 R15: 00000000000000c8
[   72.545305][ T1726] FS:  00007f23671106c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   72.551320][ T1724] 
[   72.570595][ T1726] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.570619][ T1726] CR2: 00007f527b73ff98 CR3: 00000001328c6000 CR4: 00000000003526b0
[   72.570635][ T1726] Call Trace:
[   72.570641][ T1726]  <TASK>
[   72.570649][ T1726]  ? __kasan_slab_free+0x5f/0x80
[   72.570672][ T1726]  ? kmem_cache_free+0x1c1/0x510
[   72.570700][ T1726]  ? putname+0x113/0x150
[   72.591032][ T1724] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811c810000
[   72.596415][ T1726]  fuse_release+0x13e/0x1b0
[   72.604642][ T1724] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811b7dce78
[   72.610409][ T1726]  ? __cfi_fuse_release+0x10/0x10
[   72.610432][ T1726]  __fput+0x1fe/0xa00
[   72.618632][ T1724] RBP: ffffc9000e9cfb28 R08: 0000000000000003 R09: 0000000000000004
[   72.626354][ T1726]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   72.626385][ T1726]  ____fput+0x20/0x30
[   72.634608][ T1724] R10: dffffc0000000000 R11: fffff52001d39f2c R12: 0000000000008000
[   72.642303][ T1726]  task_work_run+0x1e3/0x250
[   72.642329][ T1726]  ? __cfi_task_work_run+0x10/0x10
[   72.651314][  T735] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   72.653560][ T1726]  get_signal+0x1307/0x14f0
[   72.660551][ T1724] R13: ffff88812f967180 R14: ffff88811b7dce00 R15: 00000000000000c8
[   72.668090][ T1726]  ? __kasan_slab_free+0x6a/0x80
[   72.668130][ T1726]  ? putname+0x113/0x150
[   72.671898][ T1724] FS:  0000555590cc9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.674312][ T1726]  arch_do_signal_or_restart+0x96/0x720
[   72.679226][ T1724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.684139][ T1726]  ? fput+0x1a5/0x240
[   72.684161][ T1726]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   72.684188][ T1726]  ? __kasan_check_write+0x18/0x20
[   72.688796][ T1724] CR2: 0000555590cc94a8 CR3: 00000001328c6000 CR4: 00000000003526b0
[   72.696357][ T1726]  ? __x64_sys_open+0x120/0x150
[   72.696386][ T1726]  syscall_exit_to_user_mode+0x58/0xb0
[   72.701102][ T1724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.708827][ T1726]  do_syscall_64+0x64/0xf0
[   72.714034][ T1724] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   72.717782][ T1726]  ? clear_bhb_loop+0x50/0xa0
[   72.725936][ T1724] Kernel panic - not syncing: Fatal exception
[   72.867410][ T1724] Kernel Offset: disabled
[   72.871712][ T1724] Rebooting in 86400 seconds..