last executing test programs:

13.366727306s ago: executing program 2 (id=849):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3000400, 0x0) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x160e)

13.366079696s ago: executing program 2 (id=850):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1c04, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000000)='N', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2002, 0x2, @loopback, 0x3}, 0x1c) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c, 0x0, &(0x7f0000000180)=[@release, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x10000000a, 0x0, 0xd}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x0, 0x8}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @release={0x40046306, 0x3}, @enter_looper, @acquire_done], 0x0, 0x0, 0x0})

13.271279297s ago: executing program 2 (id=851):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000040)="64077df0b92959ed184a5719eaebe293cd4a464ec246c3553bfd3d870692766f5d9faa770a201888e250f67d25f353184a53a1f704b28561e33685e3808e2387180e14249290d324d92276627259894a2042351871fc6cdac7", 0x59)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100fc4d5425104d7a40000102030109022400010107d00809040004010301030609a10100d70122d205090581030004030700"], &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x2, 0xfb, 0x10, 0x3}, 0xea, &(0x7f0000000140)={0x5, 0xf, 0xea, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x9, 0xb86, 0x37}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "816505d9fa789269ef45aa76d0c77a37"}, @ptm_cap={0x3}, @generic={0xb9, 0x10, 0xb, "4ecfab11de0086445c5eb1aacceeb2b7b268646c7fc9614fe65359f40a4ab146e2463f2ec9414560d6c67a41a2ac658d32ba0b832fddbcf01446c2775eca6ed7e7016b32cdeb46b64ba3df5b48362a02cc591541cf751ce2743a6abec9f3a9e562fe9756f003565947e3d40f832221e997a20d2f38f9d8774389b92553ccee039055362b7503c8f82fce92ef5ff2a3b2aae12a45c7d15f8b635688a0c7fd2a40b75a1df4ad7a57d15027fc6dcfc296f060b31e6d166d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x6a, 0x7}]}, 0x5, [{0x4f, &(0x7f0000000240)=@string={0x4f, 0x3, "78f934928f97bf84ab17250e205093e6efefc07a2ec15d52972950032946f6d2cd9e6e202ad9fd7365eda344266114719638af5e277398e0098d7653273487a04e7951c36579dc6a0f82b974db"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0xd2, &(0x7f0000000340)=@string={0xd2, 0x3, "2e5eaa2ee0642d843f32d77908cdc9f232f7ed52cec809d43acb7792787553e57429064220044f9b4f75556e511af355d70018f91eea4dec7bc1f4772229e7c3272f7cbd4646690d6c412ccdba7f2ca5d4a0d7a975d18fe03299145c41e7584cfbb6e5f12995d6fca16c8400f3272d8aede51e142314c6a65321b838328abdee29b1952211aae4ecb4049fc6af2da960e7ee13ecac03ae9eee4d46364ea75ff462ebbf84d0b58efe75a6b6ad1d68cf0adfcfa4222ab7b1015c2052eff036198d668526adb59d02c2b05378b88baf017f"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}]})

12.703755556s ago: executing program 2 (id=859):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
sendfile(r1, r2, 0x0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000080)=<r3=>0x0)
io_pgetevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setuid(r8)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$clear(0x7, 0x0)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)

12.686929136s ago: executing program 2 (id=860):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000980))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3e, 0x0, &(0x7f0000000100)) (async, rerun: 32)
ppoll(&(0x7f00000001c0)=[{r3, 0xbf28cbd0a1c0d07a}, {r0, 0xc3a1}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32)
ppoll(&(0x7f0000000080)=[{r3, 0x413c}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000200)={[0xc]}, 0x8)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
fadvise64(r6, 0x1003, 0x9, 0x5) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket(0x10, 0x3, 0x0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000)
write(r9, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11)
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfbd) (async)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="69643d00000001000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
write$FUSE_NOTIFY_STORE(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000400000000000000000001"], 0x29)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000010"]) (async)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)

12.534773099s ago: executing program 2 (id=864):
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)

11.306243987s ago: executing program 0 (id=888):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x200000f, 0x12, r0, 0x10a57000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$802154_dgram(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}]}, 0x15)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000100)=0x3) (async)
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000100)=0x3)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4106, 0x100a}, 0x800027}], 0x1, 0x40010041, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

10.975939032s ago: executing program 0 (id=895):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="3801", 0x2}], 0x1, 0x1, 0x7, 0x1f)
r1 = socket(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x8, 0x4)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x6570})

10.973687812s ago: executing program 0 (id=898):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0})

10.957119503s ago: executing program 0 (id=899):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585d1", @ANYRESOCT], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000", @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000200000009d14400008"], 0x34, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fchown(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7)
fcntl$addseals(r4, 0x409, 0x8)
syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000040)={0x0, 0x11, 0x84, {0x84, 0x11, "78181fb56c2acb72e41ce201c3e38e72b4903651835b82e7b1fcef23ae5125449a89ad63ec374b522628255906b928b7daf385b2b14084797c8081d89316f496d12ecf649791edeb0d9c468399a31fe0bed845c5b3c07f0c2cc3dd53503f78b0b607e651aefe86453e19e8601f73327ae7b450e85fcf17d7772b0b759225ebfe6aea"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000200)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ec5c093b14186937c07e4485a7d8db8e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xe, 0x4, 0x6}, @generic={0x78, 0x10, 0x4, "8aeaa43e272af685cd03eea67be2c6149fb1d3b8a2e77bee59a439dfb3d1e600361bd3bc6e5c8fe183d3ec6b7b493166fda177fbd2d28a69d71332e45a737ac19b86e8987adda4ad720e8fb9402a979129d11d987bc56835d5ebdf80fd7d90dd3643581262ee31876d9363fb71fb8b885647bbaa76"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b2a4af2a0b2afa53d4473dba6025db7c"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x0, 0x71, "dc6765af", "d8648682"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x9, 0x8, 0x2, 0x8, 0x7f}}}, &(0x7f0000000c00)={0x44, &(0x7f00000003c0)={0x20, 0x2, 0x3f, "24bb00ccc242b9e8493fa498edc2ce8d8e596b2f1101525be7fd717ea8996ed773432c34ee93b9b5a7ce49e23ecdb27ff6757f586cecd3e8f7f0f3aa1009b6"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x4, 0x20, [0xf00f]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "d454"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, '\b\\'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf}})
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000})
getpeername$inet(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4204, r7, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

9.689309992s ago: executing program 0 (id=925):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
userfaultfd(0x40001)
r1 = gettid()
syz_open_procfs(r1, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r3 = dup3(r0, r2, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1, 0xa9})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_clone(0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000080)='./file0\x00', 0x1b3)
pipe2$9p(&(0x7f0000001900)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r9 = dup(r8)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18)
r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
read(r10, &(0x7f0000000340)=""/72, 0x48)
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
truncate(0x0, 0x40000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x100)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[])
lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40))
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000200))
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x6, 0x8, 0x1, 0x1, <r11=>r6})
getpgrp(r11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x80010, r4, 0x99b37000)

9.419965406s ago: executing program 0 (id=929):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1000000) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0x4}]})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

9.378956067s ago: executing program 32 (id=929):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1000000) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0x4}]})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

3.836004222s ago: executing program 4 (id=973):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="eeeb000088701558c65cc54c05a0110000000d0e8e050606980a00c00c058f8a888905"])
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

3.820303352s ago: executing program 4 (id=974):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
setrlimit(0x8, &(0x7f0000000080))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r4 = socket(0x1e, 0x5, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/248, 0xf8}], 0x1, &(0x7f0000000a00)=""/196, 0xc4}, 0x3}], 0x1, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000001040)="fa1eade4bec7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="2fb9afaf", 0x4}], 0x1}}], 0x2, 0x4048804)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x9, 0x4e23, 0x8, 0xa, 0xa0, 0xc0, 0x2}, {0x2, 0xfffffffffffffffc, 0x1000, 0x74, 0x80000000008, 0x1, 0x8000000000000000, 0x9}, {0x0, 0x6, 0xc3, 0x5}, 0xfffffff9, 0x406e6bc0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x33}, 0xa, @in=@private=0xa010101, 0x3507, 0x0, 0x3, 0x1, 0xf80, 0x80000, 0xdaf1}}, 0xe8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"})

3.727334483s ago: executing program 4 (id=976):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r1, r0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1}) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) (async)

3.475930917s ago: executing program 1 (id=979):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.474964557s ago: executing program 1 (id=980):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async, rerun: 32)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = dup3(r1, r2, 0x80000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x1) (async, rerun: 64)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64)
pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0xffffffffffffffff, 0x400103}, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.474668577s ago: executing program 1 (id=981):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000007c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0)
io_setup(0x201, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40}])
dup3(r3, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})

3.3038803s ago: executing program 1 (id=982):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x3, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x10)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000)
pselect6(0x40, &(0x7f00000000c0)={0xb6d1, 0x0, 0x5, 0xd6, 0xf, 0x8, 0xb, 0xca}, 0x0, 0x0, &(0x7f00000001c0), 0x0)

3.28604411s ago: executing program 1 (id=983):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, 0x0, 0x810) (async)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf252800000005002e000900000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e310000000c0005000202aaaaaaaaaaaa05002b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) (async, rerun: 32)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (rerun: 32)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.31720094s ago: executing program 1 (id=985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xac, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x404}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x340}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4ee}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x36c4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000880)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902140001010000000904690202ff5a"], 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000003140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB='\n\x00', @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="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"])
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
io_setup(0x9, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x80, 0x0, &(0x7f0000000580)=[@enter_looper, @acquire_done={0x40106309, 0x1}, @enter_looper, @acquire={0x40046305, 0x2}, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/97, 0x61, 0x1, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/2, 0x2, 0x1, 0x11}, @flat=@weak_handle={0x77682a85, 0x101}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"})
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r3, 0xfffff000)

865.627107ms ago: executing program 3 (id=991):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000040)=""/19, 0x13)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) (async)
getdents(r3, &(0x7f0000000040)=""/19, 0x13) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

799.958288ms ago: executing program 3 (id=992):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x8)
dup3(r1, r2, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

779.694878ms ago: executing program 3 (id=993):
r0 = syz_open_dev$hiddev(&(0x7f0000000240), 0x6, 0x20002) (async)
r1 = socket(0x28, 0x5, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0xa00, 0x894, {r2, r3/1000+60000}, {0x77359400}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "94f4b40d030eaf16"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000808)
r4 = socket(0x21, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newspdinfo={0x3c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d5}, 0x40000) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]}) (async)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000180)={[0xc42, 0x0, 0x4, 0x5, 0xfffffffffffffffc, 0x2, 0x80000000, 0x23f, 0x2000007, 0x0, 0x7fffffff, 0x7, 0x0, 0x7fff, 0xff, 0x6], 0x1000, 0x248894}) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async)
copy_file_range(r5, &(0x7f0000000040)=0x8, r6, 0x0, 0x9, 0x0)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000200)) (async)
listen(r4, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x1, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0x0, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xffffffff, 0x57, 0x5, 0x3, 0x101, 0x30000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
lseek(r12, 0x7fa2, 0x0)
recvmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/198, 0xc6}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r14 = accept$inet(r13, 0x0, &(0x7f0000000280))
getsockopt$ARPT_SO_GET_ENTRIES(r14, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000025e951aa001800000055cd8687f2094a06b323ddada1c5e908ab8a585a96979c72"], &(0x7f0000000300)=0x3c) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)

730.151149ms ago: executing program 3 (id=994):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
lsm_list_modules(0x0, &(0x7f0000000040), 0x0)

671.89226ms ago: executing program 4 (id=995):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88)
getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r5 = dup(r4)
ioctl$int_in(r5, 0x5421, &(0x7f00000004c0)=0x9)
read$usbmon(r5, &(0x7f0000000080)=""/24, 0x18)
sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020601090300000027bd6f4f94f16d9b25ec00fedbdf25010000224e230000"], 0x18}}, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

671.05923ms ago: executing program 3 (id=996):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
syz_open_procfs$pagemap(r0, &(0x7f0000000a00))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
prlimit64(0x0, 0x9, &(0x7f0000000040)={0x8, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2e, "f42a97b96d02faffffff75fdda624457697e22bd14ad3d5c3638f76f623a43edba52ff8d5cde1d3b8ad78583afe1"}})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x0, 0x5c}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05", @ANYRES16=r6, @ANYRES8, @ANYRES16, @ANYRES16], 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000100), 0x183b42, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

545.807492ms ago: executing program 4 (id=997):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f00000002c0)='./file0\x00', 0x1) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000340597f67a41c0213932b820891975f89afe9fe4a47a0adac9c7cf8d6e048b5139a301d8c15e3677ccb623ba6e9f090f2cfc8a8683b312b1063603831e3f6793ae1826fa74b23ab1d43e2c3a0b93a381a602679b066524e5726d272f4c7588d40a91c8dd1d57e1f64ba579793269c2eab3614ba0024fbe1021fb4a115fdf82c8b1eff54d8afc64804e0bdde"], 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async)
recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000001600)=""/50, 0x32}], 0x4}}], 0x1, 0x40030002, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x100f0, r0, 0x6000)

510.868703ms ago: executing program 4 (id=998):
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000280)=""/163, 0xbb)
sendmmsg$inet(r1, &(0x7f0000001540), 0x40001b6, 0x4054)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=999):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x13, 0x4, 0x70bd2c, 0x25dfdbfd, {0x1e, 0x8, 0x2, 0x2, {0x4e20, 0x4e20, [0x0, 0x2, 0xfffffff8, 0xfffffffb], [0x7, 0x0, 0xffffff00, 0x4], 0x0, [0x12, 0x5]}, 0x8000, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x41, 0x1, "238bab5198a80859c8fcf4f5f0410669afea480104ea47bf91c6d241e3be55ef7c3ec645f3562e380d004f4f69c4eb8fcc3812008b95eb968e2ebf5f89"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
truncate(&(0x7f0000000200)='./file2\x00', 0x7) (async)
truncate(&(0x7f0000000200)='./file2\x00', 0x7)

kernel console output (not intermixed with test programs):

1135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.809108][ T1135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175
[   36.829758][  T393] usb 1-1: not running at top speed; connect to a high speed hub
[   36.847236][  T393] usb 1-1: config 0 has an invalid interface number: 14 but max is 1
[   36.855333][  T393] usb 1-1: config 0 has an invalid interface number: 37 but max is 1
[   36.871343][  T393] usb 1-1: config 0 has an invalid interface number: 237 but max is 1
[   36.879532][  T393] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[   36.888493][  T393] usb 1-1: config 0 has no interface number 0
[   36.894553][  T393] usb 1-1: config 0 has no interface number 1
[   36.900621][  T393] usb 1-1: config 0 has no interface number 2
[   36.906712][  T393] usb 1-1: config 0 interface 14 altsetting 75 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   36.917762][  T393] usb 1-1: config 0 interface 14 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   36.929078][  T393] usb 1-1: config 0 interface 14 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[   36.940123][  T393] usb 1-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping
[   36.950995][  T393] usb 1-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x1, skipping
[   36.961679][  T393] usb 1-1: config 0 interface 14 altsetting 75 has a duplicate endpoint with address 0x9, skipping
[   36.968555][  T812] syz_tun: tun_net_xmit 106
[   36.972387][  T393] usb 1-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping
[   36.987734][  T393] usb 1-1: config 0 interface 14 altsetting 75 has an invalid descriptor for endpoint zero, skipping
[   36.998626][  T393] usb 1-1: config 0 interface 14 altsetting 75 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   37.009623][  T393] usb 1-1: config 0 interface 37 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64
[   37.020398][  T393] usb 1-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[   37.031000][  T393] usb 1-1: config 0 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[   37.041782][  T393] usb 1-1: config 0 interface 37 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[   37.054733][  T393] usb 1-1: too many endpoints for config 0 interface 237 altsetting 22: 251, using maximum allowed: 30
[   37.065818][  T393] usb 1-1: config 0 interface 237 altsetting 22 has a duplicate endpoint with address 0xE, skipping
[   37.076584][  T393] usb 1-1: config 0 interface 237 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 251
[   37.089795][  T393] usb 1-1: config 0 interface 14 has no altsetting 0
[   37.096459][  T393] usb 1-1: config 0 interface 37 has no altsetting 0
[   37.103144][  T393] usb 1-1: config 0 interface 237 has no altsetting 0
[   37.111230][  T393] usb 1-1: Dual-Role OTG device on HNP port
[   37.117325][  T393] usb 1-1: New USB device found, idVendor=2c4e, idProduct=0100, bcdDevice=b5.39
[   37.126387][  T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.134430][  T393] usb 1-1: Product: syz
[   37.138661][  T393] usb 1-1: Manufacturer: syz
[   37.143254][  T393] usb 1-1: SerialNumber: syz
[   37.148299][  T393] usb 1-1: config 0 descriptor??
[   37.248585][  T812] syz_tun: tun_net_xmit 106
[   37.361393][  T393] usb 1-1: USB disconnect, device number 8
[   37.408386][  T812] usb 2-1: USB disconnect, device number 10
[   37.498009][ T1147] FAT-fs (rnullb0): bogus number of reserved sectors
[   37.504844][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   37.513654][ T1147] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   37.774600][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.783062][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.790936][ T1140] syz_tun: tun_net_xmit 106
[   37.877208][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   37.974799][ T1165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.983350][ T1165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.992825][ T1165] futex_wake_op: syz.3.233 tries to shift op by 144; fix this program
[   38.088541][ T1140] syz_tun: tun_net_xmit 106
[   38.138487][  T627] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   38.244267][ T1140] usb 3-1: USB disconnect, device number 8
[   38.251181][ T1140] usblp0: removed
[   38.281349][ T1167] input: syz0 as /devices/virtual/input/input9
[   38.290460][  T627] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   38.302090][  T627] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   38.311948][  T627] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   38.326439][  T627] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   38.335696][  T627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   38.343924][  T627] usb 1-1: Product: syz
[   38.348355][  T627] usb 1-1: Manufacturer: syz
[   38.353126][  T627] usb 1-1: SerialNumber: syz
[   38.361088][ T1167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.523433][   T36] audit: type=1400 audit(1750965237.170:304): avc:  denied  { nlmsg_write } for  pid=1175 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   38.562553][  T627] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   38.824010][  T627] usb 1-1: USB disconnect, device number 9
[   38.830383][  T627] usblp0: removed
[   38.969744][   T36] audit: type=1400 audit(1750965237.620:305): avc:  denied  { bind } for  pid=1178 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.970128][ T1179] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   39.022834][   T36] audit: type=1400 audit(1750965237.670:306): avc:  denied  { ioctl } for  pid=1189 comm="syz.1.241" path="socket:[9634]" dev="sockfs" ino=9634 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.057875][ T1193] =======================================================
[   39.057875][ T1193] WARNING: The mand mount option has been deprecated and
[   39.057875][ T1193]          and is ignored by this kernel. Remove the mand
[   39.057875][ T1193]          option from the mount to silence this warning.
[   39.057875][ T1193] =======================================================
[   39.162466][ T1195] fuse: Unknown parameter 'g��{A%<'
[   39.218750][   T36] audit: type=1400 audit(1750965237.870:307): avc:  denied  { accept } for  pid=1196 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.219078][ T1197] rust_binder: Write failure EINVAL in pid:182
[   39.247022][ T1201] random: crng reseeded on system resumption
[   39.328263][   T36] audit: type=1400 audit(1750965237.970:308): avc:  denied  { map } for  pid=1200 comm="syz.1.244" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   39.351498][   T36] audit: type=1400 audit(1750965237.970:309): avc:  denied  { execute } for  pid=1200 comm="syz.1.244" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   39.391018][ T1208] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   39.399848][   T36] audit: type=1400 audit(1750965238.040:310): avc:  denied  { connect } for  pid=1206 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.434124][ T1213] rust_binder: Write failure EINVAL in pid:198
[   39.678590][  T820] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110
[   39.694829][  T820] asix 4-1:0.0: probe with driver asix failed with error -110
[   39.715443][ T1226] can0: slcan on ptm0.
[   39.958483][  T627] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   40.109544][  T627] usb 2-1: config 0 has no interfaces?
[   40.116282][  T627] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[   40.125407][  T627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.133411][  T627] usb 2-1: Product: syz
[   40.137610][  T627] usb 2-1: Manufacturer: syz
[   40.142215][  T627] usb 2-1: SerialNumber: syz
[   40.147491][  T627] usb 2-1: config 0 descriptor??
[   40.345286][ T1243] netlink: 'syz.0.254': attribute type 15 has an invalid length.
[   40.354349][  T627] usb 2-1: USB disconnect, device number 11
[   40.389452][ T1226] can0 (unregistered): slcan off ptm0.
[   40.400252][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   40.400268][   T36] audit: type=1400 audit(1750965239.050:314): avc:  denied  { getopt } for  pid=1247 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   40.435697][ T1249] rust_binder: Error while translating object.
[   40.435797][ T1249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.448515][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207
[   40.519942][   T36] audit: type=1400 audit(1750965239.170:315): avc:  denied  { read } for  pid=1269 comm="syz.0.259" lport=38967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.548937][ T1274] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   40.574033][ T1281] rust_binder: Write failure EINVAL in pid:217
[   40.582311][ T1281] rust_binder: Read failure Err(EAGAIN) in pid:217
[   40.609744][   T36] audit: type=1400 audit(1750965239.260:316): avc:  denied  { create } for  pid=1286 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   40.815977][   T36] audit: type=1400 audit(1750965239.460:317): avc:  denied  { write } for  pid=1307 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.839411][   T36] audit: type=1400 audit(1750965239.490:318): avc:  denied  { create } for  pid=1310 comm="syz.3.267" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   40.860125][   T36] audit: type=1400 audit(1750965239.490:319): avc:  denied  { rename } for  pid=1310 comm="syz.3.267" name="file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   40.882615][   T36] audit: type=1400 audit(1750965239.490:320): avc:  denied  { map } for  pid=1310 comm="syz.3.267" path="/76" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   40.952666][  T627] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   40.960675][  T627] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   40.986436][ T1327] fido_id[1327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   41.077047][ T1334] can0: slcan on ptm0.
[   41.328477][   T64] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   41.479532][   T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.489679][   T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.499225][   T64] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.508302][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.516377][   T64] usb 2-1: SerialNumber: syz
[   41.526494][   T36] audit: type=1400 audit(1750965240.170:321): avc:  denied  { create } for  pid=1350 comm="syz.0.277" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   41.545682][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194
[   41.551487][ T1353] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   41.556625][   T36] audit: type=1400 audit(1750965240.170:322): avc:  denied  { mounton } for  pid=1350 comm="syz.0.277" path="/62/file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   41.591902][   T36] audit: type=1400 audit(1750965240.170:323): avc:  denied  { mount } for  pid=1350 comm="syz.0.277" name="/" dev="pstore" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   41.714398][ T1358] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.730611][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.747250][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.752295][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.755154][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.763065][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.770774][ T1370] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.777435][ T1371] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.784016][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:242
[   41.827915][   T64] usb 2-1: 0:2 : does not exist
[   41.842425][ T1376] SELinux: failed to load policy
[   41.847439][   T64] usb 2-1: unit 5: unexpected type 0x09
[   41.848976][ T1376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.284'.
[   41.854605][   T64] usb 2-1: USB disconnect, device number 12
[   41.870502][  T519] udevd[519]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   41.939381][ T1334] can0 (unregistered): slcan off ptm0.
[   42.007296][ T1397] input: syz1 as /devices/virtual/input/input12
[   42.135554][ T1421] SELinux:  policydb version -108398774 does not match my version range 15-33
[   42.144458][ T1421] SELinux: failed to load policy
[   42.173358][ T1425] rust_binder: Write failure EFAULT in pid:257
[   42.216793][ T1430] rust_binder: Write failure EINVAL in pid:262
[   42.368485][   T64] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   42.463739][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'.
[   42.474607][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[   42.529528][   T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.539689][   T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.550585][   T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   42.560324][   T64] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   42.570151][   T64] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   42.584289][   T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   42.593380][   T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.601367][   T64] usb 1-1: Product: syz
[   42.605538][   T64] usb 1-1: Manufacturer: syz
[   42.610152][   T64] usb 1-1: SerialNumber: syz
[   43.198289][ T1478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1478 comm=syz.3.308
[   43.238331][ T1485] fuseblk: Bad value for 'fd'
[   43.617715][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.626230][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.634816][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.643419][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.652621][   T64] cdc_mbim 1-1:1.0: bind() failure
[   43.659457][   T64] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[   43.667598][   T64] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[   43.677258][   T64] usb 1-1: USB disconnect, device number 10
[   44.478489][ T1435] Bluetooth: hci0: command 0x1003 tx timeout
[   44.478489][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   44.848490][   T64] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   44.998474][   T64] usb 2-1: Using ep0 maxpacket: 16
[   45.004700][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.015636][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.025389][   T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[   45.034449][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.042944][   T64] usb 2-1: config 0 descriptor??
[   45.307766][ T1549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'.
[   45.459021][   T64] apple 0003:05AC:024B.0007: unknown main item tag 0x6
[   45.465934][   T64] apple 0003:05AC:024B.0007: ignoring exceeding usage max
[   45.474702][   T64] apple 0003:05AC:024B.0007: invalid report_size 18680
[   45.481722][   T64] apple 0003:05AC:024B.0007: item 0 2 1 7 parsing failed
[   45.488989][   T64] apple 0003:05AC:024B.0007: parse failed
[   45.494761][   T64] apple 0003:05AC:024B.0007: probe with driver apple failed with error -22
[   45.730554][   T64] usb 2-1: USB disconnect, device number 13
[   45.738458][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   45.738472][   T36] audit: type=1326 audit(1750965244.380:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.798456][   T36] audit: type=1326 audit(1750965244.380:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.827389][   T36] audit: type=1326 audit(1750965244.380:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.854061][   T36] audit: type=1326 audit(1750965244.380:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.892960][   T36] audit: type=1326 audit(1750965244.380:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.938465][   T36] audit: type=1326 audit(1750965244.380:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   45.978455][   T36] audit: type=1326 audit(1750965244.380:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   46.008452][   T36] audit: type=1326 audit(1750965244.380:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   46.031903][   T36] audit: type=1326 audit(1750965244.380:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   46.055315][   T36] audit: type=1326 audit(1750965244.380:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9018e929 code=0x7fc00000
[   46.281424][ T1560] can0: slcan on ptm0.
[   46.334149][ T1565] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   46.367774][ T1576] netlink: 76 bytes leftover after parsing attributes in process `syz.3.341'.
[   46.455575][ T1595] netlink: 176 bytes leftover after parsing attributes in process `syz.0.345'.
[   46.477096][ T1600] binder: Bad value for 'stats'
[   46.528551][   T64] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   46.679473][   T64] usb 2-1: config 0 has no interfaces?
[   46.686212][   T64] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[   46.695284][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.703288][   T64] usb 2-1: Product: syz
[   46.707532][   T64] usb 2-1: Manufacturer: syz
[   46.712142][   T64] usb 2-1: SerialNumber: syz
[   46.717196][   T64] usb 2-1: config 0 descriptor??
[   46.758514][   T31] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[   46.908492][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   46.924606][   T64] usb 2-1: USB disconnect, device number 14
[   46.968878][ T1560] can0 (unregistered): slcan off ptm0.
[   47.048509][   T31] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[   47.198469][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   47.203869][   T31] usb usb1-port1: attempt power cycle
[   47.453598][ T1650] 9pnet_fd: Insufficient options for proto=fd
[   47.548502][   T31] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[   47.568085][ T1668] /dev/rnullb0: Can't lookup blockdev
[   47.568830][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   47.708493][   T31] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[   47.720998][ T1675] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.728511][   T64] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   47.728844][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   47.747851][   T31] usb usb1-port1: unable to enumerate USB device
[   47.849864][ T1679] rust_binder: Error in use_page_slow: ESRCH
[   47.849882][ T1679] rust_binder: use_range failure ESRCH
[   47.855867][ T1679] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   47.858482][   T64] usb 2-1: device descriptor read/64, error -71
[   47.861347][ T1679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   47.875544][ T1679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208
[   47.911524][ T1682] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.118498][   T64] usb 2-1: device descriptor read/64, error -71
[   48.278492][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   48.368546][   T64] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   48.406678][ T1692] netlink: 'syz.3.364': attribute type 64 has an invalid length.
[   48.414567][ T1692] netlink: 5 bytes leftover after parsing attributes in process `syz.3.364'.
[   48.438472][   T31] usb 3-1: Using ep0 maxpacket: 16
[   48.444619][   T31] usb 3-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config
[   48.454907][   T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   48.464532][   T31] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[   48.473581][   T31] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[   48.481683][   T31] usb 3-1: Manufacturer: syz
[   48.486793][   T31] usb 3-1: config 0 descriptor??
[   48.498476][   T64] usb 2-1: device descriptor read/64, error -71
[   48.738480][   T64] usb 2-1: device descriptor read/64, error -71
[   48.749006][ T1693] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.363'.
[   48.848576][   T64] usb usb2-port1: attempt power cycle
[   49.188508][   T64] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   49.209511][   T64] usb 2-1: device descriptor read/8, error -71
[   49.339438][   T64] usb 2-1: device descriptor read/8, error -71
[   49.578501][   T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   49.600205][   T64] usb 2-1: device descriptor read/8, error -71
[   49.732706][   T64] usb 2-1: device descriptor read/8, error -71
[   49.848619][   T64] usb usb2-port1: unable to enumerate USB device
[   49.868511][  T627] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[   50.019623][  T627] usb 1-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[   50.029970][  T627] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   50.043060][  T627] usb 1-1: config 1 interface 0 has no altsetting 0
[   50.049681][  T627] usb 1-1: New USB device found, idVendor=7a25, idProduct=008b, bcdDevice= 0.00
[   50.058734][  T627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.270988][ T1718] input: syz1 as /devices/virtual/input/input15
[   50.278068][ T1718] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   50.349994][  T627] usb 1-1: string descriptor 0 read error: -71
[   50.359022][  T627] usb 1-1: USB disconnect, device number 15
[   50.534116][ T1742] binder: Bad value for 'max'
[   50.564724][ T1748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[   50.888505][  T812] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   50.931456][ T1754] binder: Unknown parameter '��o����b��Pz�$����A��q�G�̀�s��az{W"�@�4ZX[ʊ���9�Y�pbl��M��g���z����/4��B���o����I2�vS��*
���}�g�Jc�Gm��T����y�C�~�}D'
[   51.031115][   T64] usb 3-1: USB disconnect, device number 9
[   51.044393][ T1760] rust_binder: Error while translating object.
[   51.044426][ T1760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.048467][  T812] usb 2-1: Using ep0 maxpacket: 16
[   51.050890][ T1760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221
[   51.062577][  T812] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   51.083568][  T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.091592][  T812] usb 2-1: Product: syz
[   51.095782][  T812] usb 2-1: Manufacturer: syz
[   51.100437][  T812] usb 2-1: SerialNumber: syz
[   51.106829][  T812] r8152-cfgselector 2-1: Unknown version 0x0000
[   51.113117][  T812] r8152-cfgselector 2-1: config 0 descriptor??
[   51.208454][  T627] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   51.223200][ T1763] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   51.230167][ T1763] netlink: 'syz.2.391': attribute type 4 has an invalid length.
[   51.232919][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[   51.269041][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[   51.279220][ T1770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'.
[   51.320480][  T812] r8152-cfgselector 2-1: Needed 1 retries to read version
[   51.327601][  T812] r8152-cfgselector 2-1: Unknown version 0x0000
[   51.334075][  T812] r8152-cfgselector 2-1: bad CDC descriptors
[   51.348488][  T627] usb 1-1: device descriptor read/64, error -71
[   51.523683][  T812] r8152-cfgselector 2-1: USB disconnect, device number 19
[   51.588494][  T627] usb 1-1: device descriptor read/64, error -71
[   51.828491][  T627] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   51.958478][  T627] usb 1-1: device descriptor read/64, error -71
[   52.198494][  T627] usb 1-1: device descriptor read/64, error -71
[   52.308546][  T627] usb usb1-port1: attempt power cycle
[   52.318494][  T812] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[   52.468478][  T812] usb 2-1: Invalid ep0 maxpacket: 16
[   52.598488][  T812] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[   52.649248][  T627] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   52.671689][  T627] usb 1-1: device descriptor read/8, error -71
[   52.748501][  T812] usb 2-1: Invalid ep0 maxpacket: 16
[   52.753930][  T812] usb usb2-port1: attempt power cycle
[   52.799616][  T627] usb 1-1: device descriptor read/8, error -71
[   53.038513][  T627] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   53.059550][  T627] usb 1-1: device descriptor read/8, error -71
[   53.098507][  T812] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[   53.118823][  T812] usb 2-1: Invalid ep0 maxpacket: 16
[   53.156193][ T1822] tmpfs: Unknown parameter 'usrquota'
[   53.189552][  T627] usb 1-1: device descriptor read/8, error -71
[   53.248489][  T812] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[   53.268801][  T812] usb 2-1: Invalid ep0 maxpacket: 16
[   53.274155][  T812] usb usb2-port1: unable to enumerate USB device
[   53.280906][ T1435] Bluetooth: hci0: command 0x1003 tx timeout
[   53.281152][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   53.300874][  T627] usb usb1-port1: unable to enumerate USB device
[   53.578492][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   53.729506][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.740456][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.750210][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   53.763110][   T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   53.772207][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.780592][   T31] usb 3-1: config 0 descriptor??
[   54.033537][ T1839] rust_binder: Write failure EFAULT in pid:286
[   54.065436][   T36] kauditd_printk_skb: 1698 callbacks suppressed
[   54.065455][   T36] audit: type=1400 audit(1750965252.710:2047): avc:  denied  { checkpoint_restore } for  pid=1844 comm="syz.0.411" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   54.132381][   T36] audit: type=1400 audit(1750965252.780:2048): avc:  denied  { mounton } for  pid=1851 comm="syz.0.414" path="/selinux/access" dev="selinuxfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[   54.642610][ T1870] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   54.701896][ T1878] overlayfs: failed to clone lowerpath
[   54.707899][ T1878] cgroup: Unknown subsys name 'rdma'
[   54.714636][ T1878] syz.3.424 (1878): attempted to duplicate a private mapping with mremap.  This is not supported.
[   54.733011][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   54.743134][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   54.759124][   T31] usb 3-1: USB disconnect, device number 10
[   54.776514][   T36] audit: type=1400 audit(1750965253.420:2049): avc:  denied  { bpf } for  pid=1882 comm="syz.2.426" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   54.880817][   T36] audit: type=1400 audit(1750965253.530:2050): avc:  denied  { listen } for  pid=1887 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.952065][   T36] audit: type=1400 audit(1750965253.600:2051): avc:  denied  { accept } for  pid=1887 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.973412][ T1888] rust_binder: Error while translating object.
[   54.973438][ T1888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.979646][ T1888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238
[   54.990108][ T1889] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.133553][ T1902] binder: Bad value for 'stats'
[   55.164390][ T1907] pim6reg1: entered promiscuous mode
[   55.165718][ T1909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:314
[   55.169906][ T1907] pim6reg1: entered allmulticast mode
[   55.190968][   T36] audit: type=1400 audit(1750965253.840:2052): avc:  denied  { ioctl } for  pid=1908 comm="syz.0.433" path="socket:[12184]" dev="sockfs" ino=12184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   55.201603][ T1909] SELinux:  policydb string length 1953853298 does not match expected length 8
[   55.238509][ T1909] SELinux: failed to load policy
[   55.281562][   T36] audit: type=1400 audit(1750965253.930:2053): avc:  denied  { bind } for  pid=1919 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   55.314990][   T36] audit: type=1400 audit(1750965253.940:2054): avc:  denied  { setopt } for  pid=1919 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   55.392763][   T36] audit: type=1400 audit(1750965254.040:2055): avc:  denied  { map } for  pid=1930 comm="syz.0.441" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   55.509494][ T1940] binder: Unknown parameter 'defcontext01777777777777777777777'
[   55.679414][ T1962] rust_binder: Write failure EFAULT in pid:265
[   55.728977][   T36] audit: type=1400 audit(1750965254.380:2056): avc:  denied  { map } for  pid=1965 comm="syz.2.453" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   55.765951][ T1971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272
[   55.784931][ T1976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   55.788489][  T812] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   55.794362][ T1976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:277
[   55.811422][ T1976] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   55.820694][ T1976] rust_binder: Read failure Err(EFAULT) in pid:277
[   55.842087][ T1978] rust_binder: Write failure EFAULT in pid:279
[   55.908783][ T1981] binder: Bad value for 'stats'
[   55.918481][   T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   55.948478][  T812] usb 2-1: Using ep0 maxpacket: 16
[   55.959470][  T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.970745][  T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.980554][  T812] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[   55.984305][ T1984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284
[   55.989737][  T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.018682][  T812] usb 2-1: config 0 descriptor??
[   56.042858][ T1811] Bluetooth: hci0: Frame reassembly failed (-84)
[   56.089620][   T31] usb 1-1: config 0 has no interfaces?
[   56.096568][   T31] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[   56.105656][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.113663][   T31] usb 1-1: Product: syz
[   56.117828][   T31] usb 1-1: Manufacturer: syz
[   56.122450][   T31] usb 1-1: SerialNumber: syz
[   56.127564][   T31] usb 1-1: config 0 descriptor??
[   56.379982][   T31] usb 1-1: USB disconnect, device number 20
[   56.426585][  T812] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[   56.626647][  T627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   56.634685][  T627] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   56.646607][  T812] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -71
[   56.651282][ T2011] fido_id[2011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   56.657594][  T812] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -71
[   56.678822][  T812] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4
[   56.687584][  T812] playstation 0003:054C:05C4.0008: Failed to create dualshock4.
[   56.695762][  T812] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -71
[   56.707528][  T812] usb 2-1: USB disconnect, device number 24
[   56.909809][ T2017] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   56.918136][ T2017] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   56.927153][ T2017] overlayfs: missing 'lowerdir'
[   56.935386][ T1817] Bluetooth: hci1: Frame reassembly failed (-84)
[   57.568500][  T627] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[   57.652151][ T2032] overlayfs: missing 'lowerdir'
[   57.658327][ T2033] overlayfs: missing 'lowerdir'
[   57.718839][  T627] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   57.727558][  T627] usb 2-1: unable to read config index 0 descriptor/start: -61
[   57.735160][  T627] usb 2-1: can't read configurations, error -61
[   57.868495][  T627] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[   58.018923][  T627] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   58.027691][  T627] usb 2-1: unable to read config index 0 descriptor/start: -61
[   58.035313][  T627] usb 2-1: can't read configurations, error -61
[   58.041687][  T627] usb usb2-port1: attempt power cycle
[   58.078484][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   58.078519][ T2018] Bluetooth: hci0: command 0x1003 tx timeout
[   58.110089][ T2041] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.378477][  T627] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[   58.409203][  T627] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   58.417909][  T627] usb 2-1: unable to read config index 0 descriptor/start: -61
[   58.425484][  T627] usb 2-1: can't read configurations, error -61
[   58.431792][  T812] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[   58.568504][  T627] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[   58.576038][  T812] usb 3-1: device descriptor read/64, error -71
[   58.599128][  T627] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   58.607875][  T627] usb 2-1: unable to read config index 0 descriptor/start: -61
[   58.615582][  T627] usb 2-1: can't read configurations, error -61
[   58.621993][  T627] usb usb2-port1: unable to enumerate USB device
[   58.818477][  T812] usb 3-1: device descriptor read/64, error -71
[   58.958498][ T1435] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   58.958511][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[   59.058512][  T812] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[   59.188475][  T812] usb 3-1: device descriptor read/64, error -71
[   59.228469][   T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   59.243288][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   59.243304][   T36] audit: type=1400 audit(1750965257.890:2061): avc:  denied  { getopt } for  pid=2059 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   59.243846][ T2060] 9pnet: Could not find request transport: 43���&�=0x0000000000000004
[   59.332788][ T2066] netlink: 104 bytes leftover after parsing attributes in process `syz.3.486'.
[   59.367988][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'.
[   59.378582][   T31] usb 1-1: Using ep0 maxpacket: 32
[   59.384951][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.395860][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.405625][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   59.414716][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.423537][   T31] usb 1-1: config 0 descriptor??
[   59.430295][   T31] hub 1-1:0.0: USB hub found
[   59.438464][  T812] usb 3-1: device descriptor read/64, error -71
[   59.463752][ T2087] /dev/rnullb0: Can't lookup blockdev
[   59.470010][ T2087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.495'.
[   59.478920][ T2087] netlink: 43 bytes leftover after parsing attributes in process `syz.3.495'.
[   59.487946][ T2087] netlink: 'syz.3.495': attribute type 6 has an invalid length.
[   59.495791][ T2087] netlink: 'syz.3.495': attribute type 5 has an invalid length.
[   59.503457][ T2087] netlink: 43 bytes leftover after parsing attributes in process `syz.3.495'.
[   59.550111][  T812] usb usb3-port1: attempt power cycle
[   59.553422][   T36] audit: type=1400 audit(1750965258.200:2062): avc:  denied  { setattr } for  pid=2086 comm="syz.3.495" name="" dev="pipefs" ino=2890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   59.630454][   T31] hub 1-1:0.0: 1 port detected
[   59.637312][ T2088] tmpfs: Bad value for 'nr_inodes'
[   59.637312][ T2089] tmpfs: Bad value for 'nr_inodes'
[   59.639552][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.656060][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.667125][   T31] hub 1-1:0.0: hub_hub_status failed (err = -71)
[   59.673658][   T31] hub 1-1:0.0: config failed, can't get hub status (err -71)
[   59.685346][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   59.691542][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   59.728907][   T31] usb 1-1: USB disconnect, device number 21
[   59.888488][  T812] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[   59.909498][  T812] usb 3-1: device descriptor read/8, error -71
[   60.039535][  T812] usb 3-1: device descriptor read/8, error -71
[   60.278479][  T812] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[   60.299979][  T812] usb 3-1: device descriptor read/8, error -71
[   60.429459][  T812] usb 3-1: device descriptor read/8, error -71
[   60.539202][  T812] usb usb3-port1: unable to enumerate USB device
[   60.615163][ T2128] netlink: 'syz.0.508': attribute type 4 has an invalid length.
[   60.644333][   T36] audit: type=1326 audit(1750965259.290:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2129 comm="syz.0.509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b98e929 code=0x0
[   61.518475][   T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   61.619297][   T36] audit: type=1400 audit(1750965260.270:2064): avc:  denied  { ioctl } for  pid=2165 comm="syz.0.522" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   61.645682][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'.
[   61.646990][   T36] audit: type=1400 audit(1750965260.270:2065): avc:  denied  { ioctl } for  pid=2165 comm="syz.0.522" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   61.685040][ T2170] exFAT-fs (rnullb0): invalid boot record signature
[   61.691721][ T2170] exFAT-fs (rnullb0): failed to read boot sector
[   61.698089][ T2170] exFAT-fs (rnullb0): failed to recognize exfat type
[   61.704849][   T36] audit: type=1400 audit(1750965260.330:2066): avc:  denied  { connect } for  pid=2169 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.736922][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   61.751704][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.760889][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   61.768996][   T31] usb 3-1: SerialNumber: syz
[   62.080909][ T2186] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   62.088353][ T2186] rust_binder: Write failure EINVAL in pid:302
[   62.307153][ T2194] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   62.324224][   T36] audit: type=1400 audit(1750965260.970:2067): avc:  denied  { relabelto } for  pid=2193 comm="syz.0.534" name="127" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   62.339933][ T2199] binder: Unknown parameter 'defcontext01777777777777777777777'
[   62.358618][   T36] audit: type=1400 audit(1750965260.970:2068): avc:  denied  { associate } for  pid=2193 comm="syz.0.534" name="127" dev="tmpfs" ino=721 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[   62.395095][   T36] audit: type=1400 audit(1750965260.970:2069): avc:  denied  { write } for  pid=288 comm="syz-executor" name="127" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   62.398793][   T31] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   62.496108][   T36] audit: type=1400 audit(1750965260.970:2070): avc:  denied  { remove_name } for  pid=288 comm="syz-executor" name="binderfs" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   62.551228][ T2206] 9pnet_fd: Insufficient options for proto=fd
[   62.778947][ T2238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:314
[   62.797734][ T2135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.826568][ T2135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.828829][ T2247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   62.839588][ T2247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:320
[   62.992250][ T2266] syz.0.554 uses obsolete (PF_INET,SOCK_PACKET)
[   63.045652][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.045679][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.052353][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.054203][   T31] usb 3-1: USB disconnect, device number 15
[   63.059214][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.072004][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.077563][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.078071][   T31] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   63.084390][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.101355][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.106611][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.128461][  T812] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[   63.279420][  T812] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   63.290514][  T812] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   63.301591][  T812] usb 2-1: config 0 interface 0 has no altsetting 0
[   63.308200][  T812] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   63.317517][  T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.327752][  T812] usb 2-1: config 0 descriptor??
[   63.333164][ T2255] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[   63.408477][  T820] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   63.558572][  T820] usb 1-1: Using ep0 maxpacket: 8
[   63.565612][  T820] usb 1-1: config 1 interface 0 has no altsetting 0
[   63.574498][  T820] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40
[   63.583755][  T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.591966][  T820] usb 1-1: Product: 䶔噬ﱴፙ粋ி࠾뜹ဩ䥢番⎵蕎얋ﾒꚒ皦ꨨၧ᫓㤝꯱枏釺唯轐㟮윿闕ᚰﶫ銦ᛸ岷	
[   63.606259][  T820] usb 1-1: Manufacturer: 퀩쭇〯鴠쵧༬꽿㷴߇铠踳厁쌞ꎜ㈵碴㘷愘Ģꗩ漡⩆권꾨陉帥ﭨ旗χⴘ⨝蛡쯉䰯♥耀ኡ鋧섂ட鵺狘밀ꀯ疻倐㵑โ忀鷢∗昹䷫ퟑ뮵縳㻿좥限珏ݢ礨咐湧꘺씥쎇꼒瓲휕硾䣼ఛ滮ᔣ狒沈㙧颺蝕殣㭁处
[   63.635088][  T820] usb 1-1: SerialNumber: ᐉ
[   63.659042][ T2326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:308
[   63.671806][ T2328] rust_binder: Error while translating object.
[   63.681055][ T2328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   63.687291][ T2328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310
[   63.709606][ T2330] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.720767][ T2330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312
[   63.730517][ T2330] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   63.850093][ T2284] rust_binder: Error in use_page_slow: ESRCH
[   63.850116][ T2284] rust_binder: use_range failure ESRCH
[   63.861629][ T2284] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   63.861649][ T2284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   63.869523][ T2284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:408
[   63.878995][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.888074][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.896469][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.903184][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.917708][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.917725][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.925840][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.932485][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.944446][  T812] usbhid 2-1:0.0: can't add hid device: -71
[   63.948469][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.953272][  T812] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   63.961103][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.970597][  T812] usb 2-1: USB disconnect, device number 29
[   63.977785][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.982292][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   63.989771][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   63.996816][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.004468][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.011210][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.019108][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.025684][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.033639][  T627] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   64.047851][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.047870][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.062432][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.070520][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.070630][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.077132][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.085238][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.091840][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.099891][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.106463][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.114557][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.121099][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.129264][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.135831][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.150360][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.150377][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.158771][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.165407][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.173694][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.180452][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.194901][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.194916][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.210341][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.210358][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.218633][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.225202][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.233327][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.239892][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.247952][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.248966][  T627] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   64.254601][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.264549][  T627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.271696][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.278180][  T627] usb 3-1: Product: syz
[   64.286083][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.294196][  T627] usb 3-1: Manufacturer: syz
[   64.298369][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.304896][  T627] usb 3-1: SerialNumber: syz
[   64.309445][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.318342][  T627] usb 3-1: config 0 descriptor??
[   64.328716][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.333487][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.341524][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.348068][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.356094][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.362627][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.370645][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.377167][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.385185][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.391704][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.399863][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.406391][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.414404][ T2284] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   64.420926][ T2284] rust_binder: Read failure Err(EFAULT) in pid:408
[   64.432367][  T820] usbhid 1-1:1.0: can't add hid device: -71
[   64.444827][  T820] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   64.457450][  T820] usb 1-1: USB disconnect, device number 22
[   64.537005][  T627] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   64.547139][  T627] asix 3-1:0.0: probe with driver asix failed with error -71
[   64.556947][  T627] usb 3-1: USB disconnect, device number 16
[   64.996387][ T2348] SELinux:  Context /dev/kvm is not valid (left unmapped).
[   64.996398][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   64.996411][   T36] audit: type=1400 audit(1750965263.640:2074): avc:  denied  { relabelfrom } for  pid=2347 comm="syz.1.572" name="" dev="pipefs" ino=15002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   65.037568][   T36] audit: type=1400 audit(1750965263.650:2075): avc:  denied  { relabelto } for  pid=2347 comm="syz.1.572" name="" dev="pipefs" ino=15002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/dev/kvm"
[   65.188697][  T820] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[   65.210700][   T36] audit: type=1400 audit(1750965263.860:2076): avc:  denied  { bind } for  pid=2359 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.230060][   T36] audit: type=1400 audit(1750965263.860:2077): avc:  denied  { name_bind } for  pid=2359 comm="syz.1.576" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   65.250925][   T36] audit: type=1400 audit(1750965263.860:2078): avc:  denied  { node_bind } for  pid=2359 comm="syz.1.576" saddr=172.30.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   65.328477][   T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   65.350236][  T820] usb 1-1: config 9 has an invalid interface number: 51 but max is 0
[   65.358553][  T820] usb 1-1: config 9 has no interface number 0
[   65.366722][  T820] usb 1-1: string descriptor 0 read error: -22
[   65.372937][  T820] usb 1-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12
[   65.381981][  T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.478464][   T31] usb 3-1: Using ep0 maxpacket: 32
[   65.484826][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.495802][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.505561][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   65.514618][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.523185][   T31] usb 3-1: config 0 descriptor??
[   65.529041][   T31] hub 3-1:0.0: USB hub found
[   65.728963][   T31] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   65.747874][  T820] usb 1-1: USB disconnect, device number 23
[   66.003539][ T2384] 9pnet_fd: Insufficient options for proto=fd
[   66.003543][ T2383] 9pnet_fd: Insufficient options for proto=fd
[   66.132318][   T31] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[   66.169670][   T31] usb 3-1: USB disconnect, device number 17
[   66.184778][ T2414] input: syz1 as /devices/virtual/input/input17
[   66.218958][   T36] audit: type=1400 audit(1750965264.860:2079): avc:  denied  { setcurrent } for  pid=2417 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   66.241216][ T2418] 9pnet_fd: Insufficient options for proto=fd
[   66.248947][ T2418] /dev/loop0: Can't open blockdev
[   66.255238][ T2422] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.255573][ T2421] fuse: Bad value for 'group_id'
[   66.273914][ T2422] fuse: Bad value for 'group_id'
[   66.284592][ T2422] fuse: Bad value for 'group_id'
[   66.290467][ T2424] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   66.299885][ T2421] fuse: Bad value for 'group_id'
[   66.304904][ T2424] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   66.314994][ T2424] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   66.337531][ T2424] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   66.365359][ T2434] input: syz0 as /devices/virtual/input/input18
[   66.386835][   T36] audit: type=1400 audit(1750965265.030:2080): avc:  denied  { create } for  pid=2435 comm="syz.1.600" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   66.469505][ T2452] rust_binder: Write failure EINVAL in pid:428
[   66.507624][ T2461] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.514912][ T2461] rust_binder: Error in use_page_slow: ESRCH
[   66.521390][ T2461] rust_binder: use_range failure ESRCH
[   66.527415][ T2461] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   66.532894][ T2461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   66.541018][ T2461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:434
[   66.562808][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.576158][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.584099][ T2463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:436
[   66.621685][ T2471] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000140046307 not found
[   66.639190][ T2471] rust_binder: Write failure EINVAL in pid:438
[   66.670291][   T36] audit: type=1400 audit(1750965265.320:2081): avc:  denied  { mounton } for  pid=2479 comm="syz.0.616" path="/147/file0" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   66.728988][ T2483] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.731210][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.737768][ T2485] rust_binder: Error in use_page_slow: ESRCH
[   66.744245][ T2485] rust_binder: use_range failure ESRCH
[   66.750296][ T2485] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   66.755799][ T2485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   66.763680][ T2485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:447
[   66.840276][   T36] audit: type=1400 audit(1750965265.490:2082): avc:  denied  { setopt } for  pid=2490 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   66.849432][  T627] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   66.869680][   T36] audit: type=1400 audit(1750965265.490:2083): avc:  denied  { read } for  pid=2490 comm="syz.0.619" path="socket:[15650]" dev="sockfs" ino=15650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   67.008493][  T627] usb 2-1: device descriptor read/64, error -71
[   67.037865][ T2493] bridge0: port 3(erspan0) entered blocking state
[   67.044396][ T2493] bridge0: port 3(erspan0) entered disabled state
[   67.050965][ T2493] erspan0: entered allmulticast mode
[   67.056518][ T2493] erspan0: entered promiscuous mode
[   67.061881][ T2493] bridge0: port 3(erspan0) entered blocking state
[   67.068280][ T2493] bridge0: port 3(erspan0) entered forwarding state
[   67.096050][ T2500] rust_binder: Write failure EFAULT in pid:463
[   67.096099][ T2501] rust_binder: Write failure EFAULT in pid:463
[   67.129515][ T2503] netlink: 'syz.3.623': attribute type 4 has an invalid length.
[   67.155128][ T2501] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.163814][ T2508] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.248483][  T627] usb 2-1: device descriptor read/64, error -71
[   67.488493][  T627] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   67.618469][  T627] usb 2-1: device descriptor read/64, error -71
[   67.687070][ T2523] netlink: 37 bytes leftover after parsing attributes in process `syz.3.629'.
[   67.858475][  T627] usb 2-1: device descriptor read/64, error -71
[   67.964654][ T2534] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.965051][ T2534] netlink: 'syz.0.633': attribute type 63 has an invalid length.
[   67.975800][  T627] usb usb2-port1: attempt power cycle
[   67.979365][ T2534] netlink: 5 bytes leftover after parsing attributes in process `syz.0.633'.
[   67.994780][ T2534] rust_binder: Error in use_page_slow: ESRCH
[   67.994795][ T2534] rust_binder: use_range failure ESRCH
[   68.000848][ T2534] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   68.006465][ T2534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   68.014493][ T2534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:471
[   68.040904][ T2539] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   68.099964][ T2541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2541 comm=syz.0.636
[   68.199584][ T2544] binder: Bad value for 'max'
[   68.328482][  T627] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   68.349421][  T627] usb 2-1: device descriptor read/8, error -71
[   68.479448][  T627] usb 2-1: device descriptor read/8, error -71
[   68.673063][ T2552] rust_binder: Write failure EFAULT in pid:480
[   68.673091][ T2551] rust_binder: Write failure EFAULT in pid:480
[   68.696943][ T2556] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.703391][ T2556] rust_binder: Error in use_page_slow: ESRCH
[   68.709856][ T2556] rust_binder: use_range failure ESRCH
[   68.715967][ T2556] rust_binder: Failed to allocate buffer. len:168, is_oneway:false
[   68.718599][  T627] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   68.728462][ T2556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   68.736906][ T2556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:485
[   68.746939][ T2558] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.749583][  T627] usb 2-1: device descriptor read/8, error -71
[   68.779387][ T2566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2566 comm=syz.3.645
[   68.791974][ T2566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=2566 comm=syz.3.645
[   68.804792][ T2566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=2566 comm=syz.3.645
[   68.856461][ T2583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2583 comm=syz.3.650
[   68.899614][  T627] usb 2-1: device descriptor read/8, error -71
[   68.907632][ T2595] overlayfs: failed to clone upperpath
[   69.008551][  T627] usb usb2-port1: unable to enumerate USB device
[   69.028496][  T820] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   69.168455][   T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   69.178543][  T820] usb 1-1: Using ep0 maxpacket: 8
[   69.184637][  T820] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.195553][  T820] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.205276][  T820] usb 1-1: config 0 interface 0 has no altsetting 0
[   69.211878][  T820] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[   69.220908][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.229391][  T820] usb 1-1: config 0 descriptor??
[   69.298464][   T31] usb 3-1: device descriptor read/64, error -71
[   69.436216][  T820] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0
[   69.443331][  T820] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0
[   69.450433][  T820] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0
[   69.457966][  T820] cypress 0003:04B4:BCA1.000B: hidraw0: USB HID v0.04 Device [HID 04b4:bca1] on usb-dummy_hcd.0-1/input0
[   69.538504][   T31] usb 3-1: device descriptor read/64, error -71
[   69.636511][  T812] usb 1-1: USB disconnect, device number 24
[   69.646869][ T2609] rust_binder: Error while translating object.
[   69.646890][ T2609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   69.654090][ T2609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380
[   69.778473][   T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   69.918841][   T31] usb 3-1: device descriptor read/64, error -71
[   70.147281][ T2626] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.158492][   T31] usb 3-1: device descriptor read/64, error -71
[   70.278552][   T31] usb usb3-port1: attempt power cycle
[   70.328215][ T2631] overlayfs: failed to clone upperpath
[   70.618481][   T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   70.639546][   T31] usb 3-1: device descriptor read/8, error -71
[   70.772136][   T31] usb 3-1: device descriptor read/8, error -71
[   70.834507][ T2659] rust_binder: Error while translating object.
[   70.834549][ T2659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.842256][ T2659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404
[   70.966186][ T2672] fuse: blksize only supported for fuseblk
[   70.983997][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   70.984011][   T36] audit: type=1400 audit(1750965269.630:2088): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   71.028464][   T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   71.037659][ T2682] overlayfs: failed to clone upperpath
[   71.067290][   T31] usb 3-1: device descriptor read/8, error -71
[   71.199652][   T31] usb 3-1: device descriptor read/8, error -71
[   71.288491][  T812] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   71.308548][   T31] usb usb3-port1: unable to enumerate USB device
[   71.438466][  T812] usb 1-1: Using ep0 maxpacket: 16
[   71.444678][  T812] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[   71.453092][  T812] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   71.461273][  T812] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   71.469502][  T812] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   71.477672][  T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   71.486574][  T812] usb 1-1: config 0 has no interface number 0
[   71.492693][  T812] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[   71.503786][  T812] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[   71.513612][  T812] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[   71.523459][  T812] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   71.536517][  T812] usb 1-1: config 0 interface 125 has no altsetting 0
[   71.543291][  T812] usb 1-1: config 0 interface 125 has no altsetting 2
[   71.551469][  T812] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   71.560569][  T812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.568566][  T812] usb 1-1: Product: syz
[   71.572757][  T812] usb 1-1: Manufacturer: syz
[   71.577325][  T812] usb 1-1: SerialNumber: syz
[   71.582514][  T812] usb 1-1: config 0 descriptor??
[   71.748531][  T812] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   71.878484][  T812] usb 3-1: device descriptor read/64, error -71
[   71.946548][ T2698] rust_binder: Error while translating object.
[   71.946576][ T2698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   71.952932][ T2698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349
[   71.973698][ T2700] batadv_slave_1: entered promiscuous mode
[   72.142120][ T2701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498
[   72.142148][ T2701] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   72.151350][ T2701] rust_binder: Read failure Err(EFAULT) in pid:498
[   72.328497][  T812] usb 3-1: device descriptor read/64, error -71
[   72.578481][  T812] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   72.728487][  T812] usb 3-1: Using ep0 maxpacket: 32
[   72.734732][  T812] usb 3-1: config 251 has an invalid interface number: 65 but max is 2
[   72.743068][  T812] usb 3-1: config 251 has an invalid interface number: 29 but max is 2
[   72.751343][  T812] usb 3-1: config 251 has an invalid interface number: 201 but max is 2
[   72.759733][  T812] usb 3-1: config 251 has an invalid descriptor of length 1, skipping remainder of the config
[   72.770014][  T812] usb 3-1: config 251 has no interface number 0
[   72.776239][  T812] usb 3-1: config 251 has no interface number 1
[   72.782519][  T812] usb 3-1: config 251 has no interface number 2
[   72.788803][  T812] usb 3-1: config 251 interface 65 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[   72.799868][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[   72.811071][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0xF has invalid wMaxPacketSize 0
[   72.821173][  T812] usb 3-1: config 251 interface 65 altsetting 16 has a duplicate endpoint with address 0xF, skipping
[   72.832073][  T812] usb 3-1: config 251 interface 65 altsetting 16 has a duplicate endpoint with address 0x2, skipping
[   72.842954][  T812] usb 3-1: config 251 interface 65 altsetting 16 has an endpoint descriptor with address 0x38, changing to 0x8
[   72.854719][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0x8 has invalid maxpacket 16751, setting to 1024
[   72.866122][  T812] usb 3-1: config 251 interface 65 altsetting 16 bulk endpoint 0x8 has invalid maxpacket 1024
[   72.876399][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0x6 has an invalid bInterval 79, changing to 7
[   72.887639][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0x6 has invalid wMaxPacketSize 0
[   72.897635][  T812] usb 3-1: config 251 interface 65 altsetting 16 has a duplicate endpoint with address 0x8, skipping
[   72.908537][  T812] usb 3-1: config 251 interface 65 altsetting 16 endpoint 0xE has invalid maxpacket 512, setting to 64
[   72.919604][  T812] usb 3-1: config 251 interface 65 altsetting 16 has a duplicate endpoint with address 0xE, skipping
[   72.930480][  T812] usb 3-1: config 251 interface 65 altsetting 16 has a duplicate endpoint with address 0x8, skipping
[   72.941354][  T812] usb 3-1: config 251 interface 65 altsetting 16 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[   72.954750][  T812] usb 3-1: config 251 interface 29 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[   72.965560][  T812] usb 3-1: config 251 interface 29 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[   72.976546][  T812] usb 3-1: config 251 interface 29 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   72.979148][   T36] audit: type=1400 audit(1750965271.620:2089): avc:  denied  { setopt } for  pid=2710 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.987548][  T812] usb 3-1: config 251 interface 29 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[   73.008653][ T2711] tmpfs: Bad value for 'uid'
[   73.017642][  T812] usb 3-1: config 251 interface 29 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[   73.017668][  T812] usb 3-1: config 251 interface 29 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[   73.017686][  T812] usb 3-1: config 251 interface 29 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[   73.017707][  T812] usb 3-1: config 251 interface 29 altsetting 6 endpoint 0xC has an invalid bInterval 227, changing to 11
[   73.017736][  T812] usb 3-1: config 251 interface 201 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   73.017761][  T812] usb 3-1: config 251 interface 65 has no altsetting 0
[   73.017779][  T812] usb 3-1: config 251 interface 29 has no altsetting 0
[   73.017796][  T812] usb 3-1: config 251 interface 201 has no altsetting 0
[   73.019922][  T812] usb 3-1: New USB device found, idVendor=10c4, idProduct=8477, bcdDevice=94.cc
[   73.022493][ T2711] tmpfs: Bad value for 'uid'
[   73.033315][  T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.122050][  T812] usb 3-1: Product: 䐊
[   73.126202][  T812] usb 3-1: Manufacturer: 敭頝ᤦ臒줹竃ሣꨤ꬈䑎沐늝巃썪ﷹ뢆漬쮐뛌ட쁑ㆳ꯰哵뫙ᓕᙏ嬂劀袉᪒쒪씈砩䷰섰魅쒝힡挴䳆熟攠㽪苐孁踠濓玴ꁫ㍕蜽外䩵¦ীﻷ鼟聶ῠ˱駱秐锪飠恂醦୏훫ヂ촁馟겟蔤ꥊ
[   73.153877][  T812] usb 3-1: SerialNumber: 甌쿛偢ḍ뒨秘뜴䦂⧋Ⰿ﹭雎㢙ṷ苤ⷦ酳듽᳇钸᱐풺ᔬ馌멩⃌䡌忰묱㓗व鿐ﺒᒝ썬柫袌シ휦⫚㭨䘴귉惬ﭩ鼙㗕옙ᵸ㞧甉栯߃᪢ਬ곽순
[   73.176223][ T2700] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   73.386542][ T2700] batadv_slave_1: left promiscuous mode
[   73.400213][  T812] usb 3-1: USB disconnect, device number 23
[   73.424228][ T2715] 9pnet_fd: Insufficient options for proto=fd
[   73.430597][ T2715] 9pnet_fd: Insufficient options for proto=fd
[   73.454876][   T36] audit: type=1400 audit(1750965272.100:2090): avc:  denied  { mount } for  pid=2718 comm="syz.1.698" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   73.478465][ T2719] bridge0: port 3(syz_tun) entered blocking state
[   73.478564][   T36] audit: type=1400 audit(1750965272.120:2091): avc:  denied  { read } for  pid=2718 comm="syz.1.698" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   73.484897][ T2719] bridge0: port 3(syz_tun) entered disabled state
[   73.484950][ T2719] syz_tun: entered allmulticast mode
[   73.517525][   T36] audit: type=1400 audit(1750965272.120:2092): avc:  denied  { open } for  pid=2718 comm="syz.1.698" path="/151/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   73.519795][ T2719] syz_tun: entered promiscuous mode
[   73.545629][ T2719] bridge0: port 3(syz_tun) entered blocking state
[   73.552048][ T2719] bridge0: port 3(syz_tun) entered forwarding state
[   73.563245][   T36] audit: type=1400 audit(1750965272.210:2093): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   73.583496][   T36] audit: type=1326 audit(1750965272.220:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2723 comm="syz.3.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f686b58e929 code=0x0
[   73.818463][  T627] usb 2-1: new low-speed USB device number 34 using dummy_hcd
[   73.962099][ T2737] /dev/loop0: Can't open blockdev
[   73.968182][   T36] audit: type=1400 audit(1750965272.610:2095): avc:  denied  { read write } for  pid=2736 comm="syz.2.704" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   73.969631][  T627] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   73.993068][   T36] audit: type=1400 audit(1750965272.610:2096): avc:  denied  { open } for  pid=2736 comm="syz.2.704" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   74.002211][  T627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.026622][   T36] audit: type=1400 audit(1750965272.620:2097): avc:  denied  { map } for  pid=2736 comm="syz.2.704" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   74.069513][  T627] usb 2-1: config 0 descriptor??
[   74.071708][   T31] usb 1-1: USB disconnect, device number 25
[   74.104700][ T2747] rust_binder: Write failure EFAULT in pid:368
[   74.338465][  T812] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   74.498454][  T812] usb 3-1: Using ep0 maxpacket: 16
[   74.504533][  T812] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   74.513261][  T812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.523371][  T812] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.532316][  T812] usb 3-1: config 1 has no interface number 1
[   74.538439][  T812] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   74.551270][  T812] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x73, changing to 0x3
[   74.562686][  T812] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x3 has invalid maxpacket 25965, setting to 64
[   74.574932][  T812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   74.584016][  T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.592019][  T812] usb 3-1: Product: syz
[   74.596194][  T812] usb 3-1: Manufacturer: syz
[   74.600795][  T812] usb 3-1: SerialNumber: syz
[   74.813296][  T812] usb 3-1: USB disconnect, device number 24
[   74.822102][  T519] udevd[519]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.968469][ T2793] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.968889][ T2793] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.976511][ T2793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:511
[   75.067140][ T2804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.308479][   T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   75.444001][ T2819] netlink: 176 bytes leftover after parsing attributes in process `syz.2.733'.
[   75.471203][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   75.489310][   T31] usb 1-1: config 6 has an invalid interface number: 70 but max is 0
[   75.497412][   T31] usb 1-1: config 6 has no interface number 0
[   75.510128][   T31] usb 1-1: config 6 interface 70 has no altsetting 0
[   75.519258][   T31] usb 1-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01
[   75.528359][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.536612][   T31] usb 1-1: Product: syz
[   75.543049][   T31] usb 1-1: Manufacturer: syz
[   75.548249][ T2826] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   75.556984][   T31] usb 1-1: SerialNumber: syz
[   75.616610][ T2836] __vm_enough_memory: pid: 2836, comm: syz.2.738, bytes: 70373039144960 not enough memory for the allocation
[   75.769816][ T2841] binder: Unknown parameter '����'
[   75.783536][ T2804] rust_binder: Error in use_page_slow: ESRCH
[   75.783574][ T2804] rust_binder: use_range failure ESRCH
[   75.798495][ T2804] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   75.804000][ T2804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   75.822070][ T2804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:520
[   75.846413][   T31] usb-storage 1-1:6.70: USB Mass Storage device detected
[   75.869281][   T31] usb-storage 1-1:6.70: device ignored
[   75.899945][   T31] usb 1-1: USB disconnect, device number 26
[   76.108478][  T812] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   76.149201][  T627] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   76.160288][  T627] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[   76.171265][  T627] asix 2-1:0.0: probe with driver asix failed with error -71
[   76.181071][  T627] usb 2-1: USB disconnect, device number 34
[   76.259587][  T812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.276732][  T812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   76.289651][  T812] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   76.298764][  T812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.307111][  T812] usb 3-1: config 0 descriptor??
[   76.426608][ T2851] cgroup: fork rejected by pids controller in /syz0
[   76.628472][  T627] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   76.715759][  T812] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   76.733437][  T812] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[   76.750973][  T812] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   76.798446][  T627] usb 1-1: Using ep0 maxpacket: 16
[   76.804569][  T627] usb 1-1: descriptor type invalid, skip
[   76.814345][  T627] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   76.833890][  T627] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   76.854071][  T627] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.870147][  T627] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   76.888440][  T627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.906563][  T627] usb 1-1: Product: syz
[   76.915806][  T627] usb 1-1: Manufacturer: syz
[   76.924850][   T31] usb 3-1: USB disconnect, device number 25
[   76.928440][  T627] usb 1-1: SerialNumber: syz
[   77.076431][ T2924] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   77.095291][ T2926] rust_binder: Error while translating object.
[   77.095313][ T2926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   77.101524][ T2926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433
[   77.120070][ T2929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:435
[   77.129253][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.138356][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.145259][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.151742][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.158219][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.164700][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.171191][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.177654][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.184157][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.190629][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.197095][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.203600][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.210083][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.216535][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.223070][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.229550][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.236049][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.242514][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.249038][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.255497][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.261983][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.268844][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.275327][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.282514][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.289002][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.295452][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.302184][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.308678][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.315144][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.321610][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.328079][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.334546][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.341024][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.347563][  T627] usb 1-1: 0:2 : does not exist
[   77.358964][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.358983][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.365452][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.373582][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.381167][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.394349][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.400836][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.407319][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.413797][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.420295][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.426758][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.433700][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.447726][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.454990][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.461612][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.469618][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.476752][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.483457][ T2931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2931 comm=syz.2.747
[   77.485231][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.503177][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.509748][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.516272][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.529776][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.536256][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.542958][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.549520][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.556046][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.564028][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.570673][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.577130][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.583685][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.590143][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.768453][  T627] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   77.908470][  T812] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[   77.938458][  T627] usb 3-1: Using ep0 maxpacket: 32
[   77.944754][  T627] usb 3-1: config 0 interface 0 has no altsetting 0
[   77.951504][  T627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   77.960599][  T627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.969965][  T627] usb 3-1: config 0 descriptor??
[   78.069516][  T812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.079267][  T812] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.099931][  T812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   78.109056][  T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.117053][  T812] usb 2-1: Product: syz
[   78.128927][  T812] usb 2-1: Manufacturer: syz
[   78.133539][  T812] usb 2-1: SerialNumber: syz
[   78.141837][  T812] hub 2-1:1.0: bad descriptor, ignoring hub
[   78.147774][  T812] hub 2-1:1.0: probe with driver hub failed with error -5
[   78.345888][ T2937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.356841][ T2937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.383141][  T627] wacom 0003:056A:0331.000D: hidraw0: USB HID v0.07 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
[   78.580363][   T31] usb 3-1: USB disconnect, device number 26
[   78.709228][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   78.709245][   T36] audit: type=1400 audit(1750965277.360:2103): avc:  denied  { create } for  pid=2950 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   78.738703][   T10] usb 2-1: USB disconnect, device number 35
[   79.028463][   T10] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[   79.098048][   T36] audit: type=1400 audit(1750965277.740:2104): avc:  denied  { read } for  pid=2952 comm="syz.2.755" path="socket:[18163]" dev="sockfs" ino=18163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.179477][   T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   79.190499][   T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   79.201343][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   79.208056][   T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   79.217133][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.226314][   T10] usb 2-1: config 0 descriptor??
[   79.231676][ T2943] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[   79.388453][  T812] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   79.514087][   T31] usb 1-1: USB disconnect, device number 27
[   79.540204][  T812] usb 3-1: unable to get BOS descriptor or descriptor too short
[   79.549450][  T812] usb 3-1: config 6 has an invalid interface number: 108 but max is 0
[   79.552487][ T2960] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   79.557639][  T812] usb 3-1: config 6 has no interface number 0
[   79.557667][  T812] usb 3-1: config 6 interface 108 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8
[   79.568738][ T2960] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   79.571651][  T812] usb 3-1: config 6 interface 108 has no altsetting 0
[   79.581701][ T2960] rust_binder: Read failure Err(EFAULT) in pid:591
[   79.591384][  T812] usb 3-1: New USB device found, idVendor=0403, idProduct=d070, bcdDevice=98.41
[   79.611861][  T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.619892][  T812] usb 3-1: Product: syz
[   79.624091][  T812] usb 3-1: Manufacturer: syz
[   79.628746][  T812] usb 3-1: SerialNumber: syz
[   79.634565][ T2954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   79.640881][   T10] holtek_mouse 0003:04D9:A067.000E: unknown main item tag 0x6
[   79.650270][   T10] holtek_mouse 0003:04D9:A067.000E: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0
[   79.794430][   T36] audit: type=1400 audit(1750965278.440:2105): avc:  denied  { mount } for  pid=2964 comm="syz.3.760" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   79.833377][   T36] audit: type=1400 audit(1750965278.480:2106): avc:  denied  { create } for  pid=2969 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   79.852985][ T2954] binder: Bad value for 'max'
[   79.859177][   T36] audit: type=1400 audit(1750965278.510:2107): avc:  denied  { ioctl } for  pid=2952 comm="syz.2.755" path="socket:[18163]" dev="sockfs" ino=18163 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.866911][   T10] usb 2-1: USB disconnect, device number 36
[   79.891234][ T2977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.891463][ T2977] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   79.905288][ T2977] rust_binder: Write failure EINVAL in pid:598
[   79.922984][ T2986] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82
[   79.990845][ T3000] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.997560][ T3000] rust_binder: Error in use_page_slow: ESRCH
[   80.004096][ T3000] rust_binder: use_range failure ESRCH
[   80.010208][ T3000] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   80.015720][ T3000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   80.023634][ T3000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:603
[   80.053129][ T3004] rust_binder: Write failure EFAULT in pid:607
[   80.075091][ T1809] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.079413][ T1811] Bluetooth: hci1: Frame reassembly failed (-84)
[   80.094425][ T1811] Bluetooth: hci1: Frame reassembly failed (-84)
[   80.418210][ T3011] SELinux: failed to load policy
[   80.433077][ T3016] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.443813][   T36] audit: type=1400 audit(1750965279.090:2108): avc:  denied  { relabelfrom } for  pid=3017 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   80.470082][   T36] audit: type=1400 audit(1750965279.090:2109): avc:  denied  { relabelto } for  pid=3017 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   81.359959][ T3034] loop9: detected capacity change from 0 to 7
[   81.366284][ T3034] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.374760][ T3034] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.382617][ T3034]  loop9: unable to read partition table
[   81.388323][ T3034] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   81.388323][ T3034] 
) failed (rc=-5)
[   81.389818][  T313] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.409802][  T313] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.417784][  T313] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.430534][  T313] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.439006][  T313] Buffer I/O error on dev loop9, logical block 0, async page read
[   81.448158][  T313] udevd[313]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system
[   81.448706][ T3039] rust_binder: Write failure EFAULT in pid:464
[   81.474805][  T313] udevd[313]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system
[   81.476087][ T3044] __vm_enough_memory: pid: 3044, comm: syz.1.787, bytes: 70373039144960 not enough memory for the allocation
[   81.484035][  T313] udevd[313]: symlink '../../loop9' '/dev/disk/by-diskseq/52.tmp-b7:9' failed: Read-only file system
[   81.506002][ T3046] syzkaller0: entered promiscuous mode
[   81.520096][ T3046] syzkaller0: entered allmulticast mode
[   81.604051][ T3052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'.
[   82.078893][ T2018] Bluetooth: hci0: command 0x1003 tx timeout
[   82.079546][ T1435] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   82.111317][  T812] ftdi_sio 3-1:6.108: FTDI USB Serial Device converter detected
[   82.119542][  T812] ftdi_sio ttyUSB0: unknown device type: 0x9841
[   82.129165][  T812] usb 3-1: USB disconnect, device number 27
[   82.133175][ T3060] rust_binder: Write failure EINVAL in pid:410
[   82.135677][  T812] ftdi_sio 3-1:6.108: device disconnected
[   82.158547][   T53] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   82.158627][ T1435] Bluetooth: hci1: command 0x1003 tx timeout
[   82.253589][ T3065] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   82.260799][ T3065] rust_binder: Write failure EINVAL in pid:412
[   82.396881][   T36] audit: type=1400 audit(1750965281.040:2110): avc:  denied  { create } for  pid=3071 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   82.426680][ T3079] netlink: 'syz.3.798': attribute type 4 has an invalid length.
[   82.434371][ T3079] netlink: 'syz.3.798': attribute type 5 has an invalid length.
[   82.442078][ T3079] netlink: 'syz.3.798': attribute type 1 has an invalid length.
[   82.488092][ T3083] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.488527][ T3083] rust_binder: Write failure EFAULT in pid:480
[   82.568159][   T36] audit: type=1400 audit(1750965281.210:2111): avc:  denied  { mount } for  pid=3090 comm="syz.1.802" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   82.568743][ T3091] overlayfs: missing 'lowerdir'
[   82.609262][   T36] audit: type=1400 audit(1750965281.260:2112): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   82.730574][ T3106] netlink: 'syz.1.806': attribute type 11 has an invalid length.
[   82.738322][ T3106] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[   82.768440][ T3106] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.806'.
[   82.790250][ T3106] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.790299][ T3106] rust_binder: Write failure EINVAL in pid:502
[   82.807845][ T3106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:502
[   83.072533][ T3127] FAT-fs (rnullb0): bogus number of reserved sectors
[   83.088353][ T3127] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   83.095157][   T64] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   83.199362][ T3137] vlan0: entered promiscuous mode
[   83.204469][ T3137] vlan0: entered allmulticast mode
[   83.209682][ T3137] veth0_vlan: entered allmulticast mode
[   83.248448][   T64] usb 2-1: Using ep0 maxpacket: 16
[   83.254644][   T64] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[   83.262886][   T64] usb 2-1: config 0 has no interface number 0
[   83.274070][   T64] usb 2-1: config 0 interface 113 has no altsetting 0
[   83.282373][   T64] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[   83.295985][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.304236][   T64] usb 2-1: Product: syz
[   83.308975][   T64] usb 2-1: Manufacturer: syz
[   83.313624][   T64] usb 2-1: SerialNumber: syz
[   83.319086][   T64] usb 2-1: config 0 descriptor??
[   83.479692][ T3155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.480125][ T3155] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   83.486565][ T3155] rust_binder: Read failure Err(EFAULT) in pid:647
[   83.529118][   T64] usb 2-1: USB disconnect, device number 37
[   83.552096][ T3161] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.838480][   T64] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[   83.999516][   T64] usb 2-1: Using ep0 maxpacket: 16
[   84.005738][   T64] usb 2-1: config 136 has 0 interfaces, different from the descriptor's value: 1
[   84.014934][   T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[   84.024014][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.236373][   T64] usb 2-1: language id specifier not provided by device, defaulting to English
[   84.322852][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   84.322869][   T36] audit: type=1400 audit(1750965282.970:2116): avc:  denied  { read } for  pid=3177 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   84.359267][ T3180] tun0: tun_chr_ioctl cmd 1074025676
[   84.364572][ T3180] tun0: owner set to 0
[   84.435619][   T36] audit: type=1326 audit(1750965283.080:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3183 comm="syz.2.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9938e929 code=0x0
[   84.436711][ T3160] rust_binder: Error while translating object.
[   84.460032][   T36] audit: type=1400 audit(1750965283.110:2118): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   84.460595][ T3160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   84.476256][ T3186] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.486305][ T3160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:515
[   84.496798][ T3186] rust_binder: Error in use_page_slow: ESRCH
[   84.511085][   T36] audit: type=1400 audit(1750965283.150:2119): avc:  denied  { setopt } for  pid=3183 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   84.513543][ T3186] rust_binder: use_range failure ESRCH
[   84.536995][ T3186] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   84.537736][   T64] usb 2-1: USB disconnect, device number 38
[   84.544981][ T3186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   84.556324][ T3186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:654
[   84.808493][ T1140] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[   84.969554][ T1140] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   84.980582][ T1140] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   84.991376][ T1140] usb 1-1: config 0 interface 0 has no altsetting 0
[   84.998062][ T1140] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   85.007094][ T1140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.015529][ T1140] usb 1-1: config 0 descriptor??
[   85.020773][ T3192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.048107][ T3198] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.049074][ T3198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:519
[   85.065655][ T3200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:519
[   85.065744][ T3198] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   85.127561][ T3204] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.435188][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.451313][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.458954][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.466492][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.474265][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.482189][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.489740][ T1140] holtek_mouse 0003:04D9:A067.000F: unknown main item tag 0x0
[   85.497713][ T1140] holtek_mouse 0003:04D9:A067.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0
[   85.648466][   T64] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[   85.679766][  T812] usb 1-1: USB disconnect, device number 28
[   85.718035][   T36] audit: type=1400 audit(1750965284.360:2120): avc:  denied  { create } for  pid=3246 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   85.737922][   T36] audit: type=1400 audit(1750965284.370:2121): avc:  denied  { sys_admin } for  pid=3246 comm="syz.3.852" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   85.765086][   T36] audit: type=1400 audit(1750965284.410:2122): avc:  denied  { execute } for  pid=3250 comm="syz.3.854" name="file0" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   85.808493][   T64] usb 2-1: Using ep0 maxpacket: 8
[   85.814535][   T64] usb 2-1: config 73 has too many interfaces: 109, using maximum allowed: 32
[   85.823360][   T64] usb 2-1: config 73 has 1 interface, different from the descriptor's value: 109
[   85.832496][   T64] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   85.841554][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.051076][ T3230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.059656][ T3230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.205065][ T3268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   86.205512][ T3268] rust_binder: Error in use_page_slow: ESRCH
[   86.212182][ T3268] rust_binder: use_range failure ESRCH
[   86.218771][ T3268] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   86.224611][ T3268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   86.248497][ T3268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:661
[   86.319730][   T36] audit: type=1400 audit(1750965284.970:2123): avc:  denied  { mounton } for  pid=3280 comm="syz.0.863" path="/201/file0" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   86.443683][   T64] usb 2-1: string descriptor 0 read error: -71
[   86.458607][   T64] usb 2-1: Found UVC 0.00 device <unnamed> (2833:0201)
[   86.479275][   T64] usb 2-1: No valid video chain found.
[   86.486365][ T3296] tipc: Started in network mode
[   86.499088][   T64] usb 2-1: USB disconnect, device number 39
[   86.505087][ T3296] tipc: Node identity e0000001, cluster identity 4711
[   86.525254][ T3296] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.633326][   T36] audit: type=1400 audit(1750965285.280:2124): avc:  denied  { execute_no_trans } for  pid=3306 comm="syz.3.874" path="/319/file1" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   86.709566][   T36] audit: type=1400 audit(1750965285.360:2125): avc:  denied  { remove_name } for  pid=3308 comm="syz.0.873" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   86.919962][ T3320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[   86.970035][ T3324] SELinux: security_context_str_to_sid (unkonfined_u) failed with errno=-22
[   87.001185][ T3327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:549
[   87.076285][ T3329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'.
[   87.094571][ T3329] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.095301][ T3329] netlink: 100 bytes leftover after parsing attributes in process `syz.1.880'.
[   87.110990][ T3329] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   87.558363][ T3356] tipc: Started in network mode
[   87.571301][ T3356] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[   87.578648][ T3356] tipc: Enabled bearer <eth:bridge0>, priority 10
[   87.586257][ T3357] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   87.594617][ T3357] tipc: Enabled bearer <udp:syz0>, priority 10
[   87.634043][ T3359] 9pnet_fd: Insufficient options for proto=fd
[   87.640339][ T3359] 8021q: VLANs not supported on lo
[   87.669434][ T3364] overlayfs: conflicting options: userxattr,metacopy=on
[   87.896680][ T3391] bpf: Bad value for 'mode'
[   87.917642][ T3395] netlink: 72 bytes leftover after parsing attributes in process `syz.3.901'.
[   87.927115][ T3395] netlink: 'syz.3.901': attribute type 64 has an invalid length.
[   87.947806][ T3397] syz_tun: tun_net_xmit 63
[   88.007816][ T3409] binder: Unknown parameter 'permit_directio'
[   88.178457][  T627] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   88.328455][  T627] usb 1-1: Using ep0 maxpacket: 32
[   88.334734][  T627] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[   88.343259][  T627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 55, changing to 7
[   88.354454][  T627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8496, setting to 1024
[   88.367110][  T627] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   88.380575][  T627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.398467][  T627] usb 1-1: Product: syz
[   88.404867][  T627] usb 1-1: Manufacturer: syz
[   88.414943][  T627] usb 1-1: SerialNumber: syz
[   88.425647][  T627] usb 1-1: config 0 descriptor??
[   88.432660][  T627] hub 1-1:0.0: bad descriptor, ignoring hub
[   88.438758][  T627] hub 1-1:0.0: probe with driver hub failed with error -5
[   88.708492][  T627] tipc: Node number set to 10922666
[   88.987358][ T3439] netlink: 76 bytes leftover after parsing attributes in process `syz.3.918'.
[   89.182639][  T627] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[   89.278545][  T812] usb 1-1: USB disconnect, device number 29
[   89.348449][  T627] usb 2-1: Using ep0 maxpacket: 32
[   89.354771][  T627] usb 2-1: config 3 has an invalid interface number: 101 but max is 2
[   89.363299][  T627] usb 2-1: config 3 has an invalid interface number: 87 but max is 2
[   89.379371][  T627] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   89.398634][  T627] usb 2-1: config 3 has an invalid interface number: 163 but max is 2
[   89.420192][  T627] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[   89.438631][  T627] usb 2-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config
[   89.448969][  T627] usb 2-1: config 3 has no interface number 0
[   89.455111][  T627] usb 2-1: config 3 has no interface number 1
[   89.462582][  T627] usb 2-1: config 3 has no interface number 2
[   89.469167][  T627] usb 2-1: config 3 interface 101 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64
[   89.480429][  T627] usb 2-1: config 3 interface 101 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[   89.493806][  T627] usb 2-1: too many endpoints for config 3 interface 87 altsetting 241: 156, using maximum allowed: 30
[   89.505086][  T627] usb 2-1: config 3 interface 87 altsetting 241 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   89.516387][  T627] usb 2-1: config 3 interface 87 altsetting 241 has a duplicate endpoint with address 0xB, skipping
[   89.527413][  T627] usb 2-1: config 3 interface 87 altsetting 241 has 6 endpoint descriptors, different from the interface descriptor's value: 156
[   89.548502][  T627] usb 2-1: config 3 interface 163 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[   89.575774][  T627] usb 2-1: config 3 interface 101 has no altsetting 0
[   89.582788][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   89.582803][   T36] audit: type=1400 audit(1750965288.220:2134): avc:  denied  { mounton } for  pid=3473 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   89.610810][  T627] usb 2-1: config 3 interface 87 has no altsetting 0
[   89.617561][  T627] usb 2-1: config 3 interface 163 has no altsetting 0
[   89.625936][  T627] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=4c.91
[   89.635266][  T627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.643426][  T627] usb 2-1: Product: ї
[   89.647572][  T627] usb 2-1: Manufacturer: с
[   89.652735][  T627] usb 2-1: SerialNumber: 《
[   89.657936][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.665016][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.672095][ T3473] bridge_slave_0: entered allmulticast mode
[   89.678464][ T3473] bridge_slave_0: entered promiscuous mode
[   89.684915][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.692004][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.699070][ T3473] bridge_slave_1: entered allmulticast mode
[   89.705395][ T3473] bridge_slave_1: entered promiscuous mode
[   89.774883][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.781977][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.789262][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.796286][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.814395][ T1809] erspan0: left allmulticast mode
[   89.822787][ T1809] erspan0: left promiscuous mode
[   89.828198][ T1809] bridge0: port 3(erspan0) entered disabled state
[   89.839737][ T1809] bridge_slave_1: left allmulticast mode
[   89.845426][ T1809] bridge_slave_1: left promiscuous mode
[   89.851619][ T1809] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.860502][   T36] audit: type=1400 audit(1750965288.510:2135): avc:  denied  { create } for  pid=3427 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.882294][ T1809] bridge_slave_0: left allmulticast mode
[   89.887990][ T1809] bridge_slave_0: left promiscuous mode
[   89.893973][ T1809] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.902219][ T1809] tipc: Resetting bearer <eth:bridge0>
[   89.930702][ T1809] tipc: Disabling bearer <eth:bridge0>
[   89.979367][ T1817] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.986750][ T1817] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.001616][  T627] usb 2-1: Found UVC 0.00 device ї (046d:089b)
[   90.018932][  T627] usb 2-1: No valid video chain found.
[   90.025975][ T1817] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.033050][ T1817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.044347][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.051408][ T1817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.060951][  T627] usb 2-1: USB disconnect, device number 40
[   90.074341][ T1809] tipc: Disabling bearer <udp:syz0>
[   90.079707][ T1809] tipc: Left network mode
[   90.085393][ T1809] veth1_macvtap: left promiscuous mode
[   90.159969][ T3473] veth0_vlan: entered promiscuous mode
[   90.178642][ T3473] veth1_macvtap: entered promiscuous mode
[   90.211321][   T36] audit: type=1400 audit(1750965288.860:2136): avc:  denied  { mounton } for  pid=3473 comm="syz-executor" path="/root/syzkaller.0tyhC1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   90.297125][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   90.311058][   T36] audit: type=1400 audit(1750965288.960:2137): avc:  denied  { map } for  pid=3493 comm="syz.3.935" path="socket:[21162]" dev="sockfs" ino=21162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   90.514010][ T3525] binder: Binderfs stats mode cannot be changed during a remount
[   90.798826][  T627] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[   90.949507][  T627] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   90.967548][  T627] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   90.995269][  T627] usb 2-1: config 0 interface 0 has no altsetting 0
[   91.012106][  T627] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   91.028455][  T627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.048649][  T627] usb 2-1: config 0 descriptor??
[   91.053930][ T3529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   91.470637][  T627] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x6
[   91.488702][  T627] holtek_mouse 0003:04D9:A067.0010: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0
[   91.598452][   T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   91.690208][  T812] usb 2-1: USB disconnect, device number 41
[   91.748465][   T64] usb 5-1: Using ep0 maxpacket: 32
[   91.754698][   T64] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[   91.764291][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.775210][   T64] usb 5-1: config 0 descriptor??
[   92.181720][   T36] audit: type=1400 audit(1750965290.830:2138): avc:  denied  { getopt } for  pid=3531 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.181923][ T3532] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   92.225766][ T3540] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   92.233115][ T3540] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   92.258107][ T3542] rust_binder: Write failure EINVAL in pid:574
[   92.275616][   T64] usbhid 5-1:0.0: can't add hid device: -71
[   92.290178][ T3547] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   92.290198][ T3547] rust_binder: Error while translating object.
[   92.307991][   T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   92.322168][ T3548] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   92.322185][ T3548] rust_binder: Error while translating object.
[   92.326364][ T3547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   92.353154][ T3548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   92.359371][   T64] usb 5-1: USB disconnect, device number 2
[   92.377816][ T3548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[   92.377871][ T3547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[   93.202790][ T3578] rust_binder: Error while translating object.
[   93.221610][ T3578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   93.234325][ T3578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37
[   93.273845][   T36] audit: type=1400 audit(1750965291.920:2139): avc:  denied  { getopt } for  pid=3579 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   93.708444][   T64] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[   93.868445][   T64] usb 2-1: Using ep0 maxpacket: 32
[   93.874799][   T64] usb 2-1: config 0 interface 0 has no altsetting 0
[   93.881529][   T64] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   93.890660][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.899577][   T64] usb 2-1: config 0 descriptor??
[   94.317501][   T64] wacom 0003:056A:0331.0011: hidraw0: USB HID v0.07 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[   94.441957][ T3605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   94.442177][ T3605] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   94.520624][ T3583] rust_binder: Write failure EINVAL in pid:579
[   94.565445][  T812] usb 2-1: USB disconnect, device number 42
[   95.086327][ T3613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56
[   95.086686][ T3615] overlayfs: failed to resolve './file2': -2
[   95.114720][ T3618] rust_binder: Write failure EFAULT in pid:59
[   95.302470][ T3625] tmpfs: Unknown parameter 'uid��s��'
[   95.348557][ T1140] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   95.478771][ T3636] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.479106][ T3636] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   95.488499][ T1140] usb 5-1: device descriptor read/64, error -71
[   95.738441][ T1140] usb 5-1: device descriptor read/64, error -71
[   95.988436][ T1140] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   96.128436][ T1140] usb 5-1: device descriptor read/64, error -71
[   96.368483][ T1140] usb 5-1: device descriptor read/64, error -71
[   96.488574][ T1140] usb usb5-port1: attempt power cycle
[   96.838495][ T1140] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   96.859553][ T1140] usb 5-1: device descriptor read/8, error -71
[   96.989475][ T1140] usb 5-1: device descriptor read/8, error -71
[   97.238436][ T1140] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   97.259473][ T1140] usb 5-1: device descriptor read/8, error -71
[   97.391143][ T1140] usb 5-1: device descriptor read/8, error -71
[   97.508598][ T1140] usb usb5-port1: unable to enumerate USB device
[   97.768468][   T64] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[   97.918447][   T64] usb 2-1: Using ep0 maxpacket: 16
[   97.949336][   T64] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[   97.957530][   T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.967859][   T64] usb 2-1: config 1 has no interface number 0
[   97.977863][   T64] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.998824][   T64] usb 2-1: config 1 interface 105 has no altsetting 0
[   98.007079][   T64] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   98.016394][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.024532][   T64] usb 2-1: Product: syz
[   98.029031][   T64] usb 2-1: Manufacturer: syz
[   98.033633][   T64] usb 2-1: SerialNumber: syz
[   98.074037][   T36] audit: type=1400 audit(1750965296.720:2140): avc:  denied  { create } for  pid=3667 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   98.136254][ T3675] input: syz1 as /devices/virtual/input/input27
[   98.161070][ T3677] bridge0: port 3(vlan0) entered blocking state
[   98.167362][ T3677] bridge0: port 3(vlan0) entered disabled state
[   98.188463][ T3677] vlan0: entered allmulticast mode
[   98.198566][ T3677] veth0_vlan: entered allmulticast mode
[   98.209041][ T3677] vlan0: entered promiscuous mode
[   98.216732][ T3677] bridge0: port 3(vlan0) entered blocking state
[   98.223018][ T3677] bridge0: port 3(vlan0) entered forwarding state
[   98.243027][   T64] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22
[   98.796206][ T3687] rust_kernel: panicked at drivers/android/binder/node.rs:893:13:
[   98.796206][ T3687] attempt to subtract with overflow
[   98.813462][ T3687] ------------[ cut here ]------------
[   98.818989][ T3687] kernel BUG at rust/helpers/bug.c:7!
[   98.825611][   T36] audit: type=1400 audit(1750965297.470:2141): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   98.861962][ T3687] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[   98.868943][ T3687] CPU: 0 UID: 0 PID: 3687 Comm: syz.1.985 Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac
[   98.882320][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   98.892394][ T3687] RIP: 0010:rust_helper_BUG+0x8/0x10
[   98.897694][ T3687] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f7 a4 fc 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bd 60 b5 94 90 90 90 90 90 90 90 90 90
[   98.898494][   T36] audit: type=1400 audit(1750965297.470:2142): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.917306][ T3687] RSP: 0018:ffffc9000f0fda90 EFLAGS: 00010246
[   98.917327][ T3687] RAX: 0000000000000061 RBX: 1ffff92001e1fb54 RCX: 7a0a2a1ed3517800
[   98.917343][ T3687] RDX: ffffc90002264000 RSI: 000000000000391f RDI: 0000000000003920
[   98.917355][ T3687] RBP: ffffc9000f0fda90 R08: ffffc9000f0fd787 R09: 1ffff92001e1faf0
[   98.968620][ T3687] R10: dffffc0000000000 R11: fffff52001e1faf1 R12: 0000000000000000
[   98.976598][ T3687] R13: dffffc0000000000 R14: ffffc9000f0fdac0 R15: ffffc9000f0fdaf0
[   98.980723][   T36] audit: type=1400 audit(1750965297.470:2143): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.984569][ T3687] FS:  00007fcd90fbb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   99.014733][ T3687] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.021337][ T3687] CR2: 00007fcd90f99f98 CR3: 000000011f8a0000 CR4: 00000000003526b0
[   99.029326][ T3687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   99.037325][ T3687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   99.045301][ T3687] Call Trace:
[   99.048580][ T3687]  <TASK>
[   99.051510][ T3687]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[   99.053503][   T36] audit: type=1400 audit(1750965297.470:2144): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   99.058975][ T3687]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[   99.059007][ T3687]  ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810
[   99.059033][ T3687]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[   99.098465][   T36] audit: type=1400 audit(1750965297.470:2145): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   99.111264][ T3687]  ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[   99.111299][ T3687]  ? __kasan_check_write+0x18/0x20
[   99.147402][ T3687]  ? _raw_spin_lock+0x8c/0x120
[   99.152183][ T3687]  ? __cfi__raw_spin_lock+0x10/0x10
[   99.157399][ T3687]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[   99.164609][ T3687]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[   99.168456][   T36] audit: type=1400 audit(1750965297.470:2146): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   99.172514][ T3687]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[   99.205267][ T3687]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[   99.215871][ T3687]  ? __asan_memcpy+0x5a/0x80
[   99.220470][ T3687]  _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860
[   99.228445][   T36] audit: type=1400 audit(1750965297.470:2147): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   99.230193][ T3687]  ? __kasan_check_write+0x18/0x20
[   99.257827][ T3687]  ? _raw_spin_lock+0x8c/0x120
[   99.262607][ T3687]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10
[   99.272682][ T3687]  ? _raw_spin_unlock+0x45/0x60
[   99.277551][ T3687]  ? rust_helper_spin_unlock+0x19/0x30
[   99.283021][ T3687]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x665/0xc40
[   99.292925][ T3687]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x10/0x10
[   99.303308][ T3687]  ? __kasan_check_write+0x18/0x20
[   99.308440][ T3687]  ? _raw_spin_lock+0x8c/0x120
[   99.313215][ T3687]  ? __cfi__raw_spin_lock+0x10/0x10
[   99.318428][ T3687]  ? __kasan_check_write+0x18/0x20
[   99.323549][ T3687]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20
[   99.333119][ T3687]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   99.343067][ T3687]  ? is_bpf_text_address+0x17b/0x1a0
[   99.348367][ T3687]  ? kernel_text_address+0xa9/0xe0
[   99.353480][ T3687]  ? unwind_get_return_address+0x51/0x90
[   99.359121][ T3687]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   99.365290][ T3687]  ? arch_stack_walk+0x10b/0x170
[   99.370280][ T3687]  ? stack_depot_save_flags+0x38/0x800
[   99.375746][ T3687]  ? kasan_save_alloc_info+0x40/0x50
[   99.381037][ T3687]  ? kasan_save_track+0x4f/0x80
[   99.385896][ T3687]  ? kasan_save_track+0x3e/0x80
[   99.390757][ T3687]  ? kasan_save_alloc_info+0x40/0x50
[   99.396050][ T3687]  ? __kasan_kmalloc+0x96/0xb0
[   99.400822][ T3687]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   99.407521][ T3687]  ? krealloc_noprof+0x8d/0x130
[   99.412380][ T3687]  ? rust_helper_krealloc+0x33/0xd0
[   99.417583][ T3687]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100
[   99.427138][ T3687]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440
[   99.437649][ T3687]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0
[   99.446955][ T3687]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   99.455656][ T3687]  ? __se_sys_ioctl+0x132/0x1b0
[   99.460531][ T3687]  ? __x64_sys_ioctl+0x7f/0xa0
[   99.465312][ T3687]  ? do_syscall_64+0x58/0xf0
[   99.469909][ T3687]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.475983][ T3687]  ? cgroup_rstat_updated+0x132/0x7f0
[   99.481364][ T3687]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   99.487092][ T3687]  ? arch_scale_cpu_capacity+0x1c/0xb0
[   99.492560][ T3687]  ? update_curr_dl_se+0x10c/0xb20
[   99.497682][ T3687]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   99.503754][ T3687]  ? update_curr+0x60d/0xc60
[   99.508356][ T3687]  ? __kasan_check_write+0x18/0x20
[   99.513479][ T3687]  ? _raw_spin_lock+0x8c/0x120
[   99.518252][ T3687]  ? __cfi__raw_spin_lock+0x10/0x10
[   99.523462][ T3687]  ? _raw_spin_unlock+0x45/0x60
[   99.528329][ T3687]  ? rust_helper_spin_unlock+0x19/0x30
[   99.533787][ T3687]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   99.544300][ T3687]  ? tg_unthrottle_up+0x980/0x980
[   99.549356][ T3687]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   99.560130][ T3687]  ? kvm_sched_clock_read+0x15/0x30
[   99.565340][ T3687]  ? sched_clock_noinstr+0xd/0x30
[   99.570379][ T3687]  ? sched_clock+0x44/0x60
[   99.574798][ T3687]  ? sched_clock_cpu+0x75/0x400
[   99.579658][ T3687]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   99.585729][ T3687]  ? xfd_validate_state+0x68/0x150
[   99.590845][ T3687]  ? save_fpregs_to_fpstate+0x196/0x230
[   99.596408][ T3687]  ? __cfi___switch_to+0x10/0x10
[   99.601353][ T3687]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   99.610477][ T3687]  ? _raw_spin_unlock+0x45/0x60
[   99.615352][ T3687]  ? __switch_to_asm+0x3d/0x70
[   99.620126][ T3687]  ? avc_has_extended_perms+0x7c7/0xdd0
[   99.625680][ T3687]  ? __asan_memcpy+0x5a/0x80
[   99.630275][ T3687]  ? avc_has_extended_perms+0x921/0xdd0
[   99.635825][ T3687]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   99.645384][ T3687]  ? do_vfs_ioctl+0xeda/0x1e30
[   99.650159][ T3687]  ? __futex_queue+0x19a/0x340
[   99.654932][ T3687]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   99.660575][ T3687]  ? __cfi___futex_queue+0x10/0x10
[   99.665694][ T3687]  ? futex_wait_setup+0x1bc/0x260
[   99.670728][ T3687]  ? __futex_wait+0x218/0x2a0
[   99.675409][ T3687]  ? ioctl_has_perm+0x384/0x4d0
[   99.680271][ T3687]  ? has_cap_mac_admin+0xd0/0xd0
[   99.685219][ T3687]  ? futex_wake+0x5fb/0x900
[   99.689727][ T3687]  ? futex_setup_timer+0xb4/0xd0
[   99.694677][ T3687]  ? futex_wait+0x288/0x540
[   99.699185][ T3687]  ? __cfi_futex_wait+0x10/0x10
[   99.704038][ T3687]  ? selinux_file_ioctl+0x6e0/0x1360
[   99.709359][ T3687]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   99.714922][ T3687]  ? do_futex+0x309/0x500
[   99.719261][ T3687]  ? __cfi_do_futex+0x10/0x10
[   99.723949][ T3687]  ? __fget_files+0x2c5/0x340
[   99.728634][ T3687]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   99.737148][ T3687]  ? __se_sys_ioctl+0x114/0x1b0
[   99.742007][ T3687]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   99.751128][ T3687]  __se_sys_ioctl+0x132/0x1b0
[   99.755819][ T3687]  __x64_sys_ioctl+0x7f/0xa0
[   99.760417][ T3687]  x64_sys_call+0x1878/0x2ee0
[   99.765101][ T3687]  do_syscall_64+0x58/0xf0
[   99.769517][ T3687]  ? clear_bhb_loop+0x50/0xa0
[   99.774203][ T3687]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.780104][ T3687] RIP: 0033:0x7fcd9018e929
[   99.784530][ T3687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.804134][ T3687] RSP: 002b:00007fcd90fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.812557][ T3687] RAX: ffffffffffffffda RBX: 00007fcd903b6080 RCX: 00007fcd9018e929
[   99.820536][ T3687] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000006
[   99.828507][ T3687] RBP: 00007fcd90210b39 R08: 0000000000000000 R09: 0000000000000000
[   99.836480][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.844459][ T3687] R13: 0000000000000000 R14: 00007fcd903b6080 R15: 00007ffc4ee68598
[   99.852441][ T3687]  </TASK>
[   99.855465][ T3687] Modules linked in:
[   99.859590][ T3687] ---[ end trace 0000000000000000 ]---
[   99.867773][ T3687] RIP: 0010:rust_helper_BUG+0x8/0x10
[   99.873160][ T3687] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f7 a4 fc 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 bd 60 b5 94 90 90 90 90 90 90 90 90 90
[   99.899628][ T3687] RSP: 0018:ffffc9000f0fda90 EFLAGS: 00010246
[   99.905767][ T3687] RAX: 0000000000000061 RBX: 1ffff92001e1fb54 RCX: 7a0a2a1ed3517800
[   99.921443][ T3687] RDX: ffffc90002264000 RSI: 000000000000391f RDI: 0000000000003920
[   99.957675][ T3687] RBP: ffffc9000f0fda90 R08: ffffc9000f0fd787 R09: 1ffff92001e1faf0
[   99.992763][ T3687] R10: dffffc0000000000 R11: fffff52001e1faf1 R12: 0000000000000000
[  100.005717][ T3687] R13: dffffc0000000000 R14: ffffc9000f0fdac0 R15: ffffc9000f0fdaf0
[  100.013987][ T3687] FS:  00007fcd90fbb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  100.023571][ T3687] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.030379][ T3687] CR2: 0000200000000140 CR3: 000000011f8a0000 CR4: 00000000003526b0
[  100.044852][ T3687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  100.061727][ T3687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  100.079702][ T1140] usb 4-1: USB disconnect, device number 6
[  100.085665][ T1816] vlan0: left allmulticast mode
[  100.100464][ T1816] veth0_vlan: left allmulticast mode
[  100.118467][ T1816] vlan0: left promiscuous mode
[  100.124398][ T3687] Kernel panic - not syncing: Fatal exception
[  100.130706][ T3687] Kernel Offset: disabled
[  100.135015][ T3687] Rebooting in 86400 seconds..