last executing test programs:

29.554733521s ago: executing program 1 (id=234):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x30}, 0x1c, 0x0}}], 0x1, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="312d32df"], 0x31)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"})

29.253585295s ago: executing program 1 (id=236):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$key(0xf, 0x3, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0x8, r4, 0x0, 0x9, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000, 0x6000}}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000400)="c74424005c8d0000c7442402ce5caa10c7442406000000000f011c24f30fc7720064360f01c466b827010f00d03ef0f71b0fc72f0f1bc70f82b6000000b9800000c00f3235010000000f3065660f65d1", 0x50}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4)
sendto$packet(r6, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8052)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)

28.388266228s ago: executing program 1 (id=249):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x5eeba1494690ae70, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fstat(r0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1100401, &(0x7f0000000140)={[{@uuid_auto}, {@index_off}, {@metacopy_on}, {@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, './binderfs/binder0\x00'}}]})

28.365193189s ago: executing program 1 (id=250):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) (async)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x2)
open_tree(0xffffffffffffff9c, 0x0, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x244080, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) (rerun: 64)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r4 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@empty, 0xfffd, 0xffff, 0x4e20, 0x0, 0xa}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x800000001ff, 0xffffffffe, 0x8, 0x20}, 0x7, 0x1, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in6=@private0, 0x3502, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x3}}, 0xe8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
readahead(r5, 0xf, 0x3)
epoll_create1(0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f0000a34000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7354) (async)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xe8, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/25, 0x19, 0x2, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/99, 0x63, 0x2, 0x34}, @fda={0x66646185, 0x1, 0x0, 0x1f}}, &(0x7f0000000480)={0x0, 0x28, 0x50}}}, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x4, 0x1, 0xa}, @flat=@weak_handle={0x77682a85, 0x180, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/80, 0x50, 0x1, 0x1b}}, &(0x7f0000000780)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
r8 = socket(0xa, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x10)

28.30150935s ago: executing program 1 (id=251):
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb)
ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700))
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x80000000000e)
close_range(r0, 0xffffffffffffffff, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x4)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x8)
ioctl$PPPIOCSDEBUG(r5, 0x40047440, 0x0)
close(r7)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r10, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0xc2a4a000)

28.198838081s ago: executing program 1 (id=252):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x8, "f18c83b893524c6e79994ff721"}, 0xf, 0x2)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xa080, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000002000c)
mmap(&(0x7f00006f7000/0x11000)=nil, 0x11000, 0x100000e, 0x100010, r1, 0x64972000)

28.151102472s ago: executing program 32 (id=252):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x8, "f18c83b893524c6e79994ff721"}, 0xf, 0x2)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xa080, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000002000c)
mmap(&(0x7f00006f7000/0x11000)=nil, 0x11000, 0x100000e, 0x100010, r1, 0x64972000)

3.742523813s ago: executing program 3 (id=573):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004300)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.667327515s ago: executing program 3 (id=575):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8000)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
ioctl$IOC_PR_RESERVE(r4, 0x401070c9, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r5 = socket$igmp(0x2, 0x3, 0x2)
pipe(&(0x7f0000000400))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x5, 0xa4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESHEX=r6, @ANYRES16=r5], 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x6, 0x9, 0x0, 0x0, 0xf})
read(r7, &(0x7f0000000580)=""/207, 0xcf)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000500)={[{0x7, 0xc003, 0x3, 0x5, 0x3, 0x8, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x1000000000204}, {0x80, 0x1, 0x4, 0x45, 0x9, 0x4, 0x0, 0xff, 0x1, 0x4, 0x0, 0x7b, 0x20c}, {0x1, 0x4, 0x18, 0x5, 0x82, 0xf9, 0x3, 0x2, 0x0, 0x70, 0x14, 0x6, 0x3f}], 0x847})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000001c0)=0x2)
r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONERANGE(r9, 0x4020940d, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x8, 0xd1, 0x0, 0x7, 0x85, 0x2, 0x1, 0x2, 0x6, 0x4, 0x7, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x59, 0x1, 0x4, 0x7, 0x81, 0x7, 0x5, 0x5a, 0x7, 0xffffffffffffffff}, {0x3, 0x5, 0x81, 0xa, 0x6, 0x46, 0x88, 0x4f, 0xc, 0x98, 0xf4, 0x1, 0x8}], 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.835098277s ago: executing program 2 (id=582):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x0, 0x200f7})
ioprio_set$uid(0x3, 0x0, 0x2004)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00007a2000/0x2000)=nil, 0x2000, 0x16)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000340))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x81, 0x2, 0x8, 0xff, 0x81, 0x3b, 0x7, 0x0, 0xff, 0x1, 0x80, 0xbe, 0xfe, 0x8, 0xa8}})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x800060000000000, 0x1000000000, 0x3, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5], 0x1, 0xa02})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x2000})

2.581563541s ago: executing program 2 (id=589):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/122, 0x7a)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000780)={{0xa, 0x4e20, 0x1000, @local}, {0xa, 0x4e20, 0x5ff2814c, @rand_addr=' \x01\x00', 0x7}, 0x0, {[0x1, 0x80000001, 0x4, 0xc1d4, 0x15e, 0xc, 0x0, 0xffffff00]}}, 0x5c)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x9c, 0x0, &(0x7f00000005c0)=[@dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x37c7cccc914929d5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/79, 0x4f, 0x1, 0x33}, @flat=@weak_binder={0x77622a85, 0x2, 0x3}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fda={0x66646185, 0x3, 0x1, 0x10}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x1b}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}, 0x400}], 0x98, 0x0, &(0x7f0000000680)="6bc35be0f6da8fec0ef189e3605f63438ebbc374c0ef83ece0216a42073f9074806f22426cf63e7f5dffddb3d7c54960a01df52445bc6142a2885c6eba140202741b31b27b9d6892064104160682ab7999f9bc7e814f65c6cc5be84b3aff1852d31228244cd968577586aa0f54ddd5cacb15e833fb4d951ed460d8b9c8228c1806155c21cafa8b86bae79abcfd8d3de7364db1d4f790a1ab"})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = userfaultfd(0x80001)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x5})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3)

2.543373552s ago: executing program 2 (id=591):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
r2 = signalfd(r0, &(0x7f0000000040)={[0x25bf]}, 0x8)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3, 0x5}}, 0x30) (async)
tkill(r1, 0x2c)
r3 = syz_usb_connect$uac1(0x0, 0x9e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0xc, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0xc2, "e61c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x4e, "eb8b749bdd3e16"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0xd8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x7, 0x6f, {0x7, 0x25, 0x1, 0x42, 0x5, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x9, "67048a69c2fc60"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf7, 0x5, 0xa, {0x7, 0x25, 0x1, 0x83, 0x1, 0x400}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0xea, 0xff, 0x0, 0x4}, 0x29, &(0x7f00000001c0)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "5829402b868cf69dc89041a1d258d432"}, @ssp_cap={0x10, 0x10, 0xa, 0x1e, 0x1, 0xfa18, 0xf00, 0x24f6, [0xae7da5734a3e55bf]}]}, 0x7, [{0xbc, &(0x7f0000000200)=@string={0xbc, 0x3, "163a2aa4e74c7654558e8b55ee1e5a3dfb63a602eb5498ec1ad5cde11734adf12eb7b7222112a197ee67b2adeca0fc9eb87430974807e73b38148ab246dabafcfcdd6180290dd5c2c631c33bf23623babf23087e756ecb5957d3bf7b0c94dda04f0cd1f09074014de2ce7aa4525c9b3114b527f2edbae03bb644d7da68262a7a3d47f11473d9158514528c3b7a1f7ff5b6066daac68e5f1b04755640f5121d0457027b3386fdb10e60fd34b3cdeb5935e95e83788fa1c879c395"}}, {0x2c, &(0x7f00000002c0)=@string={0x2c, 0x3, "e8afeaab93565f2255dee0380de02c037a2df9810652d1a68754886f3eb6c1d110ed73bfee8100fe9a30"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1448}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_control_io$uac1(r3, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x20, 0x1, 0x68, {0x68, 0x7, "bbd5dfe66890fd4ba84990eedee35385dbf3d32012ca86cef7a92f2335944ec194be496cb481719f05476e8e994f20d43b1687400a93c917da206803599866a3c946b9d3bedd35503b7f7d4d29571b057bde7f482a0f05446900d3fd704103d209510c3f0a8d"}}, &(0x7f0000000540)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "90907ca2c379860f284f8fa2b1eef23a4608464c3e6d40e616ac2982262520231eb6ecf2b75f98eb7d190b8b7523fabce187c4f55c9ff723a4d34e39023105ad393b858d3364365bebf63783e20f1cd9671f1da6d82995ee3778c2f71181b75820e20dbbc556dcd316883f748b66e19b41235f0590ef5ba585f6cd1d036366fc92778db3683be695f2dd1c634cef873b9c0041aaffc3244992e742eea432cceb16fd2618b9cd7d43ab706e6e40e476024085a896cc5f54dc39521ba7f9a8bebe2977a9aa88ec39a595e309d6ff2b5a358ce8d64b837a3e02dbd8f6ad9ee5bb389db14bc71e5beb68cb7456cc9c03e86b1d"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x0, 0x8, 0xe1, "1c47adb86c3ee1348a7b1a14cd53348b90ab04b44b3bc6ccf7fc7ef4a9e775716affcf23a895580f5dd05b18fa0c50a0c97280bae800a8df5186a55e54c1cf4dfe63e20b02023c4db46afdba59628b8f6d80cdb9313c94a10ffde94a113bf8384f12ec842474a9545c1bebe98622f4463484447a18f71948cf6b75df0102099b70609d2ad349b12345bac8dbd5ae55114392ff0ca486356f8eb83c7931a4d38ba6480caceeb569ed4524482c1755cf87878ceaf03da0ddffa3b9855ba644104c366037e8f8575e2ef71d7d65ba6efa30c718b134f68cae3e85ed81cda96c679dff"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000800)={0x20, 0x81, 0x2, "83f3"}, &(0x7f0000000840)={0x20, 0x82, 0x1, 'r'}, &(0x7f0000000880)={0x20, 0x83, 0x3, "d74901"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, '\t49R'}, &(0x7f0000000900)={0x20, 0x85, 0x3, "fe407c"}}) (async)
tkill(r1, 0x26)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "ecc3"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff7, 0x4, 0xa}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @obex={0x5, 0x24, 0x15, 0x7f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x8, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0xff, 0xe, 0x9, 0x20}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "58200fcf35600036e7423ecab286ebe9"}]}, 0xa, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x480a}}, {0xb, &(0x7f0000000b00)=@string={0xb, 0x3, "55f9b0ddfe8228b726"}}, {0xa0, &(0x7f0000000b40)=@string={0xa0, 0x3, "4512da38728598b3b185071a9f5899b5e02f0ffdbf5ba57dce7720a32fa9a74a0894a5e504eb4e303b3c6164e765248faee6cb17fd7e694817ceb44061f0089609740842def1ac48ef62b25c8522c0ac172f2bf661623495ea42b9c3c72a713fba968cc322bb4d1287ea0d243015afa938d9abda423ac42568395eea655c7c9e1344a4e779a0664ddb8c35ffc12f79fa68b4c4c0aff54b040251928c9ffb"}}, {0xb3, &(0x7f0000000c00)=@string={0xb3, 0x3, "65232d176f0b0c232187efc54bc626489943c7d8cd1c5386a256e09fab8c749c59e9fad8d014f32c6734c41dce564e11f1fb4204800338e547b82ba9014ae52d20df7dc47a9c684e495dafad3504b9bb42e983dbffbd4b20bc5449f798a55ddea741c3f3e0a516335caeb39ccf9ffac7e083a5da22987de61b1d5b3bf3fb96c5365ee0ced4e7a0b72f9c37b29ce21cd8f0188679d1e208853dffb2d1e92dc3e738814c3c4167889310bb6e358f858d3910"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x200a}}, {0x59, &(0x7f0000000d00)=@string={0x59, 0x3, "7bfc0014e41e40e8b722f90f0342aa440e26ca3a7049ceda0e6a8b6c2a23c1e312ad9c0e44e98e0f736d0be5213c5d6dbe70ead79288cf610831e4c44becd692f4764a2a31b52eb084dae0bf9a1c8363ee81e557afe3dd"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1407}}]})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000001000)={0x14, &(0x7f0000000f40)={0x0, 0xe, 0x3e, {0x3e, 0xe, "0caf8998cffd85ee0ff6f4e510a00f9a7f09a8ddc782384309534c5944d746f460a66808befb80111c2ecde835cfb7aadc90b16c2272292aff94530e"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x1c, &(0x7f0000001040)={0x0, 0x16, 0xd8, "cafb33475c5b3260fbd8ef5fed2b52f5a93940c0c6ffd298b2d3c95f17baca0d64bbb66477d6696011496f4a3c3232293bc38f3fbafe4c8841d5986772831348eb1e2b6f4e56e015b1e044f41b00445da0c88624e6d9edb670d2ce162ed3c55d9bc6a88c88a849363d4bf50f008b8ddcb522b3d57cbf5dc707f44c9acbad53b579d426fe485cb4b523625a5dab8f13b96fcb0154e04a8e5fc09fed3ba6ff8c1e88b3c36c6c84a407f0af58bf860a3f7f13455ecc264e1e02675c371aeb2d0e27280f1cc7c2733086aaf24d93bd35e35afbf636a32cae969b"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x9}}) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001200)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000001300)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001340)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000001440)=0xe8)
setreuid(r5, r6) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000015c0)={0x14, &(0x7f0000001480)={0x20, 0x3, 0xdb, {0xdb, 0x4, "6f28178b002513cf51f7ecee6d9a1b283c9d79eb185e36e06804468caa92d41048a57a53fcce1944407fb6c01d8c8a988daabe2eb54d973fa34ce68b3b7a326301322e904cc7cf443db6c491ebf4ed4c942e5d287ae5c05be108dd86c358b4ca07809a4662b20cc8730eac98ef70589931e8bc15b469188ab2d784507e3140163498e6cefa784a643481bb39e5bf09daf9e5067cf45ef3ec74fbf359b6ea7bb1dca77b44420fc31a9513ba071a307cf2f4a682fd76dc8751bea0d1f5b77c302c813b185df936c70db95d579aac61937b9229bce91cff37603a"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001780)={0x1c, &(0x7f0000001600)={0x20, 0xf, 0xe0, "ce7e7f1d150f5b670f1d66ca63b2ff80931d96527e6d28e151418a947821cff86930fce8ccbf4001028b651a283114b060a1bf0a8dac00a793a5a5f17852850046b592b63e5d62edc279f9c2b252f608c4bcf49c8c7cd34b6f60c3760392d47d70c3de7436c3e5fba0e03cc3d0de8650563467d80a940efc9c9a8ac052d44e97f48586a5e12a6847178fdb1204df333e602d99b56f8c0c4399725bd72d6d180afe7a97adc6fd2694b0b4cfa9d8c71373444f0d6c0edd0b39530a58fb7f8f1be9f305957af01be02f4c818a95653b152a0c5599bf6ce08440c1229c784a0d6b86"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1}})
lstat(&(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}) (async)
r8 = getgid()
r9 = getgid() (async, rerun: 64)
stat(&(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}) (rerun: 64)
stat(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async)
stat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}) (async, rerun: 32)
r13 = getegid() (async, rerun: 32)
getresgid(&(0x7f0000004400)=<r14=>0x0, &(0x7f0000004440), &(0x7f0000004480))
lstat(&(0x7f00000045c0)='./file0\x00', &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, <r15=>0x0, <r16=>0x0})
syz_fuse_handle_req(r2, &(0x7f00000017c0)="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", 0x2000, &(0x7f00000047c0)={&(0x7f00000037c0)={0x50, 0x0, 0x10c7, {0x7, 0x2b, 0x567e9eed, 0x400, 0x31b, 0x5, 0xf332, 0x4, 0x0, 0x0, 0x8, 0x8c}}, &(0x7f0000003840)={0x18, 0xfffffffffffffff5, 0xd3d, {0x400}}, &(0x7f0000003880)={0x18, 0x0, 0x8, {0xa}}, &(0x7f00000038c0)={0x18, 0x0, 0xfffffffffffffff9, {0xa0}}, &(0x7f0000003900)={0x18, 0x0, 0xbf, {0x9}}, &(0x7f0000003940)={0x28, 0xfffffffffffffffe, 0x2, {{0x34bb57b0, 0x2, 0x0, r1}}}, &(0x7f0000003980)={0x60, 0x0, 0x6, {{0x7700, 0x55, 0x0, 0x7f, 0x10001, 0x5, 0x8001, 0x3}}}, &(0x7f0000003a00)={0x18, 0x0, 0x3, {0xcd}}, &(0x7f0000003a40)={0x2d, 0x0, 0x7f6, {'/selinux/avc/cache_threshold\x00'}}, &(0x7f0000003a80)={0x20, 0xfffffffffffffffe, 0x4}, &(0x7f0000003b80)={0x78, 0xfffffffffffffffe, 0x1, {0x1, 0xff, 0x0, {0x1, 0x2, 0x2, 0x0, 0x63c, 0xffff, 0xf, 0x0, 0x7, 0x8000, 0x0, r6, r7, 0xb69e}}}, &(0x7f0000003c00)={0x90, 0xfffffffffffffff5, 0x7fff, {0x4, 0x3, 0x0, 0xffffffffffffff4a, 0x8, 0xfffffffd, {0x0, 0x3, 0x4, 0xfffffffffffffff7, 0x621a, 0x9, 0x6c, 0xfffffffc, 0x5, 0x4000, 0x6, r6, r8, 0x6165, 0x1}}}, &(0x7f0000003cc0)={0x88, 0x0, 0x0, [{0x4, 0x4, 0x1d, 0x9, '/selinux/avc/cache_threshold\x00'}, {0x1, 0xa48, 0x3, 0x3, ',$*'}, {0x2, 0x7, 0x2, 0x8, '($'}]}, &(0x7f0000003fc0)={0x428, 0x800000000000000a, 0x1, [{{0x2, 0x1, 0x15, 0x3, 0x3, 0x200, {0x6, 0x6, 0x7fffffff, 0x8, 0x1, 0x200, 0x0, 0x1, 0x8, 0x2000, 0x8, r6, r9, 0x6, 0x8}}, {0x4, 0x3, 0x1, 0x7, '('}}, {{0x5, 0x0, 0x7f, 0x9, 0x53, 0x7, {0x1, 0x0, 0x2, 0xc, 0xff, 0xce9, 0x8, 0x1, 0x1, 0x2000, 0x0, r5, r10, 0x5, 0x800}}, {0x2, 0x53, 0x0, 0x2}}, {{0x5, 0x2, 0x1ff, 0x3, 0x0, 0x1000, {0x1, 0xffffffffffffff00, 0x8, 0xac, 0x5, 0x3, 0xfffffffe, 0x2, 0x7fff, 0x6000, 0xffff, r6, r11, 0x7fffffff, 0x6}}, {0x0, 0x3ff, 0x1d, 0x2, '/selinux/avc/cache_threshold\x00'}}, {{0x2, 0x3, 0x0, 0x2, 0x8000, 0x1, {0x0, 0x7, 0x8001, 0x9, 0x9, 0x9, 0xc38, 0x1, 0xc, 0xc000, 0x2, r6, r12, 0xfffffffe, 0x9}}, {0x1, 0x81, 0x1d, 0xb828, '/selinux/avc/cache_threshold\x00'}}, {{0x1, 0x2, 0x401, 0xb, 0x1, 0x9, {0x3, 0x0, 0x0, 0x294000000000, 0x100000000, 0xec4, 0xffff0000, 0xfffffeff, 0x8, 0xa000, 0x2000000, r5, r13, 0xffff0a0e, 0x4}}, {0x5, 0x916, 0x1d, 0x2, '/selinux/avc/cache_threshold\x00'}}, {{0x3, 0x3, 0x8928, 0x3, 0x6, 0x0, {0x5, 0x7, 0xfa1, 0xfffffffffffffffd, 0x1, 0x7, 0x61, 0x2000000, 0x1400, 0x4000, 0x3, r5, 0xee00, 0x1ca8, 0x9}}, {0x6, 0x101, 0x1d, 0x3f0, '/selinux/avc/cache_threshold\x00'}}]}, &(0x7f00000044c0)={0xa0, 0x0, 0x7, {{0x5, 0x2, 0x9, 0x8, 0x3, 0x7, {0x6, 0x3, 0x2, 0x6, 0x8000000000000001, 0x4c6d, 0x7, 0x8, 0x80000000, 0xc000, 0x58df, r6, r14, 0x5, 0x6}}, {0x0, 0x11}}}, &(0x7f0000004580)={0x20, 0x0, 0x5, {0x9, 0x4, 0x1ff, 0x7}}, &(0x7f0000004680)={0x130, 0x0, 0x200, {0x3, 0x27e, 0x0, '\x00', {0x40, 0xe, 0xffffffffffffffff, 0x3c, r5, r16, 0x3000, '\x00', 0x5, 0x0, 0x101, 0x80, {0x3, 0x5}, {0x7, 0xf}, {0x7fff}, {0xd95, 0x5}, 0x3, 0x0, 0x4, 0x91de}}}})
r17 = syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f0000004880)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x8, 0x10, 0x33, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "caac07fb"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2400, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0xc}, [@dmm={0x7, 0x24, 0x14, 0xc, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x4, [0xe116, 0x0, 0x9, 0x19]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0xfc, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x40, 0x9, 0x9}}}}}}}]}}, &(0x7f0000004c80)={0xa, &(0x7f0000004940)={0xa, 0x6, 0x250, 0x8, 0x84, 0x8d, 0x20, 0x9}, 0x55, &(0x7f0000004980)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x7c, 0x2, 0xc, 0xf000, 0x8, [0xf, 0x3f00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x6, 0x24, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xd, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b95091cf118b25076a8d6abb3f0980f8"}, @ss_container_id={0x14, 0x10, 0x4, 0x59, "d9ef85bda376778aee282ca9c293f838"}]}, 0x5, [{0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0x1004}}, {0x8e, &(0x7f0000004a40)=@string={0x8e, 0x3, "defe451ecfab619dbd3af03b908defce76fbff9d35c48486ef03b5090bcd77e75169260699e8f02845c935c7a10c93c63daf416d4217b27880f3f3e6d1dee34c843abc24e6ae8add6f930c3f01411da066c36607b7e37d054887c9f54241127c98110d9983eaef335d726b4c88da1d4ec35115c8534095562c651d705d6191f08b506af3a8839ed45b41a28d"}}, {0x8c, &(0x7f0000004b00)=@string={0x8c, 0x3, "a5595aed2862975a5e62f058c624a97a0fe1a663b52b4fd0f90c440c53f64c91c9672ca5cd9c41fa250d3199250228b11508342fee8c23fce3e91d01be408805081556f0baa7b29811d2d65b1d038c5f7e98942998e8c371f3d7c65bf42ee60d63075cf57d78069fc6664172217ff4a7dccc736e9af491b32dfabc12284151d8257088c992ba16dbaa4a"}}, {0x4, &(0x7f0000004bc0)=@lang_id={0x4, 0x3, 0x449}}, {0x5f, &(0x7f0000004c00)=@string={0x5f, 0x3, "3b7b4b43cf0fedbc6be48362f6b7fe7e1cbad6b5a8e1a06c0f2b99d73948c18c5fa2bb71b874fe42dfdb38e74dad2c4830f2ecb2410644cd9f005dc2150eec34d11a6bb3a423b8f19398b8e81b59c5a00e3f0d8c54444c23e83724feb4"}}]})
syz_usb_control_io$cdc_ncm(r17, &(0x7f0000004e00)={0x14, &(0x7f0000004d00)={0x0, 0xb, 0x8c, {0x8c, 0x2, "1939ba7ad1f429111b0d9bf63a688cc2275f14496fe2bce0fb6bb993325a58d48c5dc40c9ea96a516794496e8066ffa5e1cd44da9e4fadbf374f769c8c986e1e539c1fbd0114c8996dd1c9314d0a59f23b59fdc809570b1a0951963cf5826284309f382c4b809451cb29c01573f491ab938aab49d3b79911ed89376076ef3d0d366589e826b529251cd8"}}, &(0x7f0000004dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005080)={0x44, &(0x7f0000004e40)={0x40, 0xa, 0x67, "04f6b9dd651a78e9b5f2a6368a4c5008b00d1cbf556995323021d193c53a668416e39a19c104e30a5485970655e2642e88bbbd8510c64cf34b17dc548a707bf6805e2cef2c39110d8969959ff2a2a8d9c1fd610fa0398580cb39f63035d21e7914c4f4caea3c64"}, &(0x7f0000004ec0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004f00)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000004f40)={0x20, 0x80, 0x1c, {0x1, 0x9, 0xdb3a, 0xffff, 0x0, 0x1ff, 0x5, 0xfa5, 0x8000, 0x8, 0xfffe, 0x6}}, &(0x7f0000004f80)={0x20, 0x85, 0x4, 0xc08b}, &(0x7f0000004fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000005000)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000005040)={0x20, 0x89, 0x2, 0x1}}) (async)
mount$9p_fd(0x0, &(0x7f0000005100)='./file0\x00', &(0x7f0000005140), 0x209000, &(0x7f0000005180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@access_user}, {@cache_loose}, {@cache_fscache}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r15}}, {@version_9p2000}, {@cache_mmap}, {@msize={'msize', 0x3d, 0xc}}, {@cachetag}], [{@smackfstransmute={'smackfstransmute', 0x3d, '('}}, {@dont_hash}, {@fowner_gt={'fowner>', r15}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '/selinux/avc/cache_threshold\x00'}}]}})
stat(&(0x7f00000052c0)='./file0\x00', &(0x7f0000005300))

2.118726608s ago: executing program 4 (id=600):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffffe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x401, 0x0, 0x3, 0x3, 0x2, 0x4, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x1, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x8, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x3, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x5, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0x8, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x1, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0xe287, 0x0, 0x4, 0x0, 0x8, 0xfb, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x12f2fbd3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3ff, 0x2, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x0, 0x7aae62b2, 0x0, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x100, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3, 0x8000000, 0x8, 0x0, 0x2, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x7ff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = memfd_secret(0x80000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', <r3=>0x0, 0x4, 0x2e, 0x1, 0x10000, 0x30, @local, @local, 0x10, 0x40, 0xf3, 0x8d}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250400000008000200020000000800040003000000080002000400000040000180080006000c000000060005004e220000050002000700000008000300e000000208000700", @ANYRES32=r3, @ANYBLOB="140004002001000000000000000000000000000800000000040000006000018014000400fc020000000000000000f7f6000000000500020084000000060005104e2100001400040043233408d870d10900000000000000000000ffffac1410aa08000300ac1414aa060005004e21000014000400fc02000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x48080}, 0x80)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303830303068f46619303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0)
accept$packet(r0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f00000009c0)='./file0\x00', 0x108)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
close(r5)
ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000004c0))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x54, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x8, 0x1, 0x23}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x1000}, @release], 0x0, 0x0, 0x0})

1.96168625s ago: executing program 4 (id=601):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000240)) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
io_setup(0x7, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000012000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[])
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
close_range(r1, 0xffffffffffffffff, 0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, 0x0) (async)
getpid()
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) (async)
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0)

1.906740171s ago: executing program 4 (id=603):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x80000000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f0000000000000000", 0x29}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'xxhash64\x00'}}, 0x0, 0x0)
pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)
ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000002c0)={0x0, 0x0, 0x6})

1.833720592s ago: executing program 4 (id=604):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
lseek(r2, 0x9000000, 0x2) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0})

1.833436062s ago: executing program 4 (id=605):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) (async)
write(r1, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, 0xffffffffffffffff, 0x7fa8c000) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040))

1.833217612s ago: executing program 4 (id=606):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f)
r0 = getpgid(0x0)
r1 = getpgrp(0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x0, 0x80}}}}}]}}]}}, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, r3, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x4008})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
close_range(r4, 0xffffffffffffffff, 0x0)

1.762153894s ago: executing program 2 (id=607):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7fff, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000a9b000/0x4000)=nil, 0x4000, 0x3000001, 0x31, r2, 0x4000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='yeah\x00', 0x5)
syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x400000) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x400000)
mmap$binder(&(0x7f000071a000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) (async)
mmap$binder(&(0x7f000071a000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]})

1.608190096s ago: executing program 2 (id=608):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x540b, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r1, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x8, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10})
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)

949.565386ms ago: executing program 0 (id=613):
io_setup(0x7, &(0x7f0000000080)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0}) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$tipc(r3, &(0x7f00000004c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10)
io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)={r1, r2+10000000}, &(0x7f0000000200)={0x0}) (async)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61783d30303030303030303030303031373737373737373737376ca6"])

602.198561ms ago: executing program 3 (id=614):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) (async)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r1, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) (async)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0)
r4 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1e) (async)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1e)
ioctl$UI_DEV_CREATE(r4, 0x5501) (async)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0})

524.844772ms ago: executing program 3 (id=615):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0)
sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="1fe4fb8d4bb92630783f9b04ee14253df68078d84d99f6b8bcda0ffd8fc767d434d7fe8ef285d13752af661788d2d2bcbb", 0x31}], 0x1, &(0x7f0000000200)=[{0xc0, 0x108, 0x8, "4db646dc0bdec09b534dc5e288ec8e74d72be08b4aab8b94d8e0ab1941da0423aba6b50831b9f0c87b2e8d6fbd138f9d0182b9c024c07a4c4f0f80cf9de4bb00567fb1db511b6ce4264e4b2d67ed6429b526012950db74a80ccf90a14b6a903433ee4f03f177eb8cb8946d965c4552ffdabc269d0e07b9e8e4ffd848c87950ba6815aa1a52e679709c4ca641e68e51ba9760272548b52b92303928702e5924575b7305ed3e8cc4fc7eab95"}, {0x38, 0x1, 0x4, "a274b9879f46b3bf58c600ad37093b8ac78434125e4f644a5b2fc2900ac51be1759851"}, {0x20, 0x107, 0x9, "876fb00e7071cc2e81ca6c6787fda2"}, {0x38, 0x112, 0xb, "4ba2e5e7f8fef2921414b43589843fa124a69ce52abccdba1ba694651f994cf533b5523c"}, {0x48, 0x10e, 0x0, "a2dda885724c33df512e5db6b19bdd41d3cf0715e5eed19a6fd283fff6185cba0bdbfb5e8a8234ae52f5f88cad579b8b98ca968b9b9a51a8"}], 0x198}, 0x4008894)
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x8, 0x9, 0x10}, {0x2, 0x0, 0xc, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x3, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0xdddd1000}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x0, [0x100000, 0x0, 0x2]})
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]})
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r2, 0x4d75d000)

393.682624ms ago: executing program 3 (id=616):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6, 0x6, 0xd6, 0x80, 0x7, 0xa6})

393.199804ms ago: executing program 3 (id=617):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
ppoll(&(0x7f0000000140)=[{r3, 0x2c1}], 0x1, 0x0, 0x0, 0x0)
dup2(r3, r1)
recvmsg$unix(r3, &(0x7f0000000100)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/127, 0x7f}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40000001)

332.054655ms ago: executing program 2 (id=618):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0xa, 0x24, "ed16f0d8f572f84ed5369e6beffc30dd80905b5764a63eb505e557c4e51c11f4efe9dffc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}'])

107.156988ms ago: executing program 0 (id=619):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) (async)
mmap(&(0x7f000098f000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000001c0)=0x7, 0x4) (async, rerun: 32)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)={0x7fffffff, 0x9, 0xa, 0x4, 0x6, 0x0, [{0xa, 0x2, 0x7fff, '\x00', 0x1983}, {0x2, 0x47, 0x4, '\x00', 0x3b0b}, {0xd2, 0x451, 0xe}, {0x8, 0x1444, 0x2, '\x00', 0x404}, {0x1ff, 0x1, 0x5, '\x00', 0x1000}, {0xffffffffffff0001, 0x7, 0x4, '\x00', 0x80}]}) (async, rerun: 32)
io_setup(0x3, &(0x7f0000000040)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
ioprio_set$pid(0x2, 0x0, 0x0) (async)
r3 = eventfd(0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
fallocate(r4, 0x60, 0x0, 0xb19) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300) (async)
io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r5, 0x0, 0x0, 0x10001, 0x0, 0x1, r3}]) (async)
syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x2, 0x1, 0x81, 0x3, 0x908e}}) (async, rerun: 64)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder1\x00'}) (async, rerun: 64)
r9 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x14, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xdfd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x9d, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xb2, 0x9, 0x9}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x1, 0x0, 0x3, 0x8, 0x3}, 0x122, &(0x7f0000000500)={0x5, 0xf, 0x122, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0xc, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x2, 0x6, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6754b852a73086a23c334a0d52999a39"}, @generic={0xea, 0x10, 0x3, "10ae041511850548e2503e52efc03dd1e60356f0cb1ece594a212d99af7fc13e40a919b3279db4c46f70df92ba1fd2c0ff72269737c1bf9580b7b6ce8fd3e196f784457eb799f3d5f4b984f2a54b267f69e688fcd2d1fa1e4d83834725ff7f80c3205e5f1024b5a5636913e18608f9771e40b7f5a86965969e50b6aecef45f789e70641b41b67a6e54848eb1478f886ed8cadf183c63dbbeae55898f01dd791b6d2d8d3d8b7838f1468fdb64817930f06684a49e20380da88c8adec34a4453a21d689da0678a8c7f85647519ae6adf16a98b8b903dfeb7782b9bffb0654052e32eef4178329e0c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x1, 0xa}]}, 0x4, [{0xe9, &(0x7f0000000680)=@string={0xe9, 0x3, "1dfa69074f595db74dd35084ccafc278bee732fc3a83e90a3787be01216ad569b1e40881262c514c5b11aa29077df8452cc386c76935c0342ec2dff0d70e195e86000216d331c1dae69680e0002fefacf3b42f9e3173a3c249114379b511dabd8e4687f6277bf9c3cdfbebc06946c2dc33507386ba6d16498298cd11b713d14f54c90f115e4179b583a99aebc33472a7c565a49bda0cf0d399bfdad7550590b4becb6b3060f5a0362d2c7c77408af42e0020186ca5e9142f8c683f98d5fbb0e2fff42fd933afaf07deff18aefe4dd2e478ec09c6bd6740938a692894b633abc13953849ad774ae"}}, {0x3b, &(0x7f00000002c0)=@string={0x3b, 0x3, "af5ce1b432846e91e80e1e00562bde5a2cf80d80847c45f98c155af9f867bc5b8c2eb91b31c820ad85fadf47cef360db57e2ab48dd68faa0c5"}}, {0x25, &(0x7f0000000300)=@string={0x25, 0x3, "c6324d94279ed1fa82df7a51369a9c7d8b6cb5dfe3fc0056a6002b022fbeee12dc5f49"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42f}}]})
syz_usb_control_io$hid(r9, &(0x7f00000008c0)={0x24, &(0x7f0000000780)={0x0, 0x23, 0xa2, {0xa2, 0x10, "b9788182b1f5b20a4f145fb967cb89ac14e04049a892724cbc2a0013607603d10438f62a4da804a16a8d10293a69871689a59116f84745578b30e2487af15f5e5879909491e379e4e659403b8e8c8690c5897de378e75c2cacfd3a60e9543e25d6becf0efdf6b69562b7b616b3a68b695ac57884655ed6d25e904c6eb2ee262e67781b42f6f2da19f2976c8012c3fe9c2e42482cfe3d54c241281c896ef2befc"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000840)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xa, "a9"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffa, 0x4, 0x1, {0x22, 0xf6b}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0xd3, "8531c216e04a2c20eb2836593431f4831eadcb6ed3c2c1f20d91e0c58ae1c67fef34f5ab9a75211b27ea95740a0baaeab1188db328f2ecef74f3fb6a8ce87d700b717f352219af912e3b0d929504a41d76c4a7f9588c3a89986e6db65f7c6ae391429b2a88c06a892c5cd653f1dfddc5388c60d1f46da58efd8aec3356daf4bc5e9c6a1bf91cd20d86ed0577a745e347ec1644fd3c1da5b1ac902be5587f8e83a619cb886508709b7bb807f13ae90871bd21c5bf167753caca42840c168fb1b5f1479dfc35d18e69cc8f38e9632b6ad13981b3"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000a80)={0x20, 0x1, 0x13, "435fb113d48f8751c9a817bc5b5a0e4b7c7bcf"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x9}}) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))

1.87997ms ago: executing program 0 (id=620):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x3f9882, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1.16053ms ago: executing program 0 (id=621):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0)

1.01226ms ago: executing program 0 (id=622):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000001000000000000000000000080ff00000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0)

0s ago: executing program 0 (id=623):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2)
read(r3, &(0x7f0000000040)=""/8, 0x8)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000002c80)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x78, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x0, 0xfc}, @decrefs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x1101, 0x3}, @flat=@handle={0x73682a85, 0xb, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts.
[   25.566079][   T36] audit: type=1400 audit(1750464323.790:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.567642][  T282] cgroup: Unknown subsys name 'net'
[   25.589403][   T36] audit: type=1400 audit(1750464323.790:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.617067][   T36] audit: type=1400 audit(1750464323.830:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.617308][  T282] cgroup: Unknown subsys name 'devices'
[   25.739823][  T282] cgroup: Unknown subsys name 'hugetlb'
[   25.745596][  T282] cgroup: Unknown subsys name 'rlimit'
[   25.921343][   T36] audit: type=1400 audit(1750464324.150:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.945190][   T36] audit: type=1400 audit(1750464324.150:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.959697][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.970590][   T36] audit: type=1400 audit(1750464324.150:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.003365][   T36] audit: type=1400 audit(1750464324.220:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.027449][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.029821][   T36] audit: type=1400 audit(1750464324.220:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.066508][   T36] audit: type=1400 audit(1750464324.260:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.092253][   T36] audit: type=1400 audit(1750464324.260:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.454627][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.461817][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.469565][  T291] bridge_slave_0: entered allmulticast mode
[   27.475876][  T291] bridge_slave_0: entered promiscuous mode
[   27.484327][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.491972][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.499655][  T291] bridge_slave_1: entered allmulticast mode
[   27.507651][  T291] bridge_slave_1: entered promiscuous mode
[   27.553039][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.560147][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.567294][  T290] bridge_slave_0: entered allmulticast mode
[   27.573642][  T290] bridge_slave_0: entered promiscuous mode
[   27.591263][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.598507][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.605740][  T290] bridge_slave_1: entered allmulticast mode
[   27.612254][  T290] bridge_slave_1: entered promiscuous mode
[   27.638951][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.646477][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.654269][  T292] bridge_slave_0: entered allmulticast mode
[   27.662197][  T292] bridge_slave_0: entered promiscuous mode
[   27.676296][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.683662][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.697674][  T292] bridge_slave_1: entered allmulticast mode
[   27.704883][  T292] bridge_slave_1: entered promiscuous mode
[   27.742349][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.749507][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.756811][  T289] bridge_slave_0: entered allmulticast mode
[   27.763317][  T289] bridge_slave_0: entered promiscuous mode
[   27.770054][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.777465][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.784591][  T289] bridge_slave_1: entered allmulticast mode
[   27.791289][  T289] bridge_slave_1: entered promiscuous mode
[   27.884821][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.892187][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.899858][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.908328][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.994273][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.001396][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.008832][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.016154][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.036017][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.044485][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.051954][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.059727][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.081580][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.088792][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.096608][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.103921][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.160503][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.167902][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.182103][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.189331][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.220846][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.228229][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.236508][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.243801][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.266905][  T291] veth0_vlan: entered promiscuous mode
[   28.285220][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.292567][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.301295][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.308700][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.339978][  T291] veth1_macvtap: entered promiscuous mode
[   28.352832][  T290] veth0_vlan: entered promiscuous mode
[   28.396143][  T289] veth0_vlan: entered promiscuous mode
[   28.409645][  T290] veth1_macvtap: entered promiscuous mode
[   28.418166][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.435988][  T292] veth0_vlan: entered promiscuous mode
[   28.448951][  T289] veth1_macvtap: entered promiscuous mode
[   28.471943][  T292] veth1_macvtap: entered promiscuous mode
[   28.517921][  T311] raw_sendmsg: syz.2.3 forgot to set AF_INET. Fix it!
[   28.531727][  T311] rust_binder: Error while translating object.
[   28.531802][  T311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.539293][  T311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   28.595260][  T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   28.625762][  T323] rust_binder: Error while translating object.
[   28.625803][  T323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.633005][  T323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   28.668771][  T327] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   28.696678][  T331] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.764511][  T339] binder: Unknown parameter ''
[   28.786682][  T312] Bluetooth: hci0: Frame reassembly failed (-84)
[   28.847170][   T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.916065][  T352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'.
[   28.996533][  T356] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   28.997220][  T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   29.017446][   T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.030349][   T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.032525][  T358] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   29.040254][   T65] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   29.058136][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.069366][   T65] usb 2-1: config 0 descriptor??
[   29.130617][  T370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22'.
[   29.140103][  T370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   29.157473][  T329] usb 3-1: Using ep0 maxpacket: 16
[   29.163929][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.175483][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1288, setting to 1024
[   29.188110][  T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   29.201785][  T329] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   29.211452][  T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.221056][  T329] usb 3-1: config 0 descriptor??
[   29.226413][  T337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   29.313186][  T378] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.478026][   T65] playstation 0003:054C:0DF2.0001: item fetching failed at offset 3/5
[   29.493559][   T65] playstation 0003:054C:0DF2.0001: Parse failed
[   29.500655][  T384] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.500780][  T384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   29.507410][   T65] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22
[   29.517159][  T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:51
[   29.638165][  T329] HID 045e:07da: Invalid code 65791 type 1
[   29.657547][  T329] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input4
[   29.678246][  T329] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   29.738624][   T10] usb 2-1: USB disconnect, device number 2
[   29.840476][  T329] usb 3-1: USB disconnect, device number 2
[   30.190385][  T390] rust_binder: Write failure EINVAL in pid:55
[   30.373211][  T405] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   30.456572][  T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19
[   30.465321][  T409] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   30.474555][  T409] rust_binder: Error in use_page_slow: EBUSY
[   30.485535][  T409] rust_binder: use_range failure EBUSY
[   30.491663][  T409] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   30.497334][  T409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   30.507309][  T409] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   30.517209][  T409] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:19
[   30.575067][   T36] kauditd_printk_skb: 89 callbacks suppressed
[   30.575091][   T36] audit: type=1400 audit(1750464328.800:163): avc:  denied  { accept } for  pid=411 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.616253][   T36] audit: type=1400 audit(1750464328.850:164): avc:  denied  { connect } for  pid=411 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   30.683140][   T36] audit: type=1400 audit(1750464328.910:165): avc:  denied  { ioctl } for  pid=411 comm="syz.2.34" path="socket:[3622]" dev="sockfs" ino=3622 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   30.817343][   T36] audit: type=1400 audit(1750464329.040:166): avc:  denied  { write } for  pid=415 comm="syz.0.36" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.853338][  T341] Bluetooth: hci0: command 0x1003 tx timeout
[   30.859595][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   30.890364][   T36] audit: type=1400 audit(1750464329.040:167): avc:  denied  { add_name } for  pid=415 comm="syz.0.36" name="custom1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.945710][   T36] audit: type=1400 audit(1750464329.040:168): avc:  denied  { create } for  pid=415 comm="syz.0.36" name="custom1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.966625][   T36] audit: type=1400 audit(1750464329.040:169): avc:  denied  { associate } for  pid=415 comm="syz.0.36" name="custom1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   30.988787][   T36] audit: type=1400 audit(1750464329.170:170): avc:  denied  { write } for  pid=418 comm="syz.3.37" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   31.154335][  T427] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   31.168373][  T427] rust_binder: Write failure EINVAL in pid:17
[   31.168715][  T427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[   31.190636][   T36] audit: type=1400 audit(1750464329.420:171): avc:  denied  { ioctl } for  pid=428 comm="syz.2.42" path="socket:[3776]" dev="sockfs" ino=3776 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.228667][   T36] audit: type=1400 audit(1750464329.460:172): avc:  denied  { create } for  pid=430 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   31.298252][  T454] fuse: Bad value for 'fd'
[   31.308567][  T456] rust_binder: Error in use_page_slow: ESRCH
[   31.308588][  T456] rust_binder: use_range failure ESRCH
[   31.314879][  T456] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   31.321014][  T456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   31.329049][  T456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74
[   31.385123][  T467] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.387101][  T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.422248][  T472] SELinux: failed to load policy
[   31.557127][  T329] usb 2-1: Using ep0 maxpacket: 16
[   31.563875][  T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.575157][  T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024
[   31.586366][  T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   31.599543][  T329] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   31.608706][  T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.617890][  T329] usb 2-1: config 0 descriptor??
[   31.657168][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.807181][    T9] usb 4-1: Using ep0 maxpacket: 32
[   31.813829][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[   31.825488][    T9] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.837213][    T9] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   31.851149][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   31.858220][    T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   31.869002][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.878817][    T9] usb 4-1: config 0 descriptor??
[   32.033403][  T329] HID 045e:07da: Invalid code 65791 type 1
[   32.044005][  T329] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5
[   32.057132][  T329] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   32.171289][  T485] binder: Bad value for 'max'
[   32.243677][  T489] fuse: Unknown parameter '0x0000000000000003'
[   32.263908][  T489] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[   32.286858][  T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.307798][  T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.319519][  T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.331009][  T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.340938][  T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.354327][  T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.382920][  T474] rust_binder: Write failure EINVAL in pid:35
[   32.388471][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   32.410148][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   32.421737][    T9] usb 4-1: USB disconnect, device number 2
[   32.458157][  T502] binder: Unknown parameter '0x0000000000000000�'
[   32.845314][  T475] usb 2-1: USB disconnect, device number 3
[   32.925273][  T509] rust_binder: Read failure Err(EAGAIN) in pid:37
[   33.206766][  T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63
[   33.213634][  T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63
[   33.305581][  T523] incfs: Error accessing: ./file0.
[   33.320974][  T523] incfs: mount failed -20
[   33.326395][  T523] incfs: Error accessing: ./file0.
[   33.332332][  T523] incfs: mount failed -20
[   33.378731][  T525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[   33.378782][  T525] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   33.390058][  T525] rust_binder: Read failure Err(EFAULT) in pid:14
[   33.390298][  T526] incfs: Error accessing: ./file0.
[   33.424308][  T526] incfs: mount failed -20
[   33.935584][  T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.935629][  T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43
[   33.957522][  T535] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.247094][   T49] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   34.353006][  T549] =======================================================
[   34.353006][  T549] WARNING: The mand mount option has been deprecated and
[   34.353006][  T549]          and is ignored by this kernel. Remove the mand
[   34.353006][  T549]          option from the mount to silence this warning.
[   34.353006][  T549] =======================================================
[   34.421032][  T549] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   34.478638][   T49] usb 4-1: not running at top speed; connect to a high speed hub
[   34.497494][   T49] usb 4-1: config 1 has an invalid interface number: 6 but max is 2
[   34.505775][   T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.538477][   T49] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   34.573796][   T49] usb 4-1: config 1 has no interface number 1
[   34.587171][   T49] usb 4-1: too many endpoints for config 1 interface 6 altsetting 161: 160, using maximum allowed: 30
[   34.589361][  T556] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.612715][   T49] usb 4-1: config 1 interface 6 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 160
[   34.632929][  T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80
[   34.660718][  T558] rust_binder: Error while translating object.
[   34.667119][   T49] usb 4-1: config 1 interface 6 has no altsetting 0
[   34.672887][  T558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.685696][   T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   34.701890][  T558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25
[   34.734375][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.739094][  T562] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[   34.764372][   T49] usb 4-1: Product: syz
[   34.798003][   T49] usb 4-1: Manufacturer: ビⶻ악䢨읖藭唠賥Ḥꥹ妑櫀浿購ሊ﬐ಕ흅獆ŷ搗碎
[   34.817173][   T49] usb 4-1: SerialNumber: syz
[   34.840039][  T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86
[   34.901630][  T575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   34.913794][  T575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36
[   34.925056][  T575] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   34.934906][  T575] rust_binder: Read failure Err(EFAULT) in pid:36
[   34.965801][  T581] __vm_enough_memory: pid: 581, comm: syz.1.92, bytes: 281474976845824 not enough memory for the allocation
[   35.035301][   T49] usb 4-1: 0:2 : does not exist
[   35.044629][   T49] usb 4-1: USB disconnect, device number 3
[   35.147100][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   35.217839][  T495] udevd[495]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.307245][   T31] usb 3-1: Using ep0 maxpacket: 8
[   35.318163][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   35.336262][   T31] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40
[   35.345956][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.354313][   T31] usb 3-1: Product: syz
[   35.358816][   T31] usb 3-1: Manufacturer: ▼㳜㷮璃诰豍쌹懍t櫏쮻헧
[   35.366764][   T31] usb 3-1: SerialNumber: syz
[   35.581570][  T577] rust_binder: Failed copying remainder into alloc: EFAULT
[   35.581604][  T577] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   35.589369][  T577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   35.598057][  T577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:88
[   35.611105][   T31] usbhid 3-1:1.0: can't add hid device: -71
[   35.627107][   T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   35.638682][   T31] usb 3-1: USB disconnect, device number 4
[   35.687105][  T475] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   35.824341][  T475] usb 2-1: device descriptor read/64, error -71
[   36.067163][  T475] usb 2-1: device descriptor read/64, error -71
[   36.129959][   T36] kauditd_printk_skb: 52 callbacks suppressed
[   36.129975][   T36] audit: type=1400 audit(1750464334.360:225): avc:  denied  { bind } for  pid=593 comm="syz.2.97" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.159760][   T36] audit: type=1400 audit(1750464334.360:226): avc:  denied  { name_bind } for  pid=593 comm="syz.2.97" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   36.182322][   T36] audit: type=1400 audit(1750464334.360:227): avc:  denied  { node_bind } for  pid=593 comm="syz.2.97" saddr=fe80::aa src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   36.309529][  T475] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   36.371638][   T36] audit: type=1400 audit(1750464334.600:228): avc:  denied  { getopt } for  pid=598 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.391663][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   36.447179][  T475] usb 2-1: device descriptor read/64, error -71
[   36.515492][  T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61
[   36.554847][   T36] audit: type=1400 audit(1750464334.780:229): avc:  denied  { create } for  pid=606 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   36.587299][   T36] audit: type=1400 audit(1750464334.810:230): avc:  denied  { setattr } for  pid=606 comm="syz.3.102" name="NFC_RAW" dev="sockfs" ino=5330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   36.618150][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.635095][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.645306][   T31] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   36.655171][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.669651][   T31] usb 3-1: config 0 descriptor??
[   36.697163][  T475] usb 2-1: device descriptor read/64, error -71
[   36.719558][   T36] audit: type=1400 audit(1750464334.950:231): avc:  denied  { name_bind } for  pid=612 comm="syz.3.104" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   36.807293][  T475] usb usb2-port1: attempt power cycle
[   36.884613][   T31] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   36.894620][   T31] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   36.908059][  T621] netlink: 'syz.3.106': attribute type 4 has an invalid length.
[   36.917491][   T31] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   36.925598][   T31] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   36.937566][   T31] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   36.951238][   T31] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   37.100264][  T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.100305][  T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:92
[   37.113229][  T630] binder: Unknown parameter 's'
[   37.129897][   T36] audit: type=1400 audit(1750464335.360:232): avc:  denied  { associate } for  pid=629 comm="syz.3.108" name="cpuset.effective_cpus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   37.147167][  T475] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   37.181791][   T36] audit: type=1400 audit(1750464335.410:233): avc:  denied  { write } for  pid=631 comm="syz.3.109" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.188316][  T475] usb 2-1: device descriptor read/8, error -71
[   37.210855][   T36] audit: type=1400 audit(1750464335.440:234): avc:  denied  { map } for  pid=631 comm="syz.3.109" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.238392][   T31] usb 3-1: USB disconnect, device number 5
[   37.278270][  T635] mmap: syz.3.110 (635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   37.299379][  T635] tipc: Started in network mode
[   37.305679][  T635] tipc: Node identity f29e6c3eab3a, cluster identity 4711
[   37.313151][  T635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   37.324142][  T635] syzkaller0: MTU too low for tipc bearer
[   37.330119][  T635] tipc: Disabling bearer <eth:syzkaller0>
[   37.338955][  T475] usb 2-1: device descriptor read/8, error -71
[   37.428930][  T640] rust_binder: Write failure EINVAL in pid:93
[   37.578601][  T475] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   37.607712][  T645] binder: Unknown parameter 'ma2'
[   37.618419][  T475] usb 2-1: device descriptor read/8, error -71
[   37.753873][  T649] process 'syz.3.115' launched './file0' with NULL argv: empty string added
[   37.767156][  T475] usb 2-1: device descriptor read/8, error -71
[   37.855700][  T654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.868640][  T654] rust_binder: Error while translating object.
[   37.868677][  T654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   37.875575][  T654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100
[   37.878602][  T475] usb usb2-port1: unable to enumerate USB device
[   38.147209][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   38.307097][   T31] usb 3-1: Using ep0 maxpacket: 32
[   38.313619][   T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   38.322103][   T31] usb 3-1: config 0 has no interface number 0
[   38.330590][   T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   38.340275][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.350012][   T31] usb 3-1: Product: syz
[   38.355064][   T31] usb 3-1: Manufacturer: syz
[   38.360294][   T31] usb 3-1: SerialNumber: syz
[   38.369089][   T31] usb 3-1: config 0 descriptor??
[   38.377612][   T31] smsc95xx v2.0.0
[   38.783378][  T671] rust_binder: Write failure EFAULT in pid:111
[   38.805086][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   38.831780][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   38.852084][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   38.873556][   T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   38.894706][   T31] usb 3-1: USB disconnect, device number 6
[   39.197128][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   39.348394][   T31] usb 3-1: config 1 has an invalid interface number: 216 but max is 1
[   39.357147][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.368003][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   39.377426][   T31] usb 3-1: config 1 has no interface number 0
[   39.383886][   T31] usb 3-1: too many endpoints for config 1 interface 216 altsetting 140: 114, using maximum allowed: 30
[   39.396076][   T31] usb 3-1: config 1 interface 216 altsetting 140 has 0 endpoint descriptors, different from the interface descriptor's value: 114
[   39.410083][   T31] usb 3-1: config 1 interface 216 has no altsetting 0
[   39.418926][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   39.428587][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.436902][   T31] usb 3-1: Product: syz
[   39.441433][   T31] usb 3-1: Manufacturer: syz
[   39.446335][   T31] usb 3-1: SerialNumber: syz
[   39.788779][  T702] rust_binder: Error while translating object.
[   39.788834][  T702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.796281][  T702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124
[   39.818948][  T705] usb usb8: usbfs: process 705 (syz.1.133) did not claim interface 0 before use
[   39.925508][  T721] rust_binder: 713 RLIMIT_NICE not set
[   40.006009][  T726] Zero length message leads to an empty skb
[   40.059379][  T678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.059443][  T678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[   40.069926][  T475] usb 3-1: USB disconnect, device number 7
[   40.177097][   T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   40.327088][   T31] usb 4-1: Using ep0 maxpacket: 32
[   40.333595][   T31] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16
[   40.343964][   T31] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.357326][   T31] usb 4-1: config 1 interface 0 has no altsetting 0
[   40.365685][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   40.375192][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.383451][   T31] usb 4-1: Product: syz
[   40.388089][   T31] usb 4-1: Manufacturer: syz
[   40.392781][   T31] usb 4-1: SerialNumber: syz
[   40.399104][  T723] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   40.664454][  T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.676148][  T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.819341][   T31] usb 4-1: USB disconnect, device number 4
[   40.867098][   T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   40.891812][  T731] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   40.899338][  T731] rust_binder: Write failure EINVAL in pid:78
[   40.911560][  T731] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   40.917856][  T731] rust_binder: Read failure Err(EFAULT) in pid:78
[   41.018206][   T65] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   41.036551][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.049388][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.059808][   T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   41.075202][   T65] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   41.085187][   T65] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   41.095100][   T65] usb 3-1: Manufacturer: syz
[   41.101662][   T65] usb 3-1: config 0 descriptor??
[   41.187228][  T329] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   41.340895][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   41.340917][   T36] audit: type=1400 audit(1750464339.570:245): avc:  denied  { accept } for  pid=734 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   41.512925][   T65] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[   41.520639][   T65] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[   41.530742][   T65] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   41.717220][  T475] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   41.878692][  T475] usb 4-1: unable to get BOS descriptor or descriptor too short
[   41.887381][  T475] usb 4-1: not running at top speed; connect to a high speed hub
[   41.896273][  T475] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.906876][  T475] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.918290][  T475] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   41.927842][  T475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.936152][  T475] usb 4-1: Product: syz
[   41.942327][  T475] usb 4-1: Manufacturer: syz
[   41.950538][  T475] usb 4-1: SerialNumber: syz
[   42.937120][  T307] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   44.053961][   T36] audit: type=1400 audit(1750464342.280:246): avc:  denied  { append } for  pid=750 comm="syz.2.148" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   44.061475][  T756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=756 comm=syz.1.149
[   44.087503][  T754] random: crng reseeded on system resumption
[   44.119791][   T36] audit: type=1400 audit(1750464342.310:247): avc:  denied  { open } for  pid=750 comm="syz.2.148" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   44.137579][  T756] rust_binder: Failed to allocate buffer. len:18446744073709550768, is_oneway:true
[   44.143302][  T756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   44.177179][  T756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:82
[   44.437960][    T9] usb 3-1: USB disconnect, device number 8
[   45.217794][  T761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88
[   45.273302][   T36] audit: type=1326 audit(1750464343.500:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.277842][  T763] binder: Bad value for 'context'
[   45.293064][   T36] audit: type=1326 audit(1750464343.500:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.364908][   T36] audit: type=1326 audit(1750464343.500:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.414366][   T36] audit: type=1326 audit(1750464343.500:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.467076][   T36] audit: type=1326 audit(1750464343.500:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.507094][   T36] audit: type=1326 audit(1750464343.500:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   45.530744][   T36] audit: type=1326 audit(1750464343.510:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f20fd18e929 code=0x7ffc0000
[   46.357142][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   46.357160][   T36] audit: type=1400 audit(1750464344.580:263): avc:  denied  { map } for  pid=779 comm="syz.0.158" path="socket:[7379]" dev="sockfs" ino=7379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.387577][   T36] audit: type=1400 audit(1750464344.610:264): avc:  denied  { read accept } for  pid=779 comm="syz.0.158" path="socket:[7379]" dev="sockfs" ino=7379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.473800][  T784] tipc: Started in network mode
[   46.479321][  T784] tipc: Node identity 161ed7a7b52, cluster identity 4711
[   46.497449][  T784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.525926][  T785] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   46.531913][  T782] tipc: Disabling bearer <eth:syzkaller0>
[   46.681288][   T36] audit: type=1400 audit(1750464344.910:265): avc:  denied  { create } for  pid=790 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   46.761669][  T800] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   46.823775][   T36] audit: type=1400 audit(1750464345.050:266): avc:  denied  { getopt } for  pid=801 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.936411][   T36] audit: type=1400 audit(1750464345.160:267): avc:  denied  { ioctl } for  pid=801 comm="syz.0.166" path="socket:[6769]" dev="sockfs" ino=6769 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.993640][  T475] usb 4-1: 0:2 : does not exist
[   47.000672][  T805] rust_binder: Error while translating object.
[   47.000699][  T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.006967][  T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101
[   47.053980][   T36] audit: type=1326 audit(1750464345.280:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=810 comm="syz.2.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad778e929 code=0x0
[   47.096691][   T36] audit: type=1326 audit(1750464345.280:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=810 comm="syz.2.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad778e929 code=0x0
[   47.244124][  T825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113
[   47.404484][  T834] binder: Bad value for 'stats'
[   47.473137][   T36] audit: type=1400 audit(1750464345.700:270): avc:  denied  { name_bind } for  pid=843 comm="syz.2.179" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   47.626201][   T36] audit: type=1400 audit(1750464345.850:271): avc:  denied  { bind } for  pid=858 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   47.981884][   T36] audit: type=1400 audit(1750464346.210:272): avc:  denied  { map } for  pid=877 comm="syz.2.191" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   48.217734][  T475] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   48.347076][  T307] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   48.378613][  T475] usb 2-1: config index 0 descriptor too short (expected 48042, got 36)
[   48.397079][  T475] usb 2-1: config 170 has too many interfaces: 170, using maximum allowed: 32
[   48.416684][  T475] usb 2-1: config 170 has an invalid descriptor of length 187, skipping remainder of the config
[   48.437072][  T475] usb 2-1: config 170 has 0 interfaces, different from the descriptor's value: 170
[   48.456701][  T475] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   48.476895][  T475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.507088][  T307] usb 3-1: Using ep0 maxpacket: 16
[   48.518239][  T307] usb 3-1: unable to get BOS descriptor or descriptor too short
[   48.537459][  T307] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[   48.548081][  T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   48.567135][  T307] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   48.599088][  T307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   48.608353][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.616530][  T307] usb 3-1: Product: syz
[   48.621664][  T307] usb 3-1: Manufacturer: syz
[   48.626543][  T307] usb 3-1: SerialNumber: syz
[   48.730195][  T875] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   48.743909][  T875] KVM: debugfs: duplicate directory 875-5
[   48.786703][  T875] capability: warning: `syz.1.190' uses deprecated v2 capabilities in a way that may be insecure
[   48.806262][  T475] usb 2-1: string descriptor 0 read error: -71
[   48.832777][  T475] usb 2-1: USB disconnect, device number 9
[   48.864111][  T307] cdc_ncm 3-1:1.0: skipping garbage
[   48.877099][  T307] cdc_ncm 3-1:1.0: skipping garbage
[   48.883131][  T307] cdc_ncm 3-1:1.0: skipping garbage
[   48.907174][  T307] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[   48.914593][  T307] cdc_ncm 3-1:1.0: bind() failure
[   48.938464][  T307] usb 3-1: USB disconnect, device number 9
[   49.129759][  T307] usb 4-1: USB disconnect, device number 5
[   49.171049][  T890] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   49.181320][  T890] rust_binder: Write failure EINVAL in pid:134
[   49.515149][  T940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   49.522641][  T940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117
[   49.590993][  T949] tun0: tun_chr_ioctl cmd 1074025675
[   49.606084][  T949] tun0: persist disabled
[   49.651993][  T953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   49.690124][  T958] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.711892][  T956] block device autoloading is deprecated and will be removed.
[   49.726467][  T956] syz.0.206: attempt to access beyond end of device
[   49.726467][  T956] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   49.743322][  T960] rust_binder: Error while translating object.
[   49.743355][  T960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   49.750345][  T960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:127
[   49.760988][  T960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[   49.997161][  T307] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   50.029162][  T964] rust_binder: Error while translating object.
[   50.029192][  T964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.035517][  T964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151
[   50.137363][  T307] usb 1-1: device descriptor read/64, error -71
[   50.384122][  T973] overlay: filesystem on ./bus is read-only
[   50.390375][  T307] usb 1-1: device descriptor read/64, error -71
[   50.532200][  T475] kernel write not supported for file /190/setgroups (pid: 475 comm: kworker/0:3)
[   50.627199][  T307] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   50.757302][  T307] usb 1-1: device descriptor read/64, error -71
[   50.997334][  T307] usb 1-1: device descriptor read/64, error -71
[   51.107217][  T307] usb usb1-port1: attempt power cycle
[   51.336939][ T1013] binder: Bad value for 'stats'
[   51.342611][ T1013] binder: Bad value for 'stats'
[   51.348725][ T1013] binder: Bad value for 'stats'
[   51.354329][ T1013] binder: Bad value for 'stats'
[   51.366391][ T1013] binder: Bad value for 'stats'
[   51.372170][ T1013] binder: Bad value for 'stats'
[   51.378167][ T1013] binder: Bad value for 'stats'
[   51.383266][ T1013] binder: Bad value for 'stats'
[   51.388471][ T1013] binder: Bad value for 'stats'
[   51.395413][ T1013] binder: Bad value for 'stats'
[   51.401540][ T1013] binder: Bad value for 'stats'
[   51.406767][ T1013] binder: Bad value for 'stats'
[   51.412570][ T1013] binder: Bad value for 'stats'
[   51.418364][ T1013] binder: Bad value for 'stats'
[   51.424112][ T1013] binder: Bad value for 'stats'
[   51.429618][ T1013] binder: Bad value for 'stats'
[   51.435237][ T1013] binder: Bad value for 'stats'
[   51.447131][  T307] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   51.447200][ T1013] binder: Bad value for 'stats'
[   51.467389][ T1013] binder: Bad value for 'stats'
[   51.472654][ T1013] binder: Bad value for 'stats'
[   51.473590][ T1017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.478881][ T1013] binder: Bad value for 'stats'
[   51.492987][ T1017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.493758][  T307] usb 1-1: device descriptor read/8, error -71
[   51.503212][ T1013] binder: Bad value for 'stats'
[   51.512826][ T1013] binder: Bad value for 'stats'
[   51.518988][ T1013] binder: Bad value for 'stats'
[   51.524300][ T1013] binder: Bad value for 'stats'
[   51.530840][ T1013] binder: Bad value for 'stats'
[   51.536323][ T1013] binder: Bad value for 'stats'
[   51.542898][ T1013] binder: Bad value for 'stats'
[   51.549319][ T1013] binder: Bad value for 'stats'
[   51.554715][ T1013] binder: Bad value for 'stats'
[   51.560486][ T1013] binder: Bad value for 'stats'
[   51.566379][ T1013] binder: Bad value for 'stats'
[   51.572580][ T1013] binder: Bad value for 'stats'
[   51.639578][  T307] usb 1-1: device descriptor read/8, error -71
[   51.707152][  T329] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[   51.731986][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   51.732003][   T36] audit: type=1326 audit(1750464349.960:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faad778e929 code=0x0
[   51.833654][ T1025] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   51.867133][  T329] usb 4-1: Invalid ep0 maxpacket: 32
[   51.907176][  T307] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   51.928578][  T307] usb 1-1: device descriptor read/8, error -71
[   52.007132][  T329] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[   52.058614][  T307] usb 1-1: device descriptor read/8, error -71
[   52.157156][  T329] usb 4-1: Invalid ep0 maxpacket: 32
[   52.163477][  T329] usb usb4-port1: attempt power cycle
[   52.177407][  T307] usb usb1-port1: unable to enumerate USB device
[   52.507195][  T329] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[   52.527477][  T329] usb 4-1: Invalid ep0 maxpacket: 32
[   52.657213][  T329] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[   52.668291][ T1033] x_tables: duplicate underflow at hook 1
[   52.678815][  T329] usb 4-1: Invalid ep0 maxpacket: 32
[   52.685489][  T329] usb usb4-port1: unable to enumerate USB device
[   52.749684][   T36] audit: type=1326 audit(1750464350.980:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.777400][   T36] audit: type=1326 audit(1750464350.980:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.802571][   T36] audit: type=1326 audit(1750464350.980:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.827510][   T36] audit: type=1326 audit(1750464351.010:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.853415][   T36] audit: type=1326 audit(1750464351.010:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.876751][ T1040] rust_binder: Error while translating object.
[   52.878690][ T1040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   52.878894][   T36] audit: type=1326 audit(1750464351.010:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1bdabc11e5 code=0x7ffc0000
[   52.885759][ T1040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:184
[   52.897315][   T36] audit: type=1326 audit(1750464351.010:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   52.935063][ T1041] rust_binder: inc_ref_done called when no active inc_refs
[   52.951415][   T36] audit: type=1326 audit(1750464351.010:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1034 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdab8e929 code=0x7ffc0000
[   53.011282][   T36] audit: type=1326 audit(1750464351.010:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1bdabc11e5 code=0x7ffc0000
[   53.595419][ T1052] block device autoloading is deprecated and will be removed.
[   53.605427][ T1052] syz.2.239: attempt to access beyond end of device
[   53.605427][ T1052] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   53.915619][ T1077] binder: Bad value for 'stats'
[   53.942967][ T1080] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   54.080592][  T312] bridge_slave_1: left allmulticast mode
[   54.095229][  T312] bridge_slave_1: left promiscuous mode
[   54.101513][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.110344][  T312] bridge_slave_0: left allmulticast mode
[   54.116188][  T312] bridge_slave_0: left promiscuous mode
[   54.122001][  T475] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   54.130046][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.260126][  T312] tipc: Left network mode
[   54.269489][  T312] veth1_macvtap: left promiscuous mode
[   54.275447][  T312] veth0_vlan: left promiscuous mode
[   54.288843][  T475] usb 1-1: config 0 has an invalid interface number: 230 but max is 0
[   54.297429][  T475] usb 1-1: config 0 has no interface number 0
[   54.304529][  T475] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   54.315899][  T475] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   54.328006][  T475] usb 1-1: config 0 interface 230 has no altsetting 0
[   54.337395][  T475] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   54.346797][  T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.365018][  T475] usb 1-1: Product: syz
[   54.371873][  T475] usb 1-1: Manufacturer: syz
[   54.381641][  T475] usb 1-1: SerialNumber: syz
[   54.391003][  T475] usb 1-1: config 0 descriptor??
[   54.398136][ T1075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.406799][ T1075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.416655][  T475] ums-usbat 1-1:0.230: USB Mass Storage device detected
[   54.426915][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.436619][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.444723][ T1083] bridge_slave_0: entered allmulticast mode
[   54.444801][  T475] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1
[   54.460151][ T1083] bridge_slave_0: entered promiscuous mode
[   54.467070][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.474897][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.482495][ T1083] bridge_slave_1: entered allmulticast mode
[   54.489183][ T1083] bridge_slave_1: entered promiscuous mode
[   54.590391][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.598146][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.606023][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.613364][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.616957][ T1099] SELinux: security_context_str_to_sid () failed with errno=-22
[   54.634282][ T1097] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   54.649825][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.686967][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.708828][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.716134][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.724694][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.732112][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.772257][ T1107] rust_binder: Write failure EINVAL in pid:246
[   54.777146][ T1083] veth0_vlan: entered promiscuous mode
[   54.802974][ T1083] veth1_macvtap: entered promiscuous mode
[   54.850982][ T1115] rust_binder: Write failure EFAULT in pid:2
[   54.921939][ T1122] tmpfs: Bad value for 'nr_blocks'
[   54.934312][ T1122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[   54.934501][ T1117] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   54.944659][ T1117] rust_binder: Error in use_page_slow: EBUSY
[   54.956558][ T1117] rust_binder: use_range failure EBUSY
[   54.963857][ T1117] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   54.970886][ T1117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   54.979294][ T1117] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   54.990947][ T1117] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:5
[   55.104406][ T1127] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   55.113961][ T1127] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[   55.126100][ T1127] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[   55.157345][  T329] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   55.327140][  T329] usb 3-1: Using ep0 maxpacket: 16
[   55.334157][  T329] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[   55.342794][  T329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   55.353147][  T329] usb 3-1: config 0 has no interface number 0
[   55.361674][  T329] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   55.371189][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.379475][  T329] usb 3-1: Product: syz
[   55.383760][  T329] usb 3-1: Manufacturer: syz
[   55.388829][  T329] usb 3-1: SerialNumber: syz
[   55.394843][  T329] usb 3-1: config 0 descriptor??
[   55.398614][  T307] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   55.402046][  T329] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[   55.414515][  T329] usb 3-1: No valid video chain found.
[   55.557134][  T307] usb 5-1: Using ep0 maxpacket: 16
[   55.564669][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.576350][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.587435][  T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   55.601917][  T307] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   55.611770][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.615576][  T329] usb 3-1: USB disconnect, device number 10
[   55.629353][  T307] usb 5-1: config 0 descriptor??
[   55.841638][  T307] usbhid 5-1:0.0: can't add hid device: -32
[   55.847942][  T307] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[   55.999936][ T1136] rust_binder: Read failure Err(EFAULT) in pid:183
[   56.060110][ T1141] 9pnet_fd: Insufficient options for proto=fd
[   56.077817][ T1141] rust_binder: Failed copying remainder into alloc: EFAULT
[   56.077844][ T1141] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   56.086029][ T1141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   56.095485][ T1141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187
[   56.147173][ T1146] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.262052][ T1151] tipc: Cannot configure node identity twice
[   56.407185][  T329] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   56.559426][  T329] usb 3-1: unable to get BOS descriptor or descriptor too short
[   56.568527][  T329] usb 3-1: config 1 interface 0 has no altsetting 0
[   56.577765][  T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   56.588221][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.598403][  T329] usb 3-1: Product: syz
[   56.603009][  T329] usb 3-1: Manufacturer: 䡢斠谦垽먂ៃ區얮︅ꏜꑂ™Ѽナ쟼₤ﭱ뤉淤蘴 ்ꧦ㭟롒䬱婟唋ᶻ됚晴涸♺❑﹚ﶷ蠈礧瓶롆븍甗蟋仆旄⊧頾넂﯅춳監欃䜕쯎⅔蝡伛꾻উ톅䀜⃧毥䗱恻䌜掏衑賖⮯肆Ȇ鸜ూ攮걎저
[   56.633096][  T329] usb 3-1: SerialNumber: syz
[   56.748722][  T475] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5
[   56.892431][ T1162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256
[   57.799261][    T9] usb 5-1: USB disconnect, device number 2
[   57.843057][ T1171] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   57.891890][   T65] usb 1-1: USB disconnect, device number 6
[   57.964165][ T1179] input: syz0 as /devices/virtual/input/input7
[   57.976628][   T36] kauditd_printk_skb: 37 callbacks suppressed
[   57.976649][   T36] audit: type=1400 audit(1750464356.200:337): avc:  denied  { setattr } for  pid=1180 comm="syz.0.282" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[   58.009261][ T1179] incfs: Options parsing error. -22
[   58.015429][ T1179] incfs: mount failed -22
[   58.021734][   T36] audit: type=1400 audit(1750464356.260:338): avc:  denied  { map } for  pid=1178 comm="syz.4.281" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.075486][   T36] audit: type=1400 audit(1750464356.300:339): avc:  denied  { read } for  pid=1182 comm="syz.4.284" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   58.128204][   T36] audit: type=1400 audit(1750464356.300:340): avc:  denied  { open } for  pid=1182 comm="syz.4.284" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   58.158525][   T36] audit: type=1400 audit(1750464356.300:341): avc:  denied  { ioctl } for  pid=1182 comm="syz.4.284" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   58.197422][   T36] audit: type=1400 audit(1750464356.390:342): avc:  denied  { create } for  pid=1186 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   58.201384][ T1168] overlayfs: statfs failed on './file0'
[   58.261487][ T1195] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.261869][ T1195] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   58.283595][ T1195] rust_binder: Write failure EINVAL in pid:214
[   58.357209][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   58.470632][ T1213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   58.470659][ T1213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:237
[   58.517164][    T9] usb 5-1: Using ep0 maxpacket: 16
[   58.543628][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.555649][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   58.566965][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.578854][    T9] usb 5-1: config 0 descriptor??
[   58.647339][   T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   58.787624][    T9] hid-generic 0003:04D8:00DD.0006: unknown main item tag 0x7
[   58.796024][    T9] hid-generic 0003:04D8:00DD.0006: item fetching failed at offset 4/5
[   58.807214][   T65] usb 4-1: Using ep0 maxpacket: 16
[   58.811735][    T9] hid-generic 0003:04D8:00DD.0006: probe with driver hid-generic failed with error -22
[   58.820101][   T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8
[   58.826678][    T9] usb 5-1: USB disconnect, device number 3
[   58.839411][   T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   58.850600][  T475] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   58.870626][   T65] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   58.898365][   T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.908758][   T65] usb 4-1: config 0 descriptor??
[   59.018428][  T475] usb 1-1: config 0 has an invalid interface number: 9 but max is 0
[   59.038710][  T475] usb 1-1: config 0 has no interface number 0
[   59.045904][  T475] usb 1-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0
[   59.057087][  T475] usb 1-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1
[   59.072404][  T475] usb 1-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[   59.085822][  T475] usb 1-1: config 0 interface 9 has no altsetting 0
[   59.095384][  T475] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[   59.105302][  T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.115106][  T475] usb 1-1: Product: syz
[   59.120715][  T475] usb 1-1: Manufacturer: syz
[   59.126089][  T475] usb 1-1: SerialNumber: syz
[   59.132299][  T475] usb 1-1: config 0 descriptor??
[   59.154794][ T1239] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0
[   59.154871][ T1239] rust_binder: Error while translating object.
[   59.165106][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.172123][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[   59.237904][   T36] audit: type=1400 audit(1750464357.470:343): avc:  denied  { create } for  pid=1242 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   59.289337][  T329] usb 3-1: USB disconnect, device number 11
[   59.301487][ T1248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   59.301518][ T1248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:259
[   59.323813][   T65] HID 045e:07da: Invalid code 65791 type 1
[   59.366841][   T65] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input8
[   59.386011][   T65] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   59.388396][  T475] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected
[   59.402821][ T1255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.308'.
[   59.417106][ T1256] rust_binder: got new transaction with bad transaction stack
[   59.418440][ T1256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262
[   59.445317][  T475] usb 1-1: Detected SIO
[   59.479358][  T475] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6
[   59.490260][   T36] audit: type=1400 audit(1750464357.710:344): avc:  denied  { shutdown } for  pid=1259 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   59.503665][ T1260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   59.515491][  T475] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   59.553992][  T475] usb 1-1: USB disconnect, device number 7
[   59.562418][  T475] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   59.577489][  T475] ftdi_sio 1-1:0.9: device disconnected
[   59.639074][   T36] audit: type=1326 audit(1750464357.870:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1262 comm="syz.2.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad778e929 code=0x0
[   59.732046][ T1266] rust_binder: Write failure EINVAL in pid:57
[   59.852330][   T36] audit: type=1400 audit(1750464358.080:346): avc:  denied  { append } for  pid=1273 comm="syz.4.314" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   60.028552][ T1283] rust_binder: Write failure EINVAL in pid:66
[   60.059338][ T1291] binder: Unknown parameter 'smackfsroot'
[   60.078016][ T1291] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   60.105789][ T1294] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 231)
[   60.105822][ T1294] rust_binder: Error while translating object.
[   60.118059][ T1294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.124726][ T1294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72
[   60.153214][   T65] usb 4-1: USB disconnect, device number 10
[   60.189934][ T1299] overlayfs: missing 'workdir'
[   60.195798][ T1299] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   60.195798][ T1300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   60.195824][ T1300] overlayfs: missing 'lowerdir'
[   60.219147][ T1299] overlayfs: missing 'lowerdir'
[   60.229216][ T1300] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   60.297176][  T329] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   60.431047][ T1304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   60.431073][ T1304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:81
[   60.458521][  T329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   60.480947][  T329] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[   60.491234][  T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.500089][  T329] usb 1-1: Product: syz
[   60.504795][  T329] usb 1-1: Manufacturer: syz
[   60.516089][  T329] usb 1-1: SerialNumber: syz
[   60.523739][  T329] usb 1-1: config 0 descriptor??
[   60.530953][  T329] cdc_acm 1-1:0.0: skipping garbage
[   60.554104][ T1311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277
[   60.759464][ T1325] rust_binder: Write failure EFAULT in pid:230
[   60.769620][ T1326] rust_binder: Write failure EFAULT in pid:230
[   60.806961][  T329] usb 1-1: USB disconnect, device number 8
[   60.875750][ T1337] fuse: Bad value for 'group_id'
[   60.881660][ T1337] fuse: Bad value for 'group_id'
[   60.887764][ T1337] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.947846][ T1348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291
[   60.958725][ T1348] rust_binder: Read failure Err(EFAULT) in pid:291
[   61.077180][  T307] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   61.227115][   T65] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   61.235442][  T329] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   61.237887][  T307] usb 4-1: not running at top speed; connect to a high speed hub
[   61.253034][  T307] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   61.266524][  T307] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   61.280190][  T307] usb 4-1: config 1 interface 0 has no altsetting 0
[   61.288773][  T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.298591][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.308241][  T307] usb 4-1: Manufacturer: 䐊
[   61.315318][  T307] usb 4-1: SerialNumber: 팮₦鸁塵轲⨨赦⥢笠濊녀ཊ㌏搹좤㝱鈒窂싁ꀳ觻糧ᾢͲ닉팟ᠹ巑䀀깐ꈇꘜ㸶䍚鉉熅䢃괺諭ᵽ옋猌⚰餾ᑶ뉤
[   61.318488][ T1356] rust_binder: Failed to allocate buffer. len:18446744073709551072, is_oneway:false
[   61.335809][ T1356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   61.337216][ T1328] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   61.348249][ T1356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:86
[   61.359053][ T1328] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   61.387200][  T329] usb 1-1: Using ep0 maxpacket: 16
[   61.395335][   T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.406766][  T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 8
[   61.419306][   T65] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   61.430430][  T329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   61.444753][   T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   61.454933][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.463924][  T329] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   61.473819][  T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.483694][   T65] usb 3-1: config 0 descriptor??
[   61.491377][  T329] usb 1-1: config 0 descriptor??
[   61.808248][ T1328] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   61.808310][ T1328] rust_binder: Error in use_page_slow: EBUSY
[   61.823361][ T1328] rust_binder: use_range failure EBUSY
[   61.830732][ T1328] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   61.838544][ T1328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   61.848252][ T1328] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   61.859697][ T1328] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:233
[   61.879237][  T307] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   61.899299][  T307] usb 4-1: USB disconnect, device number 11
[   61.910150][  T329] HID 045e:07da: Invalid code 65791 type 1
[   61.921592][  T329] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input9
[   61.941987][  T329] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   62.367204][  T307] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   62.406134][  T329] usb 3-1: USB disconnect, device number 12
[   62.518898][  T307] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[   62.528444][  T307] usb 5-1: config 0 has no interface number 0
[   62.535376][  T307] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   62.548654][  T307] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   62.562316][  T307] usb 5-1: config 0 interface 230 has no altsetting 0
[   62.568109][ T1382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   62.581466][ T1382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   62.591950][  T307] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   62.602339][  T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.612275][  T307] usb 5-1: Product: syz
[   62.617656][  T307] usb 5-1: Manufacturer: syz
[   62.623480][  T307] usb 5-1: SerialNumber: syz
[   62.633480][  T307] usb 5-1: config 0 descriptor??
[   62.639667][ T1366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   62.648249][ T1366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   62.670047][  T307] ums-usbat 5-1:0.230: USB Mass Storage device detected
[   62.684683][  T307] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[   62.719953][  T329] usb 1-1: USB disconnect, device number 9
[   62.889762][ T1391] binder: Unknown parameter 'context'
[   62.930225][ T1395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[   63.240516][   T36] kauditd_printk_skb: 65 callbacks suppressed
[   63.240537][   T36] audit: type=1400 audit(1750464361.470:412): avc:  denied  { mounton } for  pid=1397 comm="syz.0.353" path="/81" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   63.284561][   T36] audit: type=1400 audit(1750464361.470:413): avc:  denied  { mount } for  pid=1397 comm="syz.0.353" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   63.308375][   T36] audit: type=1400 audit(1750464361.480:414): avc:  denied  { create } for  pid=1397 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.328972][   T36] audit: type=1400 audit(1750464361.480:415): avc:  denied  { setopt } for  pid=1397 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.371745][   T36] audit: type=1400 audit(1750464361.600:416): avc:  denied  { create } for  pid=1399 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.374736][ T1400] rust_binder: Error while translating object.
[   63.394950][ T1400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   63.395457][   T36] audit: type=1400 audit(1750464361.600:417): avc:  denied  { ioctl } for  pid=1399 comm="syz.3.354" path="socket:[14589]" dev="sockfs" ino=14589 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.401832][ T1400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:242
[   63.440218][   T36] audit: type=1400 audit(1750464361.600:418): avc:  denied  { map } for  pid=1399 comm="syz.3.354" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   63.486936][   T36] audit: type=1400 audit(1750464361.600:419): avc:  denied  { call } for  pid=1399 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   63.504367][ T1402] fuse: Bad value for 'fd'
[   63.510783][   T36] audit: type=1400 audit(1750464361.600:420): avc:  denied  { transfer } for  pid=1399 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   63.536256][   T36] audit: type=1400 audit(1750464361.720:421): avc:  denied  { read write } for  pid=1401 comm="syz.3.355" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   63.567084][  T475] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   63.616990][ T1405] rust_binder: Error while translating object.
[   63.617086][ T1405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   63.623968][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310
[   63.740478][  T475] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   63.764408][  T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   63.777366][  T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   63.829881][  T475] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   63.847942][  T475] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   63.853323][ T1413] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   63.863693][ T1413] rust_binder: Error while translating object.
[   63.864379][  T475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.874174][ T1413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.882091][  T475] usb 1-1: config 0 descriptor??
[   63.890192][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106
[   64.082754][ T1418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   64.093023][ T1418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:112
[   64.183364][ T1428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252
[   64.302628][  T475] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max
[   64.323582][  T475] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   64.333733][  T475] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   64.789435][ T1446] capability: warning: `syz.2.370' uses 32-bit capabilities (legacy support in use)
[   64.821616][ T1448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'.
[   64.831480][ T1448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'.
[   65.008773][  T307] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[   65.022333][  T307] usb 5-1: USB disconnect, device number 4
[   65.258165][ T1464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343
[   65.258207][ T1464] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   65.268247][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343
[   65.276857][ T1466] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   65.280088][ T1468] __vm_enough_memory: pid: 1468, comm: syz.3.379, bytes: 281474976845824 not enough memory for the allocation
[   65.287800][ T1464] rust_binder: Read failure Err(EFAULT) in pid:343
[   65.308625][ T1466] rust_binder: Read failure Err(EFAULT) in pid:343
[   65.327095][  T307] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   65.497293][  T307] usb 5-1: Using ep0 maxpacket: 16
[   65.504549][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 29, changing to 8
[   65.516521][  T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   65.530029][  T307] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   65.539175][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.548336][  T307] usb 5-1: config 0 descriptor??
[   65.587112][   T49] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   65.737112][   T49] usb 4-1: Using ep0 maxpacket: 32
[   65.737173][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   65.743711][   T49] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[   65.758560][   T49] usb 4-1: config 0 has no interface number 0
[   65.764911][   T49] usb 4-1: config 0 interface 49 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   65.776156][   T49] usb 4-1: config 0 interface 49 has no altsetting 0
[   65.785193][   T49] usb 4-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19
[   65.794589][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.802846][   T49] usb 4-1: Product: syz
[   65.807586][   T49] usb 4-1: Manufacturer: syz
[   65.812299][   T49] usb 4-1: SerialNumber: syz
[   65.818291][   T49] usb 4-1: config 0 descriptor??
[   65.907230][   T10] usb 3-1: Using ep0 maxpacket: 32
[   65.915785][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   65.927835][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   65.938618][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[   65.948912][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   65.963312][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   65.972630][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.982988][  T307] HID 045e:07da: Invalid code 65791 type 1
[   65.992309][  T307] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input10
[   66.005430][   T10] usb 3-1: config 0 descriptor??
[   66.011820][ T1480] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   66.021767][  T307] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   66.136748][  T307] usb 4-1: USB disconnect, device number 12
[   66.221373][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   66.304914][ T1494] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.305156][ T1494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281
[   66.313094][ T1495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.313353][ T1496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281
[   66.367878][  T475] usb 1-1: USB disconnect, device number 10
[   66.456843][ T1500] overlay: Unknown parameter 'smackfstransmute'
[   66.465431][ T1500] overlayfs: overlapping lowerdir path
[   66.487962][ T1505] random: crng reseeded on system resumption
[   66.519527][ T1505] binder: Bad value for 'stats'
[   66.573741][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.585647][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.595478][ T1512] SELinux: security_context_str_to_sid () failed with errno=-22
[   66.607312][ T1516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.617303][ T1516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.634044][  T475] usb 3-1: USB disconnect, device number 13
[   66.646036][  T475] usblp0: removed
[   66.676518][ T1523] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.707134][ T1528] input: syz0 as /devices/virtual/input/input11
[   66.711674][ T1530] SELinux: security_context_str_to_sid () failed with errno=-22
[   66.719716][ T1528] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.776224][ T1536] rust_binder: Write failure EFAULT in pid:368
[   66.787943][  T307] usb 5-1: USB disconnect, device number 5
[   66.792431][ T1539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305
[   66.801149][ T1539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305
[   67.442970][ T1583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.416'.
[   67.609899][ T1597] rust_binder: Write failure EINVAL in pid:133
[   67.610071][ T1597] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   67.627116][ T1597] rust_binder: Write failure EINVAL in pid:133
[   67.654707][ T1596] SELinux: failed to load policy
[   67.797639][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.850776][ T1606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   67.857887][ T1606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:311
[   67.877110][  T478] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   67.958013][ T1614] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   67.958040][ T1614] rust_binder: Read failure Err(EFAULT) in pid:287
[   68.037144][  T478] usb 3-1: Using ep0 maxpacket: 16
[   68.054977][  T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[   68.071760][  T478] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   68.089611][  T478] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   68.102166][  T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.117379][  T478] usb 3-1: config 0 descriptor??
[   68.249326][ T1634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.249650][ T1634] rust_binder: Error in use_page_slow: ESRCH
[   68.249998][ T1635] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   68.256702][ T1634] rust_binder: use_range failure ESRCH
[   68.262912][ T1635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   68.271925][ T1634] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   68.280233][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:326
[   68.289537][ T1634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   68.307736][ T1634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:326
[   68.353855][ T1638] netlink: 'syz.0.432': attribute type 17 has an invalid length.
[   68.382373][ T1638] rust_binder: Read failure Err(EAGAIN) in pid:330
[   68.384669][ T1638] rust_binder: Read failure Err(EAGAIN) in pid:330
[   68.527725][  T478] HID 045e:07da: Invalid code 65791 type 1
[   68.546678][  T478] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input13
[   68.561657][  T478] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   68.573318][ T1646] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.591046][ T1648] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.605026][ T1648] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.613140][ T1648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338
[   68.621121][ T1648] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   68.637257][  T329] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   68.639628][ T1648] rust_binder: Write failure EINVAL in pid:338
[   68.678615][ T1653] binder: Bad value for 'max'
[   68.697589][ T1655] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.698013][ T1655] rust_binder: Error while translating object.
[   68.705194][ T1655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   68.712038][ T1655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342
[   68.743126][ T1658] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.755134][ T1659] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.777101][  T329] usb 5-1: device descriptor read/64, error -71
[   68.779059][ T1665] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.792373][ T1665] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   68.799681][ T1665] rust_binder: Read failure Err(EFAULT) in pid:349
[   68.957488][ T1674] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.966641][ T1674] rust_binder: Error while translating object.
[   68.973707][ T1674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   68.980490][ T1674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358
[   69.006234][   T36] kauditd_printk_skb: 93 callbacks suppressed
[   69.006255][   T36] audit: type=1400 audit(1750464367.230:515): avc:  denied  { bind } for  pid=1675 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   69.043489][   T65] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   69.051418][  T329] usb 5-1: device descriptor read/64, error -71
[   69.207117][   T65] usb 4-1: Using ep0 maxpacket: 16
[   69.215309][   T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.229115][   T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   69.243160][   T65] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   69.252929][   T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.257127][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   69.263830][   T65] usb 4-1: config 0 descriptor??
[   69.307245][  T329] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   69.333425][  T307] usb 3-1: USB disconnect, device number 14
[   69.427142][   T10] usb 1-1: Using ep0 maxpacket: 16
[   69.435239][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.446848][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   69.461837][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   69.467209][  T329] usb 5-1: device descriptor read/64, error -71
[   69.481121][   T36] audit: type=1326 audit(1750464367.710:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.3.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bc958e929 code=0x0
[   69.513909][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   69.527952][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.539208][   T10] usb 1-1: Product: syz
[   69.545308][   T10] usb 1-1: Manufacturer: syz
[   69.551822][   T10] usb 1-1: SerialNumber: syz
[   69.563655][   T10] cdc_ncm 1-1:1.0: skipping garbage
[   69.570026][   T10] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[   69.579223][   T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   69.586746][   T10] cdc_ncm 1-1:1.0: bind() failure
[   69.727261][  T329] usb 5-1: device descriptor read/64, error -71
[   69.765450][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.766000][   T10] usb 1-1: USB disconnect, device number 11
[   69.837341][  T329] usb usb5-port1: attempt power cycle
[   69.891590][ T1681] rust_binder: Read failure Err(EAGAIN) in pid:400
[   69.998281][   T36] audit: type=1400 audit(1750464368.230:517): avc:  denied  { mount } for  pid=1685 comm="syz.2.452" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   70.003804][ T1686] rust_binder: Write failure EFAULT in pid:405
[   70.048734][   T36] audit: type=1400 audit(1750464368.284:518): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   70.091522][ T1690] rust_binder: Write failure EFAULT in pid:409
[   70.163212][   T36] audit: type=1400 audit(1750464368.394:519): avc:  denied  { write } for  pid=1695 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   70.184412][   T36] audit: type=1326 audit(1750464368.404:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.2.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faad778e929 code=0x0
[   70.217157][  T329] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   70.225731][ T1696] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.238444][  T329] usb 5-1: device descriptor read/8, error -71
[   70.278439][   T36] audit: type=1400 audit(1750464368.514:521): avc:  denied  { create } for  pid=1695 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.280160][ T1696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   70.304711][ T1696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:415
[   70.304782][   T36] audit: type=1400 audit(1750464368.514:522): avc:  denied  { setopt } for  pid=1695 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.342440][ T1701] binder: Bad value for 'stats'
[   70.391951][  T329] usb 5-1: device descriptor read/8, error -71
[   70.441061][   T36] audit: type=1400 audit(1750464368.664:523): avc:  denied  { setopt } for  pid=1706 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   70.465606][   T36] audit: type=1400 audit(1750464368.674:524): avc:  denied  { execute } for  pid=1706 comm="syz.0.460" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1
[   70.637155][  T329] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   70.660106][ T1721] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.660170][ T1722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.668721][  T329] usb 5-1: device descriptor read/8, error -71
[   70.686177][ T1723] binder: Bad value for 'defcontext'
[   70.818378][  T329] usb 5-1: device descriptor read/8, error -71
[   70.927412][  T329] usb usb5-port1: unable to enumerate USB device
[   71.307072][  T329] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   71.429216][ T1729] rust_binder: Error while translating object.
[   71.429248][ T1729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   71.436901][ T1729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138
[   71.463492][  T329] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.485931][  T329] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   71.514219][  T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.525199][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.533539][  T329] usb 3-1: Product: syz
[   71.545587][  T329] usb 3-1: Manufacturer: syz
[   71.550569][  T329] usb 3-1: SerialNumber: syz
[   71.561237][  T329] usb 3-1: selecting invalid altsetting 1
[   71.603783][ T1741] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   71.613039][ T1741] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.769832][ T1726] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   71.778073][ T1742] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.779782][   T65] usbhid 4-1:0.0: can't add hid device: -71
[   71.786890][ T1743] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   71.796280][   T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   71.816717][  T329] cdc_ncm 3-1:1.0: bind() failure
[   71.828194][  T329] cdc_ncm 3-1:1.1: skipping garbage
[   71.834835][  T329] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   71.837892][ T1747] SELinux: security_context_str_to_sid () failed with errno=-22
[   71.849270][   T65] usb 4-1: USB disconnect, device number 13
[   71.860555][  T329] cdc_ncm 3-1:1.1: bind() failure
[   71.894259][  T329] usb 3-1: USB disconnect, device number 15
[   71.952185][ T1762] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.952966][ T1762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   71.960339][ T1762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:398
[   71.969167][ T1764] rust_binder: Got transaction with invalid offset.
[   71.980958][ T1764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   71.987935][ T1764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146
[   72.038108][ T1770] binder: Bad value for 'stats'
[   72.080775][ T1772] rust_binder: Write failure EFAULT in pid:318
[   72.085042][ T1774] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   72.152521][ T1782] rust_binder: got new transaction with bad transaction stack
[   72.152579][ T1784] binder: Unknown parameter 'fscontext?}'
[   72.159596][ T1782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404
[   72.198744][ T1788] netlink: 228 bytes leftover after parsing attributes in process `syz.3.492'.
[   72.321587][ T1792] binder: Unknown parameter 'fscontext?}'
[   72.342138][ T1799] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 154)
[   72.342165][ T1799] rust_binder: Error while translating object.
[   72.354183][ T1799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.361474][ T1799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336
[   72.407317][ T1802] syz.2.495 uses obsolete (PF_INET,SOCK_PACKET)
[   72.425520][ T1802] rust_binder: Error while translating object.
[   72.425557][ T1802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   72.432631][ T1802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:428
[   72.457800][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.473928][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.480945][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.487301][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.493542][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.499784][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.506140][ T1805] cgroup2: Unknown parameter 'pidsocalevents'
[   72.508697][ T1804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   72.601971][ T1814] rust_binder: Error while translating object.
[   72.609011][ T1814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   72.615953][ T1814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:348
[   72.957554][ T1816] rust_binder: Error in use_page_slow: ESRCH
[   72.981220][ T1816] rust_binder: use_range failure ESRCH
[   72.990055][ T1816] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   72.995888][ T1816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   73.004450][ T1816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:149
[   73.028819][ T1822] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   73.152918][ T1829] cgroup2: Unknown parameter 'memory_	�cus�P�siveprot'
[   73.170794][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.188519][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.199728][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.208981][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.227302][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.241633][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.247278][ T1837] rust_binder: Error while translating object.
[   73.250817][ T1837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   73.257457][ T1837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:433
[   73.262958][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.286725][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.296283][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.305920][ T1827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.470903][ T1853] rust_binder: Write failure EFAULT in pid:440
[   73.557688][ T1868] overlayfs: missing 'lowerdir'
[   73.570431][ T1868] rust_binder: Error while translating object.
[   73.570457][ T1868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   73.578313][ T1868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:169
[   73.657078][ T1881] fuse: Bad value for 'rootmode'
[   73.657078][   T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[   73.735585][ T1883] netlink: 104 bytes leftover after parsing attributes in process `syz.4.525'.
[   73.787380][   T10] usb 4-1: device descriptor read/64, error -71
[   73.917118][  T307] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   74.027095][   T10] usb 4-1: device descriptor read/64, error -71
[   74.078774][  T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.089486][  T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.099308][  T307] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   74.108534][  T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   74.116765][  T307] usb 3-1: SerialNumber: syz
[   74.267105][   T10] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[   74.398228][   T10] usb 4-1: device descriptor read/64, error -71
[   74.491465][ T1870] rust_binder: Read failure Err(EFAULT) in pid:447
[   74.499996][  T307] usb 3-1: 0:2 : does not exist
[   74.518430][  T307] usb 3-1: USB disconnect, device number 16
[   74.605814][ T1894] binder: Unknown parameter 'dont_hash'
[   74.635228][ T1896] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.647240][   T10] usb 4-1: device descriptor read/64, error -71
[   74.707688][  T495] udevd[495]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.730395][   T36] kauditd_printk_skb: 66 callbacks suppressed
[   74.730414][   T36] audit: type=1400 audit(1750464372.964:591): avc:  denied  { setattr } for  pid=1893 comm="syz.4.529" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   74.752602][ T1898] tipc: Started in network mode
[   74.766944][ T1898] tipc: Node identity 7e9bb865c5d9, cluster identity 4711
[   74.774620][ T1898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.783335][   T10] usb usb4-port1: attempt power cycle
[   74.783553][ T1898] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.790520][ T1898] rust_binder: Write failure EINVAL in pid:431
[   74.807220][ T1897] tipc: Resetting bearer <eth:syzkaller0>
[   74.839932][ T1897] tipc: Disabling bearer <eth:syzkaller0>
[   74.869914][   T36] audit: type=1400 audit(1750464373.104:592): avc:  denied  { ioctl } for  pid=1903 comm="syz.4.533" path="socket:[19284]" dev="sockfs" ino=19284 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   74.907859][   T36] audit: type=1400 audit(1750464373.134:593): avc:  denied  { write } for  pid=1903 comm="syz.4.533" path="socket:[19284]" dev="sockfs" ino=19284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   74.969295][   T36] audit: type=1400 audit(1750464373.204:594): avc:  denied  { write } for  pid=1910 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   75.127235][   T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[   75.138258][ T1913] rust_binder: Write failure EFAULT in pid:451
[   75.147212][   T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   75.148551][   T10] usb 4-1: device descriptor read/8, error -71
[   75.207161][  T742] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   75.298657][   T10] usb 4-1: device descriptor read/8, error -71
[   75.300726][   T65] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   75.316540][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.325838][   T65] usb 1-1: Product: syz
[   75.330469][   T65] usb 1-1: Manufacturer: syz
[   75.336062][   T65] usb 1-1: SerialNumber: syz
[   75.342021][   T65] usb 1-1: config 0 descriptor??
[   75.371287][  T742] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   75.381225][  T742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.391117][  T742] usb 5-1: Product: syz
[   75.395441][  T742] usb 5-1: Manufacturer: syz
[   75.400632][  T742] usb 5-1: SerialNumber: syz
[   75.437169][  T478] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   75.537143][   T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[   75.558750][   T10] usb 4-1: device descriptor read/8, error -71
[   75.588773][  T478] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   75.600736][  T478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   75.611969][  T478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   75.623380][  T478] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   75.632926][  T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.642476][ T1918] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   75.688560][   T10] usb 4-1: device descriptor read/8, error -71
[   75.797474][   T10] usb usb4-port1: unable to enumerate USB device
[   75.971242][ T1919] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   75.972054][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.979365][ T1919] rust_binder: Write failure EINVAL in pid:433
[   75.987926][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.227883][   T65] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   76.239444][   T65] asix 1-1:0.0: probe with driver asix failed with error -71
[   76.248240][   T65] usb 1-1: USB disconnect, device number 12
[   76.463361][ T1926] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.463849][ T1926] rust_binder: Failed to allocate buffer. len:144, is_oneway:true
[   76.800732][ T1933] rust_binder: Write failure EINVAL in pid:440
[   76.806795][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.825336][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.827184][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   76.928958][ T1951] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   76.930197][ T1952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458
[   76.989022][   T10] usb 4-1: Using ep0 maxpacket: 32
[   76.998417][   T10] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0
[   77.007504][  T478] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   77.009398][   T10] usb 4-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0
[   77.026921][   T10] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024
[   77.028189][  T478] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input16
[   77.039193][   T10] usb 4-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024
[   77.061221][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[   77.070689][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.081171][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.089803][   T10] usb 4-1: Product: syz
[   77.094327][   T10] usb 4-1: Manufacturer: syz
[   77.099245][   T10] usb 4-1: SerialNumber: syz
[   77.113415][ T1926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   77.133796][ T1958] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.135636][ T1958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:465
[   77.335276][   T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   77.362746][   T10] usb 4-1: USB disconnect, device number 18
[   77.911569][ T1965] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   77.939104][ T1968] rust_binder: 1969 RLIMIT_NICE not set
[   77.981546][   T65] usb 5-1: USB disconnect, device number 10
[   78.014911][   T36] audit: type=1400 audit(1750464376.244:595): avc:  denied  { create } for  pid=1973 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   78.098948][ T1985] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   78.143415][   T36] audit: type=1400 audit(1750464376.374:596): avc:  denied  { mounton } for  pid=1994 comm="syz.3.562" path="/132/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   78.198634][ T1997] incfs_lookup_dentry err:-4
[   78.210462][ T1997] incfs: Can't find or create .index dir in ./file0
[   78.229282][ T1997] incfs: mount failed -4
[   78.271840][ T2009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2009 comm=syz.3.566
[   78.280590][ T2011] netlink: 'syz.4.567': attribute type 4 has an invalid length.
[   78.299499][ T2011] fuseblk: Unknown parameter 'group_iD'
[   78.310551][ T2011] tipc: Started in network mode
[   78.315676][ T2011] tipc: Node identity 3, cluster identity 4711
[   78.328545][ T2011] tipc: Node number set to 3
[   78.374302][ T2019] rust_binder: Write failure EFAULT in pid:386
[   78.380973][ T2021] rust_binder: Write failure EFAULT in pid:386
[   78.399509][ T2017] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   78.405922][ T2017] rust_binder: Error while translating object.
[   78.414752][ T2017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   78.422780][ T2017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209
[   78.567101][   T65] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   78.598200][   T36] audit: type=1400 audit(1750464376.834:597): avc:  denied  { ioctl } for  pid=2027 comm="syz.4.574" path="socket:[20734]" dev="sockfs" ino=20734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.730092][   T65] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[   78.739608][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.748233][   T65] usb 1-1: Product: syz
[   78.752494][   T65] usb 1-1: Manufacturer: syz
[   78.757380][   T65] usb 1-1: SerialNumber: syz
[   78.763457][   T65] usb 1-1: config 0 descriptor??
[   78.770134][   T65] usb 1-1: Waiting for MOTU Microbook II to boot up...
[   78.777560][   T65] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22
[   78.785986][   T65] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[   78.897095][  T329] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   78.972372][ T2015] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   78.973102][   T10] usb 1-1: USB disconnect, device number 13
[   79.027099][  T329] usb 4-1: device descriptor read/64, error -71
[   79.135470][  T307] usb 3-1: USB disconnect, device number 17
[   79.135559][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   79.282387][ T2042] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   79.301875][  T329] usb 4-1: device descriptor read/64, error -71
[   79.396353][ T2046] binder: Unknown parameter 'defcontext01777777777777777777777'
[   79.547215][  T329] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   79.584589][ T2070] netlink: 88 bytes leftover after parsing attributes in process `syz.0.586'.
[   79.644103][ T2078] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.644607][ T2078] 8021q: VLANs not supported on lo
[   79.658921][ T2078] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   79.658949][ T2078] rust_binder: Error while translating object.
[   79.668239][ T2078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   79.674977][ T2078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493
[   79.676048][ T2080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483
[   79.695742][ T2080] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   79.705350][  T329] usb 4-1: device descriptor read/64, error -71
[   79.721387][ T2080] rust_binder: Read failure Err(EFAULT) in pid:483
[   79.727090][   T36] audit: type=1400 audit(1750464377.954:598): avc:  denied  { view } for  pid=2079 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   79.789949][ T2088] binder: Bad value for 'stats'
[   79.828950][   T36] audit: type=1400 audit(1750464378.064:599): avc:  denied  { append } for  pid=2096 comm="syz.4.596" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   79.856290][ T2098] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   79.856306][ T2097] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[   79.856321][ T2097] rust_binder: Error while translating object.
[   79.867263][ T2098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   79.884675][ T2097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   79.891241][ T2098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:236
[   79.905643][ T2097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236
[   79.957239][  T329] usb 4-1: device descriptor read/64, error -71
[   79.997307][  T307] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   80.087274][  T329] usb usb4-port1: attempt power cycle
[   80.158407][  T307] usb 3-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config
[   80.174678][  T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.182833][ T2109] input: syz1 as /devices/virtual/input/input18
[   80.184220][  T307] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   80.198359][ T2109] fuse: Bad value for 'rootmode'
[   80.206297][  T307] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.211422][   T36] audit: type=1400 audit(1750464378.444:600): avc:  denied  { accept } for  pid=2108 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.223556][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.247441][ T2109] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false
[   80.255737][  T307] usb 3-1: Product: ᠌
[   80.268335][  T307] usb 3-1: Manufacturer: 꿨ꯪ嚓≟㣠̬⵺臹分ꛑ咇澈똾퇁뽳臮︀゚
[   80.278150][  T307] usb 3-1: SerialNumber: 㰊
[   80.287878][ T2084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   80.377276][ T2116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[   80.389801][ T2116] input: syz0 as /devices/virtual/input/input20
[   80.437093][  T329] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   80.466437][  T329] usb 4-1: device descriptor read/8, error -71
[   80.501556][ T2129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.510513][ T2129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.530462][  T307] usb 3-1: 0:2 : does not exist
[   80.547116][  T307] usb 3-1: USB disconnect, device number 18
[   80.559004][ T2133] binder: Binderfs stats mode cannot be changed during a remount
[   80.571401][  T495] udevd[495]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   80.619097][  T329] usb 4-1: device descriptor read/8, error -71
[   80.727187][  T478] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   80.857240][  T329] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   80.877143][  T478] usb 5-1: Using ep0 maxpacket: 16
[   80.883756][  T478] usb 5-1: config 0 has no interfaces?
[   80.889926][  T329] usb 4-1: device descriptor read/8, error -71
[   80.896257][  T478] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.906373][  T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.915449][  T478] usb 5-1: config 0 descriptor??
[   80.934573][ T2140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.935219][ T2140] rust_binder: Error while translating object.
[   80.941895][ T2140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   80.948481][ T2140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499
[   80.977077][   T36] audit: type=1400 audit(1750464379.204:601): avc:  denied  { create } for  pid=2141 comm="syz.0.610" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   80.997613][  T307] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   81.028672][  T329] usb 4-1: device descriptor read/8, error -71
[   81.123836][ T2128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.134550][ T2128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.147179][  T329] usb usb4-port1: unable to enumerate USB device
[   81.158298][  T307] usb 3-1: config index 0 descriptor too short (expected 65535, got 59)
[   81.166954][  T307] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[   81.176033][  T307] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[   81.186598][  T307] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[   81.207998][  T307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.217944][  T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   81.227179][  T307] usb 3-1: SerialNumber: syz
[   81.307716][   T36] audit: type=1400 audit(1750464379.544:602): avc:  denied  { connect } for  pid=2150 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.307913][ T2152] binder: Bad value for 'max'
[   81.442608][  T307] usb 3-1: USB disconnect, device number 19
[   81.697719][ T2154] input: syz1 as /devices/virtual/input/input22
[   81.706034][ T2155] rust_binder: Got transaction with invalid offset.
[   81.706078][ T2155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   81.712915][ T2155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398
[   81.715148][ T2154] rust_binder: Got transaction with invalid offset.
[   81.733493][ T2154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   81.742103][ T2154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398
[   81.772198][   T36] audit: type=1400 audit(1750464380.004:603): avc:  denied  { ioctl } for  pid=2156 comm="syz.3.615" path="socket:[21632]" dev="sockfs" ino=21632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.871780][ T2163] rust_binder: Write failure EINVAL in pid:407
[   81.871976][ T2163] rust_binder: Read failure Err(EAGAIN) in pid:407
[   82.207235][  T329] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[   82.288673][ T2180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.348706][ T2182] rust_kernel: panicked at drivers/android/binder/node.rs:877:13:
[   82.348706][ T2182] attempt to subtract with overflow
[   82.371952][ T2182] ------------[ cut here ]------------
[   82.379177][ T2182] kernel BUG at rust/helpers/bug.c:7!
[   82.380701][   T36] audit: type=1400 audit(1750464380.614:604): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   82.386175][ T2182] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[   82.418271][   T36] audit: type=1400 audit(1750464380.614:605): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.426042][ T2182] CPU: 1 UID: 0 PID: 2182 Comm: syz.0.623 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[   82.426083][ T2182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   82.426100][ T2182] RIP: 0010:rust_helper_BUG+0x8/0x10
[   82.454653][   T36] audit: type=1400 audit(1750464380.614:606): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.468409][ T2182] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 44 94 a0 04 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 0e 50 e9 88 90 90 90 90 90 90 90 90 90
[   82.468439][ T2182] RSP: 0018:ffffc90005195a90 EFLAGS: 00010246
[   82.468475][ T2182] RAX: 0000000000000061 RBX: 1ffff92000a32b54 RCX: a7417175dc139f00
[   82.468492][ T2182] RDX: ffffc90002234000 RSI: 000000000000418f RDI: 0000000000004190
[   82.468507][ T2182] RBP: ffffc90005195a90 R08: ffffc90005195787 R09: 1ffff92000a32af0
[   82.479735][   T36] audit: type=1400 audit(1750464380.614:607): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.485759][ T2182] R10: dffffc0000000000 R11: fffff52000a32af1 R12: 0000000000000000
[   82.485789][ T2182] R13: dffffc0000000000 R14: ffffc90005195ac0 R15: ffffc90005195af0
[   82.485808][ T2182] FS:  00007f20fdfa06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   82.510716][   T36] audit: type=1400 audit(1750464380.614:608): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.532289][ T2182] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.532359][ T2182] CR2: 00007f20fdf9ff98 CR3: 000000011e7e8000 CR4: 00000000003526b0
[   82.532399][ T2182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   82.532412][ T2182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   82.532427][ T2182] Call Trace:
[   82.532437][ T2182]  <TASK>
[   82.532450][ T2182]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[   82.696048][ T2182]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[   82.705018][ T2182]  ? kernel_text_address+0xa9/0xe0
[   82.710389][ T2182]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[   82.724774][ T2182]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   82.731691][ T2182]  ? arch_stack_walk+0x10b/0x170
[   82.737889][ T2182]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[   82.745473][ T2182]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[   82.753582][ T2182]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[   82.763863][ T2182]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[   82.774929][ T2182]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   82.782247][ T2182]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   82.791904][ T2182]  ? __se_sys_ioctl+0x132/0x1b0
[   82.797312][ T2182]  ? __x64_sys_ioctl+0x7f/0xa0
[   82.802365][ T2182]  ? x64_sys_call+0x1878/0x2ee0
[   82.807581][ T2182]  _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860
[   82.819117][ T2182]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10
[   82.829877][ T2182]  ? kasan_save_alloc_info+0x40/0x50
[   82.836411][ T2182]  ? __kasan_kmalloc+0x96/0xb0
[   82.841598][ T2182]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   82.849957][ T2182]  ? __kasan_check_write+0x18/0x20
[   82.855356][ T2182]  ? _raw_spin_lock+0x8c/0x120
[   82.860342][ T2182]  ? __cfi__raw_spin_lock+0x10/0x10
[   82.865910][ T2182]  ? mutex_unlock+0x8b/0x240
[   82.870872][ T2182]  ? __kasan_check_write+0x18/0x20
[   82.876605][ T2182]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20
[   82.886713][ T2182]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   82.897519][ T2182]  ? is_bpf_text_address+0x17b/0x1a0
[   82.903051][ T2182]  ? kernel_text_address+0xa9/0xe0
[   82.908721][ T2182]  ? unwind_get_return_address+0x51/0x90
[   82.915273][ T2182]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   82.921762][ T2182]  ? arch_stack_walk+0x10b/0x170
[   82.927269][ T2182]  ? stack_depot_save_flags+0x38/0x800
[   82.932860][ T2182]  ? kasan_save_alloc_info+0x40/0x50
[   82.939052][ T2182]  ? kasan_save_track+0x4f/0x80
[   82.944198][ T2182]  ? kasan_save_track+0x3e/0x80
[   82.949766][ T2182]  ? kasan_save_alloc_info+0x40/0x50
[   82.955528][ T2182]  ? __kasan_kmalloc+0x96/0xb0
[   82.960330][ T2182]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   82.967317][ T2182]  ? krealloc_noprof+0x8d/0x130
[   82.972244][ T2182]  ? rust_helper_krealloc+0x33/0xd0
[   82.977771][ T2182]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100
[   82.988080][ T2182]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440
[   82.999038][ T2182]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20
[   83.011255][ T2182]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   83.020947][ T2182]  ? __se_sys_ioctl+0x132/0x1b0
[   83.026817][ T2182]  ? __x64_sys_ioctl+0x7f/0xa0
[   83.031714][ T2182]  ? do_syscall_64+0x58/0xf0
[   83.036643][ T2182]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.043209][ T2182]  ? __kasan_kmalloc+0x96/0xb0
[   83.048081][ T2182]  ? kasan_save_alloc_info+0x40/0x50
[   83.054215][ T2182]  ? __kasan_kmalloc+0x96/0xb0
[   83.059276][ T2182]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   83.067760][ T2182]  ? __kasan_check_write+0x18/0x20
[   83.076003][ T2182]  ? _raw_spin_lock+0x8c/0x120
[   83.080891][ T2182]  ? __cfi__raw_spin_lock+0x10/0x10
[   83.086597][ T2182]  ? _raw_spin_unlock+0x45/0x60
[   83.092799][ T2182]  ? rust_helper_spin_unlock+0x19/0x30
[   83.098575][ T2182]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   83.111019][ T2182]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   83.122117][ T2182]  ? xfd_validate_state+0x68/0x150
[   83.127278][ T2182]  ? save_fpregs_to_fpstate+0x196/0x230
[   83.133083][ T2182]  ? __kasan_check_write+0x18/0x20
[   83.138393][ T2182]  ? __switch_to+0xc7b/0x1310
[   83.143214][ T2182]  ? pick_next_task_fair+0x870/0x900
[   83.148571][ T2182]  ? _raw_spin_lock+0x8c/0x120
[   83.153623][ T2182]  ? _raw_spin_unlock+0x45/0x60
[   83.158803][ T2182]  ? finish_task_switch+0x13a/0x780
[   83.164144][ T2182]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20
[   83.173501][ T2182]  ? __schedule+0x1463/0x1f10
[   83.178475][ T2182]  ? avc_has_extended_perms+0x7c7/0xdd0
[   83.184133][ T2182]  ? __asan_memcpy+0x5a/0x80
[   83.188920][ T2182]  ? avc_has_extended_perms+0x921/0xdd0
[   83.194494][ T2182]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   83.204343][ T2182]  ? do_vfs_ioctl+0xeda/0x1e30
[   83.209233][ T2182]  ? preempt_schedule_common+0x2d/0x60
[   83.214820][ T2182]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   83.220759][ T2182]  ? __cfi_preempt_schedule+0x10/0x10
[   83.226307][ T2182]  ? __cfi_check_preempt_wakeup_fair+0x10/0x10
[   83.232869][ T2182]  ? preempt_schedule_thunk+0x1a/0x40
[   83.238445][ T2182]  ? try_to_wake_up+0xe17/0x1aa0
[   83.243594][ T2182]  ? ioctl_has_perm+0x384/0x4d0
[   83.248931][ T2182]  ? has_cap_mac_admin+0xd0/0xd0
[   83.254905][ T2182]  ? futex_wake+0x63a/0x900
[   83.259956][ T2182]  ? __cfi_futex_wake+0x10/0x10
[   83.265366][ T2182]  ? selinux_file_ioctl+0x6e0/0x1360
[   83.271578][ T2182]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   83.277963][ T2182]  ? do_futex+0x356/0x500
[   83.283071][ T2182]  ? __cfi_do_futex+0x10/0x10
[   83.288508][ T2182]  ? __fget_files+0x2c5/0x340
[   83.293450][ T2182]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   83.302594][ T2182]  ? __se_sys_ioctl+0x114/0x1b0
[   83.308383][ T2182]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   83.319110][ T2182]  __se_sys_ioctl+0x132/0x1b0
[   83.324117][ T2182]  __x64_sys_ioctl+0x7f/0xa0
[   83.329327][ T2182]  x64_sys_call+0x1878/0x2ee0
[   83.334497][ T2182]  do_syscall_64+0x58/0xf0
[   83.339456][ T2182]  ? clear_bhb_loop+0x35/0x90
[   83.344300][ T2182]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.352946][ T2182] RIP: 0033:0x7f20fd18e929
[   83.358775][ T2182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.383102][ T2182] RSP: 002b:00007f20fdfa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.392806][ T2182] RAX: ffffffffffffffda RBX: 00007f20fd3b6080 RCX: 00007f20fd18e929
[   83.402009][ T2182] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000007
[   83.410098][ T2182] RBP: 00007f20fd210b39 R08: 0000000000000000 R09: 0000000000000000
[   83.418813][ T2182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.428318][ T2182] R13: 0000000000000000 R14: 00007f20fd3b6080 R15: 00007ffd14bf1578
[   83.439485][ T2182]  </TASK>
[   83.443913][ T2182] Modules linked in:
[   83.452635][ T2182] ---[ end trace 0000000000000000 ]---
[   83.458975][ T2182] RIP: 0010:rust_helper_BUG+0x8/0x10
[   83.466451][ T2182] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 44 94 a0 04 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 0e 50 e9 88 90 90 90 90 90 90 90 90 90
[   83.470683][  T329] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   83.499693][   T10] usb 5-1: USB disconnect, device number 11
[   83.503892][  T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.510882][ T2182] RSP: 0018:ffffc90005195a90 EFLAGS: 00010246
[   83.526752][ T2182] RAX: 0000000000000061 RBX: 1ffff92000a32b54 RCX: a7417175dc139f00
[   83.530154][  T329] usb 3-1: config 0 descriptor??
[   83.536353][ T2182] RDX: ffffc90002234000 RSI: 000000000000418f RDI: 0000000000004190
[   83.550286][ T2182] RBP: ffffc90005195a90 R08: ffffc90005195787 R09: 1ffff92000a32af0
[   83.558620][ T2182] R10: dffffc0000000000 R11: fffff52000a32af1 R12: 0000000000000000
[   83.567428][ T2182] R13: dffffc0000000000 R14: ffffc90005195ac0 R15: ffffc90005195af0
[   83.575860][ T2182] FS:  00007f20fdfa06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   83.585285][ T2182] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.592745][ T2182] CR2: 00007f011a381178 CR3: 000000011e7e8000 CR4: 00000000003526b0
[   83.602085][ T2182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.611139][ T2182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   83.620197][ T2182] Kernel panic - not syncing: Fatal exception
[   83.627803][ T2182] Kernel Offset: disabled
[   83.632768][ T2182] Rebooting in 86400 seconds..