last executing test programs:

1m24.442798165s ago: executing program 2 (id=1085):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="c0179a2870"]}, 0x1c}}, 0x0)
sendto$inet(r0, &(0x7f00000001c0)="8689d46205a34100bf2bbe110000000001000000", 0x14, 0x3ebd6bd0c9007a6, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x3)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080)

1m24.420461125s ago: executing program 2 (id=1086):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r1) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9410101c00f32260f5deff0835f00f566b80500000066b9f722ffff0f01d965aa807c0b00670f30ba200066b80000008066eff30fb8bd36002e650fc72a", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01eaffffffffffff000000800b000000000000000600000000020000ff4654e038fc3823a8000000000000000000004c800bf488cc2c3764255ac9c7c842f48064899fb17d27e36ee28c52206400a74878"]) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
mknodat(r4, &(0x7f0000000000)='./file0\x00', 0x1000, 0x6) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f0000000000)=0x8, 0x4) (async)
syz_clone3(&(0x7f0000001200)={0x5182400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m24.352250596s ago: executing program 2 (id=1087):
r0 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0xd, 0xffffffff, 0x8, 0x0, 0x7fffffff}, {0x80000008, 0x1, 0x7, 0x80000000}, {0x1, 0x100000, 0xe8d6, 0x5, 0x4}]})
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0xfffffffc}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x1, 0x5b8, 0x6, &(0x7f0000000140)="a63f2fbd70e1087815aa85380a75c10dcf72f66fabab6ed7ecb2ac9f6d7e09b080125eba1685065e54cbc1a54b361a4841522eb03cfc72ba5a70335c7f0f6cd91a9f4708cfa312ec27b6a99afebd7f674bc00f4562fc1ee3f3ff506530a984699f6c388bdfc1c507fda89cf3245977e9ae45510feb413001db2313299e59065068312e9d7910d24342fb11131d6c61ed4b48b88fb2469ce826450a30338e67387275099d929fbc307bae4e0b8643b3bf326ea260995522"}, {0x3, 0x6a0, 0xf, &(0x7f0000000540)="44e8bee11d80469ef90b6d4f31ba4d435c3463425c6464e0f5f5a0543340b867d2f0e93ecf6798289d547bbb897372d58b9f829ef278e697a9cab82c018115876ea89297010773bed0910235fc71f290ed1372201f52c9bba2f27aea455f9f0228829cfa4cc6063438bf8a22bef981d9d25bb731dd16b80a1c8603d1c91e66806ac02236cde827fdf0feeeb20fb6fed6fb7f0451f551e2ba6ef7c0917f8e6fd1e32bb960074c7f1b056b8c050887c813b558981b31d2c8688ee299a62c287a48cf4557aee32c5502eb7508328935c69663747499"}, {0x1, 0x248, 0x10000, &(0x7f0000000400)="9598a34eec801b3c8927a333dfe7e3141b2fb2d3db33720345b84fe4ef259815e16fe91183fa6ed8f594ed5de30309f497ed9f6fad9742e7d05389e9f54e7f55f438bbe4bcb948a479"}, {0x1, 0x6d8, 0xd24, &(0x7f0000000640)="8db88a45e6d2767fd800f98406f708eb807769bda680983c7700cc3d17a09fa16553fd4451d9bda4d655956d7322466f2a6baf8e333a9304a239933a1650e804b9ef83512bdb263401436f1df6858f662dad6fd0bb88cca85b33897a12032155b0dea26b00567b227d82993869b7cc917ac082110c67db94d45aa3ce3579131a963f1f9618e683ea7c2bc5671abc47f549f344ac45755c7c40fe7332180d6e7418c0f7106a2fbc8e880b1ece857a89537f4ee9a6ad5894f2328cc8a76369ca82da368e740fe9be382e59502ce184db347356c9f5c269db10f38307"}, {0x2, 0x690, 0x3f8, &(0x7f0000000740)="fd15d0b45cd9f11b88b27ffa04424342286f797b131b1de73941e145f6adec907256f26a7326b26d3b0367a6ba6896e217054c9502f6edc79a78f4c4f570db4228a27c80949705a830840a409094c09364d40c4ae3c4a5273802a5101ea425d785b2fde891cf711c85d2416294dd93da702569435ff82fe26b41ad18b9bcce54a9cddcbec3482bc8e8cb9f59a3a41a7de5fe70ec045104e2400b8d41aeef8c8c81e4ee842fa19a10e9b57e67eeab9e62935042ba37f338a65362434b57fb444f6884fbc7dd6bd852769fd901a0b9426b251a"}, {0x2, 0x8000, 0x6, &(0x7f0000001440)="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"}, {0x3, 0x320, 0x6, &(0x7f0000000840)="0c33187be4a79d4e5405ed235c6369d95d9e90b7ef9ed9ed155dada5c87c04d3b7bffc12a6d67ffa01ea7c9636bb16a73a23233a12267f7b187075f859f59d5b8439358d352805c8106e6c53bf827be31260d19d0cf5c85dc4e444ff04f9b88f67256ce9"}, {0x3, 0x3d8, 0x6, &(0x7f00000008c0)="a691b045193c1c4eac499e81e1f36ecf564ad3295be9b716f7bbaffc3a5f17b373043f19310705a06aed7641f13cf297d41e7b5d99448e7b20e8a377ef0037cae1d77d29232ee2c05641b7a75cd313b963ae9b4799468c5e8fccc10d0da42823c561cde5024ab497618635c2e6db8da7df053b0e134d60fc96460b"}, {0x2, 0x6c0, 0xe, &(0x7f0000000940)="e5c50ce4afe84bb237312b46b9597f31c1f4e2cfa79bc439fd389d51c43548104b543ba525b14a3656379123d8ffbdd45da3d9562d945107471e1b9ab4c1a43a840926bf935c940edf559901bfc69a0f6d51d1ec3cd083cd0eeb2b63ca2f791e39c52375612df8135bdc066443b34c75a4cb9816f34a40003bd016437ca32aa90817b0f0e3fc0df7e7309c9e792b2d64195a1aec18f27cdcfe47a5e6730de7932e26ea886b15e02c49e33d03c2b2b942d74e5dd05595f539d7aef088bc17f456cce3e7185237422d1030efd023cbe1ad0b1d04154f2fcd48"}, {0x2, 0x340, 0xfffffff8, &(0x7f0000000a40)="936e4a3e3727ebb88bfe858e396e7d20499365495c788eedc33228ad68fe0bb7ee741506ba5dc77ebfabc975b796d6ce474978dec26fd07d132b91179b3417e3815aad8cec70b5be2aad15b8ca0aacde4d33cd4f76196926fed8e2169e88a16fa711bce311e1d646"}, {0x1, 0x28, 0xb3, &(0x7f0000000080)="5e737985e9"}, {0x0, 0x138, 0x2, &(0x7f0000000380)="93e2f89664b42c51cbd201703ab4090c2f50485c8a95289920c0fb3cbb93dab25f4051423ad32a"}, {0x0, 0x8000, 0x9ad0, &(0x7f0000002440)="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"}, {0x2, 0x6f8, 0x3, &(0x7f0000000ac0)="2884b47665019b432de52ead05e98856add5428eec23e486d2e6b0aa7b8e5edb275f00808d6639b4cef6b263bea3b8a5235374b7451d50a68062c8acb291cc4978d84785fbc3c5b0d513b4de823a95a042266d529e4a9ece43f96bac836d1d9ab12c600f10fcb8bb0ee48be6d07ce06792580bfe525365bd6b7c31e62162443d054419f74e0620625aa2b5df811c2a0aad4b71a967deb17cd3b71390849a68e3859d296efbf45119909e36ff417c09531f5efb680cd902bfefa84fc1635dd76bddf6f187cfb0ff4e14c33c58ec407435eec7fffe3a457f9aab9114221acebb"}, {0x3, 0x298, 0x7, &(0x7f0000000bc0)="59e19de0146f3baeeae63ff64647832e21f1ea9890d98671bc0faeb5fa9672de0e2ce79e723e6a8a254f73ee0b01a70f9e08e8ca993608ba6a019dadd9ac73be76a21d36aece9abec5ffac811c49ae2301b045"}, {0x2, 0x8000, 0xb, &(0x7f0000003440)="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"}]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x24008084) (async)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x2}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0x0, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

1m24.350640576s ago: executing program 2 (id=1088):
open(0x0, 0x14927e, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
flock(0xffffffffffffffff, 0x8)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0)
recvmmsg(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002002, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x8000000, 0x9, 0x9, 0x6, 0x2, 0xd, 0xffff}})
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xffffffc1)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r6, 0xfffff000)
close(0x3)

1m24.279441667s ago: executing program 2 (id=1090):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0)
read$FUSE(r1, 0x0, 0x0) (async)
close(r0) (async)
socket$packet(0x11, 0x3, 0x300)
bind$can_raw(r0, 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xc}, @fda={0x66646185, 0x8, 0x1, 0x2c}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1m24.215458528s ago: executing program 2 (id=1092):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000001180)=""/4081, 0xff1}], 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}})
r9 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r9, &(0x7f0000000080), 0x10)
bind$can_raw(r9, &(0x7f0000000280), 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
pipe2$watch_queue(0x0, 0x80)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

55.07559655s ago: executing program 32 (id=1092):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000001180)=""/4081, 0xff1}], 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}})
r9 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r9, &(0x7f0000000080), 0x10)
bind$can_raw(r9, &(0x7f0000000280), 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
pipe2$watch_queue(0x0, 0x80)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

53.203632071s ago: executing program 4 (id=1217):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='-{+)^*%}%}\x00')

53.201339811s ago: executing program 4 (id=1219):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x86)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x8442, 0x50, 0x4}, 0x18)
openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x2c)
renameat(r2, &(0x7f0000000280)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0'])
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

53.196152851s ago: executing program 4 (id=1221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0})

53.141946562s ago: executing program 4 (id=1222):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000340)='nl80211\x00\xfd\"0\xcc\xd2W\x84Pb\xd7\x87,h\xce\x98\xec\xc2oe\x85\xfd/\xff\xc1\x80u\xd63\xeb\n\x8d~\xc9\x11\xe1\xcf\xf6l\x82Q\x1b\xd9Py\xfe=\xb60\x11\xdd\xae\xbd~\xc51\x1a\xb7\x81#`\x81\xf3\xefE\x06F\vy\v\xe32\x01\xc3K\x1f\xe7u\xa5T@G\xda\x1c\xd7\xb5\xe8\\\xd5z\x7f\xc8Y1\xa9\x9a\xa4\x0e\x9d\x83AVJ@\x99\xbcAx\xff\xbfZ\x17\x9c\x00_\xbb\x19\xb9O\\\xd8ujf|)H\xf6>1i')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
close_range(r0, 0xffffffffffffffff, 0x0)

53.141043662s ago: executing program 4 (id=1224):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1) (async, rerun: 32)
r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0xc0) (rerun: 32)
lseek(r2, 0xfffffffffffffffb, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 64)
mkdir(&(0x7f0000000300)='./file0\x00', 0x104) (async, rerun: 64)
r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) (async)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0xf9389000) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, r3, 0xfffff000) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

53.018320914s ago: executing program 4 (id=1229):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8c}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x278b6a23}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x5e}, 0x2, @in=@broadcast, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400}]}]}, 0x23c}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

52.969935515s ago: executing program 33 (id=1229):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8c}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x278b6a23}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x5e}, 0x2, @in=@broadcast, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400}]}]}, 0x23c}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

4.26537423s ago: executing program 3 (id=2179):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000100)=0xd188, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @local}, {0x2, 0x0, @private=0xa010100}, 0x184, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000180)='pimreg0\x00', 0x0, 0x0, 0x7e})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001200)={0x60000010})
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x205)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00')
lseek(r8, 0x10001, 0x0)
userfaultfd(0x1001)
syz_usb_connect(0x2, 0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000b04000001437b6a00090500000000000000070594ef6333efd013b8a7c2d6893adff8bfcbb641416ecb247f34c318931a001a88a54c8ca452ee50ca83e9959a1c7a1b9154e48f6bc7d243e019086534ab"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
getrandom(&(0x7f0000000180)=""/7, 0x7, 0x2)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r10, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

3.719129499s ago: executing program 3 (id=2182):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff800000000000) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000002a00)={{0x12, 0x1, 0x110, 0xaf, 0x88, 0x8, 0x20, 0x645d, 0xbc2c, 0x146c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x99, 0xdc, 0x0, 0x8, 0x5, 0x1, 0xe}}]}}]}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.67393825s ago: executing program 3 (id=2183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xfffffffffffffffe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000e0000002000000400000000000000000ac01aa000000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000780)={'macsec0\x00', 0x646})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa02, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
dup2(r1, r4)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x306, @remote}, 0x38, {0x2, 0x4e22, @empty}})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, 0x0)
r11 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x3, 0xc0, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x8, 0x90, 0x43, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0xe, 0xf7, '\f'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x8, 0xd5, 'Z'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x77, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0xb, 0x5, {0x7, 0x25, 0x1, 0x80, 0x1, 0x296d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xff, 0xb, "b87c54"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0xd, "c72549", "a78577"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x7, "5d309c", "167d"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7, 0xb, "8f6897ea724c7739"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x1, 0xf, {0x7, 0x25, 0x1, 0x3, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x7, 0x2, 0x1, 0x8, 0x5}, 0x38, &(0x7f0000000440)={0x5, 0xf, 0x38, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x1, 0x0, 0xbe, [0x3f00, 0xffc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd9, 0x8, 0x2, 0x2, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x91, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0xbd, 0x9252}]}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xfcff}}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r11}, @request_death, @register_looper], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d010000002efd49c75aa9d82de77714ff"})

1.632192813s ago: executing program 5 (id=2215):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@private0, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x803, 0x0) (rerun: 64)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle, @fda={0x66646185, 0x8, 0x0, 0x23}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x50, 0x0, &(0x7f0000000100)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"})

1.629773553s ago: executing program 5 (id=2218):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0)
mlockall(0x7)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, r1, 0x0)
brk(0x5d555ede6000)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

1.578206594s ago: executing program 5 (id=2220):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67723e7a6b1b69643d", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,max_read=0x0000000000000004,\x00']) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) (async)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
close_range(r1, r0, 0x0) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000001c0)=0x74, 0x4) (async)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0xca, &(0x7f0000000040)="7e0c75a7f0666ccfe5bf73b421b1b4811439afdb911cffd39e51b7bbdf1b18d1f06d021940aabd9bcc3fea3c8a7c4a6fcd1bf8d51e9de2e55d96c12ba9df15f2490060ae7b41b7d61eabe8493caad1bb2573fcd3b8732dd7e4d0a43fce0071e248d1067eb378a6d271b7a7c0fd146033a52f7f34b162a1841513bae172dcf6ed4ef69884d52c97037fef2d6f846742e3ec31a08c0f98834bf1acc98ad2dcbf0a173f9eb5e311e20f6c026df7088392c4c23cc92c8f87daa16b282a576a35094ad5f8ef9306ea3e4af6f6", 0x23, 0x0, &(0x7f0000000140)="47fc9e308d42c2e30a7c4795f9c562f4f431a7155aee7a533269ee36ee839cbe0b0e87"})

1.577023394s ago: executing program 5 (id=2222):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r1, 0x0, 0x0, 0x41) (async)
open(0x0, 0x48141, 0x100) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fcd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) (async)
r2 = creat(0x0, 0x1) (async)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2) (async)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, 0x0, 0x11) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$inet6(0xa, 0x3, 0xff)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="002208000000e20100c3c4933cd12dd063c4d0b83ec94b2ca7866b7494e98f2a751280d1d91bf31cf2d7ccaec3ff914044bd18e1160000000000000000"], 0x0}, 0x0) (async)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setreuid(0x0, r7) (async)
timer_create(0x9, 0x0, &(0x7f00000000c0))
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0xfffffffc, 0x4)

1.574238604s ago: executing program 5 (id=2224):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x1, 0xe0, 0x6c, 0x7}, {0x9, 0x4, 0x9, 0x8000}, {0x7, 0x5, 0x7, 0x3}, {0xd60, 0x1, 0x3, 0x87f}]}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002180)=""/4078, 0xfee}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000001a40)=""/149, 0x95}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000003c0)=""/80, 0x50}], 0x9}, 0x81}], 0x3, 0x2102, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x22a041, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8000)
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x2012, r3, 0xcd757000)

1.526577765s ago: executing program 5 (id=2226):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r1, 0x0)
setns(r4, 0x24020000)
r5 = socket(0x10, 0x803, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/194, 0xc2}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000001ac0)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x2}, 0x8)
syz_usb_connect$uac1(0x4, 0xc9, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x8, 0x10, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x4, "51797062fc"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x7, "77f1a37d"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xf6, "ef"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x3, "d86f20d270"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfd3, 0x5, 0x0, "89f71d72fd0ae306"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0xb, 0x9, "59e0", 'A'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff2, 0x2, 0x3, "659c3112dbb563"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0xf9, 0xff, {0x7, 0x25, 0x1, 0x80, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x7, 0x8, {0x7, 0x25, 0x1, 0x81, 0x80, 0x8001}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xc, 0x5, 0x25, 0x10, 0x3}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x9d, &(0x7f0000000280)=@string={0x9d, 0x3, "193fc5ff98a58c893a9ce3ff8dee525dbd647437fa5a52d319c5ecbd393806b187c73b285c5f1ae430582afbb76fb17fd170ae7a25bd2f2876adacff57b8944b7d1e589e4f545dded45d55afc5c273cd902d7475cc0fff8c59ca33403e686706a3faa67c7edebda370deb71f56a479c69f1d04d9875c3d213f4bd66dbacb63fe7ff83f00b02b2d8515941ea4a2f1d57d7a83d9f221399336542cd6"}}, {0xf2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="f2039b7ac0a3ea40c7a8524bc7ec03296caa378f70582fce463ff83a5fdc25fb76660efb01bcdde22f26d9f370e9b5ea6e2a2e8399fe5ec443c772a3efe50310a72338b49f3d990de21bd030a45f49fcd5d191742de2f55d03eb77da154a597da0a2e9bb28f5ebfea1a94e5b9c73615812f5e0c68d137cd38c4d758ac19c48df68c2bfb929ef89452f68ca786a53e58e17f029796bb8ddfa24660f450917531b0f8eb6d628ae6e0bf3dbc265ffc90ff45b110498a2da959ea6531e590e1b8834e2453e3f5f74215ad399c3b6b1e2e0a5342a73d40645ca5816c0a4bece9e9890a41285f4e8cef5b27eb4505da7fbf6fa5a4867da1840e70000"]}]})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
sendmsg$key(r7, 0x0, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)

1.400776887s ago: executing program 1 (id=2231):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x5, 0x7)

1.375312088s ago: executing program 1 (id=2232):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

1.21132647s ago: executing program 0 (id=2241):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0x101}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x242b, 0x1], [0x100000, 0x1, 0x74e2, 0x0, 0x6, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
dup(r1)

1.210964141s ago: executing program 0 (id=2242):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000002e40)=@other={'unlock', ' ', 'none'}, 0xc)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=<r1=>0x0)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r1, &(0x7f0000000140))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)

1.199063691s ago: executing program 0 (id=2243):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00')
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x200040, 0x0, 0x0, 0x0, 0xc49, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x2, 0x2000, 0x9, 0x9, 0x9, 0x9, 0x0, 0x0, 0x2, 0x5}}, 0x50) (async)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xa000, 0x5, 0x3, 0x5, 0x3, 0x0, 0x0, 0x0, 0x401}}, 0x50)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32)
r5 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r6, &(0x7f0000000000)="2a000200010078", 0x7) (async)
sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) (async, rerun: 32)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000200)=0x96, 0x4) (async)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x400, 0x0) (async)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.185792291s ago: executing program 0 (id=2244):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1011c60, &(0x7f00000001c0)=ANY=[@ANYBLOB="34771d327eb6e40d53ca50b0cf15c26ca18f98c593c7f29c1573cbf4df8c38936c7e35d9041aacce27a4c089da9db295dee0c729d7ce1eab621fa499fc09c546dbb06b9c031a659ec18b50fa0a51069a1854f47127627d3e6dc3b46ac4e6c0378f4dbfa3df3ab3fd54501bb98a3e977e2f3579feafdcf94ff3dc48eae8fdd56e15ba4cdba04ea82722c44cd87b9c515385199be808b5fec07692d03e5bf7f717b3bd972d664f728efec17c58ef3a501115cae28dde630843cc0a1dda425511a0a71736405a46291f45d2529c3464037fe21193278a", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=0x0])
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@cpuid={0x14, 0x18, {0x6, 0x311}}, @wr_crn={0x46, 0x20, {0x3, 0x10001}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @uexit={0x0, 0x18, 0x7a}, @uexit={0x0, 0x18}, @code={0xa, 0x7d, {"2e430f381c92010000000f01c3f3400f2c34a166b8e6008ed066baf80cb82e0abe8aef66bafc0c66b83e0066ef660fc23bda66b8e3008ee0c4a1f91301c744240064ac0000c744240202000000c7442406000000000f011c24c744240055000000c744240200000100ff1c24"}}, @wrmsr={0x1e, 0x20, {0x2fc, 0x40}}, @rdmsr={0x32, 0x18, {0xaef}}, @cpuid={0x14, 0x18, {0x60000, 0xfffeffff}}, @uexit={0x0, 0x18, 0xad8c}, @wrmsr={0x1e, 0x20, {0x81a, 0x1}}, @wrmsr={0x1e, 0x20, {0xb31, 0x2}}], 0x1ad})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

1.128229462s ago: executing program 0 (id=2245):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x566, 0x3004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x968}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0x4, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x59, 0x69, 0xe}}]}}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x310, 0xf7, 0x4, 0x6, 0x8, 0x4}, 0x106, &(0x7f0000001180)={0x5, 0xf, 0x106, 0x6, [@generic={0x9b, 0x10, 0xb, "0527016b3808a614f5a691be9c1e29a1a2fba334833475e8e8f8312210ed3b9f530b8e503828a161d5c1bd63099d2902ddcb16b8c9132bfbcdc394839ad920d67d1246db6f205841011d6e8cc0eb468cd7d1100f247a417403fb8e097502e3dc2cf6de7322c9357fa31e2413f1d0fc8c5cd6b894adaad4436f91bc70e78bf9a8db99df845d09667922cf3674e76b6385612dd3075f1c2bbc"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "79e30fb72526e1a45b853ce28fc1dff9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x56, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "184d1098bd7f52170f18f578fdd35259"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "869d73278b3a37aa528110b56e2e0d97"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf00, 0xcd47, [0x30, 0x0, 0x30, 0xa0, 0x3fff]}]}, 0xa, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc1a}}, {0xfe, &(0x7f00000012c0)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x419}}, {0xbd, &(0x7f00000013c0)=@string={0xbd, 0x3, "2e9368baaaf94a0c882a213967571e4fe1dc59a1c0910aa53b346db00d930a5e7d7579eba79ade1a6ea73e5f766f783151bd294baf4abb1bfc52548dff26c58dcf0d8a38a4a441d2c89bf45bfd007574c995240623f7aa9c149330d9e39d0bfb534b3a9a3cb9e03b4f186a3163583e81d9a6d057e25fc14088bcf3dcd9dcef09d3a8340cce87597e7bb9450fabc3b6913e335009f7ccb6bfb829647743ea669d12689d6f5cd3185e1d4e4642e29123d1f70d678705a54cc8be3fe1"}}, {0x77, &(0x7f0000001480)=@string={0x77, 0x3, "63399cc57d18ec052da5b3c936ddafc3762a2400f4b335c4925332bc7cfd51db970f19ad89546cc6f22e063032f2e10982861d8a2883db39c9c0f3b8e40c57e031c23ce01397d033d981e0e83fad88964e27f535d342c127d5050d4daa3b0acf1bfc4a2f5df1fe885fdfc7ae97588f8d1196dfeb5e"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x82c}}, {0x1f, &(0x7f0000001b80)=ANY=[@ANYBLOB="1f03d2b913a4144be38f5852e6ae29a972d93b96bcd85f17e1870df7e8bf8c04efabb6c304745c94076a4e8341f72f48736c8f8823def0f2de7901f84099aee07ee67675be37e2f14f929e53bebdea64bc09cc0a3ab0ede779625e806ef7ba7dc1ecaa59fa59b12d2e3d92154df196ea000015b4c25f47e3ef890982db8901eacca3b4c1f1be9c569f6724ef568d1db9025c090b12c6a35f1f4b98327cb816e8847747c787d8ead53c9392ca83f0017d24463910f20228adf626356c68b4490ce33b5bffdff98425d88bbb082aa5bb4127619c2120e6cedab461f8ff547b0d61a282ee8e3643dd8f43908ac0e1d199ae423e9a65a01bd61ddb6960e4adbe5508b966e8bf261d417b"]}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_control_io$hid(r5, &(0x7f0000001900)={0x24, &(0x7f0000001700)={0x0, 0x22, 0xe8, {0xe8, 0x6, "2660d1047f9d00b780a473bd7a1984f81e3da8c5c1017d8f40d1f8954242899183d5b461791cbdb66c27275d8d5e641929c006b018fa79de8e831d7a6e30efa7fae2165447ecb066a9abb3349f9badf2f4ea2ce2e5eba9c35f5f5789a23ae39558af7e247953c76435c7d0e9d14b5d5e81b4739e7c59773e7a0c653e68778f0c71e04504aad4a795628fca4e0ff1d42e930473982bb2caac28d70bfa3f45eb149ac4d61ed6183e6139e8bd9c7b6c7e3723622b127610e9ac823c0e01052172cd7da1efb427b966b36469e6cfe8f40b4d83116f1afca0a3fc02c6484afc1487cb09c550401ac2"}}, &(0x7f0000001800)={0x0, 0x3, 0x79, @string={0x79, 0x3, "e1c681baa06aa11e39d076f50fe01fda4fd34c812de336ed500097918a5add65a4e3097c5f31781efb4f2ee8bcd37df6c74b793f4986ee4b33fd66a5be61086cedf04042fe054c6bd8689c14685381bb573770fb70157d0b414b55b4591ade9b88abd1892e29d388e7ac2a4b71a73168a71179779cfbc8"}}, &(0x7f0000001880)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x8, "4efe9927"}, @global=@item_012={0x2, 0x1, 0x8, "f134"}, @global=@item_012={0x2, 0x1, 0x7, "d92d"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x4, ' '}]}}, &(0x7f00000018c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0xbac}}}}, &(0x7f0000001b40)={0x2c, &(0x7f0000001940)={0x40, 0x14, 0xf5, "7daf9fb0423f33f7027b4f03bf79dcab95a07d245c9eb3f44bec7f454e4f2e9371d7d584a7318aaa9c1d1a31bb85145d8402a71f8d5f8b028c8abb67eb4e96c1757d6ec0e789e62cdb0f3e7916d9af998d2c04bcfe21a974dc3573d58c69dfde863aa282a69f3a25b4d6065e4d621485739da721958750725b0240e57b213c6dd7f70e35a4fa455af4b4e8ec92fb38f895231880622f9492d1af8ffad70784ace1cc151befe2c0967296daa48d54626c43b3d439705bde21e0826fdbf95bebec288ca64a4b7e92c62e5f840244350b87b7bb12ba12c8dc71f20295f4bd36983b1723a011556e47892179e8beae8525c007fe2f3157"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001ac0)={0x20, 0x1, 0x3, "ecc677"}, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x6}})
preadv2(r4, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x2, 0x10001, 0x18)

658.39955ms ago: executing program 0 (id=2246):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x95, 0x240000000008b}, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = timerfd_create(0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x40, r4})
r5 = socket(0xa, 0x1, 0x0)
ioctl(r5, 0x8916, &(0x7f0000000000))
ioctl(r5, 0x8936, &(0x7f0000000000))
readv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mreq(r6, 0x29, 0x11, 0x0, &(0x7f0000000040))
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x5a59)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0xffffe000)
r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0)
ioctl$ASHMEM_GET_NAME(r9, 0x81007702, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x6, 0x6, 0x3})

629.69158ms ago: executing program 3 (id=2247):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./bus\x00', 0x20000000) (async)
mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8000, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70]}}]}) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) (async)
close(0x3) (async)
fcntl$setlease(r0, 0x400, 0x2)

572.537781ms ago: executing program 3 (id=2248):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41)
tkill(0x0, 0xa)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x806, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

571.248411ms ago: executing program 3 (id=2249):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x27, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

197.730297ms ago: executing program 1 (id=2250):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x8481, 0x4)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000280)=0x7, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRES32=r0], 0x18, 0x60881}, 0xd0)
recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x5)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000))
getdents(r4, &(0x7f0000000580)=""/153, 0x99)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000040))
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffd)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r9, 0x100, 0x70bd29, 0x6, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x2040)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x18})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x11, &(0x7f0000000300)=0x4, 0x4)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r10, &(0x7f00000003c0)="026f4db42304db02e8a164024cc101f262ea8608900c733e5273a9bc00"/49, 0x31, 0x800, 0x0, 0x0)
r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r11, 0x80585414, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

85.069419ms ago: executing program 1 (id=2251):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/file0\x00', 0x40, 0xc4)

584.7µs ago: executing program 1 (id=2252):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ppoll(&(0x7f0000000040)=[{r2, 0x2100}, {r1, 0x74a02816d74a82b4}], 0x2, 0x0, 0x0, 0x0)
mknod$loop(0x0, 0x0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x48, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4004084)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000000c0)={0x0, 0x9, 0x3, 0x4a, 0xfffffffb}) (async)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
ioctl$KDMKTONE(r6, 0x4b30, 0x100000001) (async)
setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

0s ago: executing program 1 (id=2253):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0)
fchmod(r5, 0x20049549e2a2d659)
write$FUSE_GETXATTR(r5, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x34, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0)
dup3(r2, r3, 0x80000)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0xfffffe4b}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000140)="05527c989b012fd43eb1dbd4aacabbc2a3", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3, 0x0, 0xfffffdde}}], 0x4, 0x4048841)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
dup3(r7, r0, 0x0)
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

kernel console output (not intermixed with test programs):

]" dev="sockfs" ino=14586 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  101.020938][   T64] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  101.058731][   T64] usb 1-1: device descriptor read/8, error -71
[  101.194184][   T64] usb 1-1: device descriptor read/8, error -71
[  101.293164][   T36] audit: type=1400 audit(1753619156.540:393): avc:  denied  { mount } for  pid=3082 comm="syz.2.891" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  101.294250][ T3083] overlayfs: failed to clone lowerpath
[  101.452915][   T64] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  101.483329][   T64] usb 1-1: device descriptor read/8, error -71
[  101.556097][ T3091] 9pnet_fd: Insufficient options for proto=fd
[  101.573371][ T3093] 9pnet_fd: Insufficient options for proto=fd
[  101.580780][   T36] audit: type=1400 audit(1753619156.820:394): avc:  denied  { mount } for  pid=3092 comm="syz.3.896" name="/" dev="configfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  101.630770][   T36] audit: type=1400 audit(1753619156.830:395): avc:  denied  { search } for  pid=3092 comm="syz.3.896" name="/" dev="configfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.655179][   T36] audit: type=1400 audit(1753619156.830:396): avc:  denied  { read } for  pid=3092 comm="syz.3.896" name="/" dev="configfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.680699][   T64] usb 1-1: device descriptor read/8, error -71
[  101.689628][ T3098] rust_binder: 3097 RLIMIT_NICE not set
[  101.711685][  T338] rust_binder: 3096: removing orphan mapping 0:1048
[  101.791007][   T64] usb usb1-port1: unable to enumerate USB device
[  103.200769][ T3145] rust_binder: 3142 RLIMIT_NICE not set
[  103.239358][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.256642][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.268863][ T3153] 9pnet: Could not find request transport: rdma
[  103.268863][ T3152] 9pnet: Could not find request transport: rdma
[  103.470983][  T369] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  103.611015][  T369] usb 1-1: device descriptor read/64, error -71
[  103.741206][ T3161] overlayfs: failed to clone lowerpath
[  103.836827][ T3172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'.
[  103.846831][ T3172] netlink: 21 bytes leftover after parsing attributes in process `syz.2.926'.
[  103.858060][ T3172] netlink: 'syz.2.926': attribute type 2 has an invalid length.
[  103.860970][  T369] usb 1-1: device descriptor read/64, error -71
[  103.867335][ T3172] netlink: 21 bytes leftover after parsing attributes in process `syz.2.926'.
[  103.968433][ T3185] netlink: 84 bytes leftover after parsing attributes in process `syz.1.932'.
[  103.978032][ T3186] netlink: 84 bytes leftover after parsing attributes in process `syz.1.932'.
[  104.110973][  T369] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  104.250953][  T369] usb 1-1: device descriptor read/64, error -71
[  104.490948][  T369] usb 1-1: device descriptor read/64, error -71
[  104.611050][  T369] usb usb1-port1: attempt power cycle
[  104.929386][ T3220] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.951027][  T369] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  104.982394][  T369] usb 1-1: device descriptor read/8, error -71
[  105.112832][  T369] usb 1-1: device descriptor read/8, error -71
[  105.180924][ T1407] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  105.319086][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  105.319106][   T36] audit: type=1400 audit(1753619160.560:401): avc:  denied  { getopt } for  pid=3230 comm="syz.1.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.350951][ T1407] usb 4-1: Using ep0 maxpacket: 32
[  105.356611][  T369] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  105.366512][ T1407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.378571][ T1407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.389846][ T1407] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  105.400065][ T1407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.411042][  T369] usb 1-1: device descriptor read/8, error -71
[  105.418357][ T1407] usb 4-1: config 0 descriptor??
[  105.428577][ T1407] hub 4-1:0.0: USB hub found
[  105.542446][  T369] usb 1-1: device descriptor read/8, error -71
[  105.627487][ T1407] hub 4-1:0.0: 1 port detected
[  105.651053][  T369] usb usb1-port1: unable to enumerate USB device
[  106.224724][ T3253] netlink: 'syz.2.956': attribute type 28 has an invalid length.
[  106.241188][ T1407] hub 4-1:0.0: activate --> -90
[  106.443219][ T3225] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  106.455074][  T465] usb 4-1: USB disconnect, device number 25
[  106.459688][ T1407] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  106.983600][ T3307] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  107.036783][ T3323] 9pnet_fd: Insufficient options for proto=fd
[  107.051220][  T369] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  107.085997][ T3333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  107.086044][ T3333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:467
[  107.172171][ T3339] rust_binder: Error in use_page_slow: ESRCH
[  107.183337][ T3339] rust_binder: use_range failure ESRCH
[  107.189716][ T3339] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  107.195700][ T3339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  107.203819][ T3339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:469
[  107.214543][   T36] audit: type=1400 audit(1753619162.460:402): avc:  denied  { execute } for  pid=3337 comm="syz.3.987" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  107.220901][  T369] usb 1-1: Using ep0 maxpacket: 16
[  107.248919][ T3345] binder: Bad value for 'defcontext'
[  107.258835][  T369] usb 1-1: unable to get BOS descriptor or descriptor too short
[  107.275246][  T369] usb 1-1: unable to read config index 0 descriptor/start: -71
[  107.283954][  T369] usb 1-1: can't read configurations, error -71
[  107.378888][ T3359] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true
[  107.593600][ T3372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[  107.630886][ T1407] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  107.776460][   T36] audit: type=1400 audit(1753619163.020:403): avc:  denied  { map } for  pid=3398 comm="syz.0.1006" path="/proc/480/task/481" dev="proc" ino=15728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  107.800631][   T36] audit: type=1326 audit(1753619163.020:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3398 comm="syz.0.1006" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316198e9a9 code=0x0
[  107.811305][ T1407] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  107.836897][ T1407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.847006][ T1407] usb 4-1: config 0 descriptor??
[  108.055440][   T36] audit: type=1400 audit(1753619163.300:405): avc:  denied  { write } for  pid=3360 comm="syz.3.994" name="raw6" dev="proc" ino=4026532567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  108.071335][ T3361] 9pnet_fd: Insufficient options for proto=fd
[  108.086075][   T36] audit: type=1400 audit(1753619163.310:406): avc:  denied  { write } for  pid=3360 comm="syz.3.994" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  108.508546][   T36] audit: type=1400 audit(1753619163.750:407): avc:  denied  { create } for  pid=3405 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  108.594883][ T1407] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  108.606741][ T1407] asix 4-1:0.0: probe with driver asix failed with error -71
[  108.644419][ T1407] usb 4-1: USB disconnect, device number 26
[  108.652867][ T3424] incfs: Error accessing: ./file1.
[  108.658481][ T3424] incfs: mount failed -2
[  108.674932][   T36] audit: type=1400 audit(1753619163.920:408): avc:  denied  { getopt } for  pid=3423 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  108.729883][ T3439] rust_binder: Error while translating object.
[  108.729945][ T3439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  108.737305][ T3439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495
[  108.782432][ T3444] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.789296][  T465] rust_binder: 3436: removing orphan mapping 0:4120
[  109.100936][ T1407] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  109.252356][ T1407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.265419][ T1407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.276155][ T1407] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.292454][ T1407] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.303753][ T1407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.318090][ T1407] usb 4-1: config 0 descriptor??
[  109.457454][ T3464] netlink: 'syz.1.1028': attribute type 4 has an invalid length.
[  109.529264][ T1407] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  109.540746][ T1407] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  109.571338][ T1407] usb 4-1: USB disconnect, device number 27
[  109.605439][ T3472] fido_id[3472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  109.635840][ T3479] overlayfs: failed to resolve './file0': -2
[  109.670139][   T36] audit: type=1326 audit(1753619164.910:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.0.1033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x0
[  109.767798][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'.
[  109.911597][ T1407] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  109.977935][   T36] audit: type=1400 audit(1753619165.220:410): avc:  denied  { read } for  pid=3490 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  110.056208][ T3494] input: syz1 as /devices/virtual/input/input12
[  110.071018][ T1407] usb 4-1: Using ep0 maxpacket: 8
[  110.077347][ T1407] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  110.088352][ T1407] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 3
[  110.099533][ T1407] usb 4-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=ad.da
[  110.110504][ T1407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.120598][ T1407] usb 4-1: Product: syz
[  110.125493][ T1407] usb 4-1: Manufacturer: syz
[  110.130394][ T1407] usb 4-1: SerialNumber: syz
[  110.157765][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'.
[  110.164688][ T3497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'.
[  110.351034][ T1407] usb 4-1: USB disconnect, device number 28
[  110.720946][ T3499] 9pnet_fd: Insufficient options for proto=fd
[  110.750539][ T3503] incfs: Options parsing error. -22
[  110.757020][ T3503] incfs: mount failed -22
[  110.889851][ T3519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.890195][ T3519] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false
[  110.900038][ T3521] fuse: Unknown parameter '�4�5A�'3��ʉ'
[  110.974416][   T36] audit: type=1400 audit(1753619166.220:411): avc:  denied  { remount } for  pid=3522 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  110.978880][ T3529] rust_binder: 3521 RLIMIT_NICE not set
[  110.999683][ T3529] rust_binder: got new transaction with bad transaction stack
[  111.006564][ T3529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504
[  111.020273][ T1407] rust_binder: 3520: removing orphan mapping 0:1048
[  111.039968][   T36] audit: type=1400 audit(1753619166.280:412): avc:  denied  { write } for  pid=3530 comm="syz.3.1048" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  111.402611][  T338] rust_binder: get_current_thread was called from the wrong process.
[  111.441934][   T36] audit: type=1400 audit(1753619166.690:413): avc:  denied  { shutdown } for  pid=3555 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  111.512463][   T36] audit: type=1400 audit(1753619166.760:414): avc:  denied  { audit_read } for  pid=3557 comm="syz.1.1060" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  111.638875][ T3570] rust_binder: Read failure Err(EAGAIN) in pid:526
[  111.641064][  T465] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  111.780903][  T465] usb 4-1: device descriptor read/64, error -71
[  112.020891][  T465] usb 4-1: device descriptor read/64, error -71
[  112.272760][  T465] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  112.430876][  T465] usb 4-1: device descriptor read/64, error -71
[  112.525964][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'.
[  112.536210][ T3651] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1091'.
[  112.546559][ T3651] netlink: 'syz.0.1091': attribute type 6 has an invalid length.
[  112.556484][ T3651] netlink: 'syz.0.1091': attribute type 5 has an invalid length.
[  112.566257][ T3651] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1091'.
[  112.680919][  T465] usb 4-1: device descriptor read/64, error -71
[  112.800913][  T465] usb usb4-port1: attempt power cycle
[  113.047390][   T36] audit: type=1400 audit(1753619168.290:415): avc:  denied  { execute } for  pid=3658 comm="syz.1.1095" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  113.128047][ T3662] fuse: Bad value for 'fd'
[  113.140926][  T465] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  113.171961][  T465] usb 4-1: device descriptor read/8, error -71
[  113.302121][  T465] usb 4-1: device descriptor read/8, error -71
[  113.540989][  T465] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  113.562477][  T465] usb 4-1: device descriptor read/8, error -71
[  113.570952][  T369] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  113.685496][ T3672] 9pnet_fd: Insufficient options for proto=fd
[  113.692681][  T465] usb 4-1: device descriptor read/8, error -71
[  113.722779][  T369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.734267][  T369] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.752884][  T369] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.764221][  T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.773796][  T369] usb 1-1: Product: syz
[  113.779346][  T369] usb 1-1: Manufacturer: syz
[  113.785287][  T369] usb 1-1: SerialNumber: syz
[  113.796062][   T36] audit: type=1400 audit(1753619169.040:416): avc:  denied  { ioctl } for  pid=3679 comm="syz.1.1105" path="socket:[16255]" dev="sockfs" ino=16255 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.827100][  T465] usb usb4-port1: unable to enumerate USB device
[  114.465708][ T3703] rust_binder: Error in use_page_slow: ESRCH
[  114.465734][ T3703] rust_binder: use_range failure ESRCH
[  114.472924][ T3703] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  114.478498][ T3703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  114.486616][ T3703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:513
[  114.659087][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  114.803038][  T369] cdc_ncm 1-1:1.0: bind() failure
[  114.810319][  T369] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  114.820000][  T369] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  114.833141][  T369] usb 1-1: USB disconnect, device number 37
[  115.262020][ T3733] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  115.277744][   T36] audit: type=1400 audit(1753619170.520:417): avc:  denied  { read write } for  pid=3734 comm="syz.3.1123" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.315460][   T36] audit: type=1400 audit(1753619170.520:418): avc:  denied  { open } for  pid=3734 comm="syz.3.1123" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.342955][   T36] audit: type=1400 audit(1753619170.520:419): avc:  denied  { setattr } for  pid=3734 comm="syz.3.1123" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.367308][   T36] audit: type=1400 audit(1753619170.520:420): avc:  denied  { ioctl } for  pid=3734 comm="syz.3.1123" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.512771][ T3738] rust_binder: 3737 RLIMIT_NICE not set
[  115.530873][  T457] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  115.690455][ T3747] loop7: detected capacity change from 0 to 7
[  115.697830][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.707785][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.716632][  T457] usb 4-1: Using ep0 maxpacket: 16
[  115.716653][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.731910][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.735254][  T457] usb 4-1: config 1 interface 0 has no altsetting 0
[  115.741177][ T3747]  loop7: unable to read partition table
[  115.755425][ T3747] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  115.772059][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.772099][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.793899][  T457] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40
[  115.805371][  T457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.815002][  T457] usb 4-1: Product: ࡡ
[  115.820581][  T457] usb 4-1: Manufacturer: 㐊
[  115.825606][  T457] usb 4-1: SerialNumber: 氉ꃗ磽迧쾔췵凈斞뜑燂劘葰﫵᫓峚̨粺㻽妀뤰抗充瓫᡿䒼퉱ɜ해໕盒≑큚淒쒽침⢤＄춦㦅絾ᬩᩡ宊ⅅࢩ눓谘枠棳ᕧ潽钢鄢뚕ｷ塊်ԗ登ꪖ统醮찍㸛឴褙צּ䟬ᚒ㣒쳫헮益眆뎹멱Ȫු㭃
[  115.882630][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  115.895906][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.906364][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.917447][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.927064][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.935888][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.946353][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  115.961749][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.972104][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  116.032374][ T3761] tmpfs: Unknown parameter '0x00000000000000050000000000000000000400000000000000000000000'
[  116.060518][ T3764] bridge_slave_0: left allmulticast mode
[  116.067325][ T3764] bridge_slave_0: left promiscuous mode
[  116.074018][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.190988][  T338] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  116.271456][  T457] usbhid 4-1:1.0: can't add hid device: -71
[  116.277605][  T457] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  116.291169][  T457] usb 4-1: USB disconnect, device number 33
[  116.340968][  T338] usb 1-1: Using ep0 maxpacket: 8
[  116.347990][  T338] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  116.356999][  T338] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  116.366237][  T338] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  116.375590][  T338] usb 1-1: config 250 has no interface number 0
[  116.382327][  T338] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  116.394724][  T338] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  116.406384][  T338] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.416913][  T338] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  116.427878][  T338] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  116.442263][  T338] usb 1-1: config 250 interface 228 has no altsetting 0
[  116.450533][  T338] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  116.460342][  T338] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  116.469418][  T338] usb 1-1: Product: syz
[  116.473995][  T338] usb 1-1: SerialNumber: syz
[  116.482125][  T338] hub 1-1:250.228: bad descriptor, ignoring hub
[  116.488659][  T338] hub 1-1:250.228: probe with driver hub failed with error -5
[  116.682546][  T338] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  116.788877][ T3795] rust_binder: Error while translating object.
[  116.788994][ T3795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.796276][ T3795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521
[  116.991070][  T369] usb 1-1: USB disconnect, device number 38
[  117.008242][  T369] usblp0: removed
[  117.060933][  T338] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  117.170559][ T3799] 9pnet_fd: Insufficient options for proto=fd
[  117.212206][  T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.224459][  T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.234958][  T338] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  117.245122][  T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.255277][  T338] usb 4-1: config 0 descriptor??
[  117.666405][  T338] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  117.674183][  T338] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  117.682303][  T338] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  117.689922][  T338] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  117.698588][  T338] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  117.707510][  T338] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  117.762962][ T3827] 9pnet_fd: Insufficient options for proto=fd
[  118.266601][  T338] playstation 0003:054C:0DF2.0004: Invalid reportID received, expected 5 got 59
[  118.276278][  T338] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense calibration info: -22
[  118.286887][  T338] playstation 0003:054C:0DF2.0004: Failed to get calibration data from DualSense
[  118.297019][  T338] playstation 0003:054C:0DF2.0004: Failed to create dualsense.
[  118.306106][  T338] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22
[  118.472734][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  118.472754][   T36] audit: type=1400 audit(1753619173.720:422): avc:  denied  { setattr } for  pid=3796 comm="syz.3.1143" name="SCO" dev="sockfs" ino=16356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.493230][ T3797] binder: Bad value for 'max'
[  118.760978][  T369] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  118.922123][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  118.934564][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  118.947277][  T369] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  118.957360][  T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.967553][  T369] usb 1-1: config 0 descriptor??
[  119.117315][   T36] audit: type=1326 audit(1753619174.360:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.1.1172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30e418e9a9 code=0x0
[  119.316097][ T3900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:538
[  119.322903][  T338] rust_binder: 3898: removing orphan mapping 0:1024
[  119.378886][  T369] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  119.399683][  T369] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input13
[  119.494634][  T369] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  119.579493][    C0] usb 1-1: input irq status -75 received
[  119.631420][   T36] audit: type=1400 audit(1753619174.880:424): avc:  denied  { listen } for  pid=3903 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.654391][   T36] audit: type=1400 audit(1753619174.880:425): avc:  denied  { accept } for  pid=3903 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.908068][ T3910] kvm: pic: non byte write
[  120.348994][   T36] audit: type=1326 audit(1753619175.590:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab1d8e9a9 code=0x7fc00000
[  120.359046][  T338] rust_binder: 3903: removing orphan mapping 0:1048
[  121.464425][  T338] usb 1-1: USB disconnect, device number 39
[  121.850958][  T338] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  122.000923][  T338] usb 1-1: Using ep0 maxpacket: 16
[  122.008455][  T338] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  122.018205][  T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.030040][  T338] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  122.041074][  T338] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 159, using maximum allowed: 30
[  122.053445][  T338] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 159
[  122.072661][  T338] usb 1-1: New USB device found, idVendor=4670, idProduct=34bf, bcdDevice= 0.40
[  122.083444][  T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.092567][  T338] usb 1-1: Product: syz
[  122.097105][  T338] usb 1-1: Manufacturer: syz
[  122.102371][  T338] usb 1-1: SerialNumber: syz
[  122.183052][ T3946] overlayfs: overlapping lowerdir path
[  122.183526][   T36] audit: type=1400 audit(1753619177.430:427): avc:  denied  { mount } for  pid=3943 comm="syz.3.1186" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  122.218246][ T3944] 9pnet_fd: Insufficient options for proto=fd
[  122.221137][   T36] audit: type=1400 audit(1753619177.460:428): avc:  denied  { read } for  pid=3943 comm="syz.3.1186" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  122.254373][   T36] audit: type=1400 audit(1753619177.460:429): avc:  denied  { open } for  pid=3943 comm="syz.3.1186" path="/188/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  122.284265][   T36] audit: type=1400 audit(1753619177.490:430): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  122.366756][   T36] audit: type=1400 audit(1753619177.610:431): avc:  denied  { mounton } for  pid=3924 comm="syz.0.1181" path="/191/file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  122.374823][ T3925] rust_binder: Error while translating object.
[  122.393929][ T3925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  122.400957][ T3925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:586
[  122.938769][  T338] usb 1-1: USB disconnect, device number 40
[  141.626914][ T3954] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  141.648532][   T36] audit: type=1400 audit(1753619196.890:432): avc:  denied  { rename } for  pid=3953 comm="syz.3.1192" name="file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  141.699481][   T36] audit: type=1326 audit(1753619196.940:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.3.1194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab1d8e9a9 code=0x0
[  141.724175][ T3963] overlay: Unknown parameter 'fsmagic'
[  141.729938][ T3964] overlay: Unknown parameter 'fsmagic'
[  141.732202][   T36] audit: type=1400 audit(1753619196.980:434): avc:  denied  { mounton } for  pid=3967 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  141.761625][ T3968] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  141.777592][ T3968] rust_binder: Write failure EFAULT in pid:576
[  141.799381][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.815408][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.823009][ T3967] bridge_slave_0: entered allmulticast mode
[  141.831653][ T3967] bridge_slave_0: entered promiscuous mode
[  141.838579][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.846909][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.854416][ T3967] bridge_slave_1: entered allmulticast mode
[  141.861020][ T3967] bridge_slave_1: entered promiscuous mode
[  141.934940][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.942153][ T3967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.949457][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.956544][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.981147][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.988666][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.000064][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.008393][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.018450][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.025652][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.055638][ T3967] veth0_vlan: entered promiscuous mode
[  142.068493][ T3967] veth1_macvtap: entered promiscuous mode
[  142.171190][  T369] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  142.300940][  T369] usb 1-1: device descriptor read/64, error -71
[  142.500957][  T465] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  142.541067][  T369] usb 1-1: device descriptor read/64, error -71
[  142.650944][  T465] usb 5-1: Using ep0 maxpacket: 16
[  142.657368][  T465] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.667916][  T465] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  142.682125][  T465] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.691596][  T465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  142.699802][  T465] usb 5-1: SerialNumber: syz
[  142.709846][  T465] usb 5-1: bad CDC descriptors
[  142.777325][ T4023] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.780903][  T369] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  142.801911][ T4028] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.811569][   T36] audit: type=1400 audit(1753619198.060:435): avc:  denied  { mount } for  pid=4027 comm="syz.3.1207" name="/" dev="ramfs" ino=18459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  142.912850][   T10] usb 5-1: USB disconnect, device number 2
[  142.930944][  T369] usb 1-1: device descriptor read/64, error -71
[  143.035077][ T4043] netlink: 'syz.1.1211': attribute type 28 has an invalid length.
[  143.109948][ T4046] 9pnet_fd: Insufficient options for proto=fd
[  143.128647][ T4049] 9pnet_fd: Insufficient options for proto=fd
[  143.180957][  T369] usb 1-1: device descriptor read/64, error -71
[  143.290974][  T369] usb usb1-port1: attempt power cycle
[  143.424450][ T4061] raw_sendmsg: syz.1.1216 forgot to set AF_INET. Fix it!
[  143.447720][ T4063] __vm_enough_memory: pid: 4063, comm: syz.4.1217, bytes: 18014402804453376 not enough memory for the allocation
[  143.584408][ T4087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1228'.
[  143.604150][   T13] bridge_slave_1: left allmulticast mode
[  143.610064][   T13] bridge_slave_1: left promiscuous mode
[  143.616464][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.624352][   T13] bridge_slave_0: left allmulticast mode
[  143.630030][   T13] bridge_slave_0: left promiscuous mode
[  143.630896][  T369] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  143.635865][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.681905][  T369] usb 1-1: device descriptor read/8, error -71
[  143.813341][   T13] veth1_macvtap: left promiscuous mode
[  143.819647][   T13] veth0_vlan: left promiscuous mode
[  143.825524][  T369] usb 1-1: device descriptor read/8, error -71
[  143.857167][   T36] audit: type=1400 audit(1753619199.100:436): avc:  denied  { setopt } for  pid=4101 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  143.895390][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.905610][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.969756][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.977308][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.985768][ T4100] bridge_slave_0: entered allmulticast mode
[  143.992389][ T4100] bridge_slave_0: entered promiscuous mode
[  143.999310][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.007173][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.015125][ T4100] bridge_slave_1: entered allmulticast mode
[  144.021900][ T4100] bridge_slave_1: entered promiscuous mode
[  144.070928][  T369] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  144.079230][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.086732][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.094568][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.102129][  T369] usb 1-1: device descriptor read/8, error -71
[  144.102276][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.134298][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.141698][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.151779][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.158854][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.167896][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.175303][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.201867][ T4100] veth0_vlan: entered promiscuous mode
[  144.214919][ T4100] veth1_macvtap: entered promiscuous mode
[  144.232004][  T369] usb 1-1: device descriptor read/8, error -71
[  144.257179][   T36] audit: type=1400 audit(1753619199.500:437): avc:  denied  { listen } for  pid=4114 comm="syz.5.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  144.351038][  T369] usb usb1-port1: unable to enumerate USB device
[  144.513779][   T36] audit: type=1400 audit(1753619199.760:438): avc:  denied  { execute } for  pid=4135 comm="syz.3.1242" path="/200/cpu.stat" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  144.520918][  T465] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  144.552504][ T4138] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.553210][ T4138] rust_binder: Failed to allocate buffer. len:4104, is_oneway:true
[  144.560466][ T4138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  144.568887][ T4138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:611
[  144.591992][ T4140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.700882][  T465] usb 6-1: Using ep0 maxpacket: 16
[  144.710566][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.713903][  T465] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.721584][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.733075][  T465] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  144.741328][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.752931][  T465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.761734][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.770361][  T465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.779046][   T36] audit: type=1400 audit(1753619200.030:439): avc:  denied  { read } for  pid=94 comm="acpid" name="event4" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  144.786242][  T465] usb 6-1: SerialNumber: syz
[  144.809588][   T36] audit: type=1400 audit(1753619200.030:440): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  144.817021][  T465] usb 6-1: bad CDC descriptors
[  144.837610][   T36] audit: type=1400 audit(1753619200.030:441): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=563 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  144.846133][ T4143] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.868926][ T4143] rust_binder: Error in use_page_slow: ESRCH
[  144.876410][ T4143] rust_binder: use_range failure ESRCH
[  144.882787][ T4143] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  144.888487][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  144.897781][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:615
[  144.923026][ T4147] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.039604][ T4157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620
[  145.081737][  T465] usb 6-1: USB disconnect, device number 2
[  145.110569][ T4153] rust_binder: Error in use_page_slow: ESRCH
[  145.110596][ T4153] rust_binder: use_range failure ESRCH
[  145.125154][ T4153] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  145.143071][ T4153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  145.154058][ T4164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[  145.163876][ T4153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:620
[  145.231077][ T4173] rust_binder: Error while translating object.
[  145.240280][ T4173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  145.247222][ T4173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:10
[  145.333665][ T4196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4196 comm=syz.1.1259
[  145.964253][ T4222] cgroup: fork rejected by pids controller in /syz0
[  146.140518][ T4266] fuse: Unknown parameter '-TP��
[  146.140518][ T4266] �dd'
[  146.198927][ T4270] rust_binder: Write failure EFAULT in pid:26
[  146.259069][ T4280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.281453][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'.
[  146.288987][ T4280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.292687][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.309130][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.460633][ T4290] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK
[  146.460633][ T4290] �N����Ho"��hb
[  146.493130][ T4290] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  147.086937][ T4317] overlayfs: failed to clone upperpath
[  147.213055][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  147.213074][   T36] audit: type=1400 audit(1753619202.460:446): avc:  denied  { append } for  pid=4321 comm="syz.3.1291" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  147.228349][ T4327] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  147.247271][ T4327] rust_binder: Read failure Err(EFAULT) in pid:39
[  147.342058][   T36] audit: type=1400 audit(1753619202.590:447): avc:  denied  { listen } for  pid=4338 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  147.394540][   T36] audit: type=1400 audit(1753619202.640:448): avc:  denied  { shutdown } for  pid=4344 comm="syz.5.1297" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  147.449860][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1298'.
[  147.501217][ T4352] 9pnet_fd: Insufficient options for proto=fd
[  147.555378][ T4360] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  147.686370][ T4365] fuse: Bad value for 'fd'
[  147.692284][ T4366] fuse: Bad value for 'fd'
[  148.076625][ T4379] fuseblk: Bad value for 'fd'
[  148.082459][ T4379] fuse: Bad value for 'rootmode'
[  148.340881][  T457] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  148.490874][  T457] usb 6-1: Using ep0 maxpacket: 16
[  148.497295][  T457] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.508139][  T457] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  148.522283][  T457] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.531486][  T457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  148.539934][  T457] usb 6-1: SerialNumber: syz
[  148.546607][  T457] usb 6-1: bad CDC descriptors
[  148.747820][  T457] usb 6-1: USB disconnect, device number 3
[  149.133119][   T36] audit: type=1326 audit(1753619204.380:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab1d8e9a9 code=0x7fc00000
[  149.171095][ T4422] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1322'.
[  149.205495][ T4427] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4
[  149.214608][ T4427] rust_binder: Write failure EINVAL in pid:672
[  149.215478][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.232763][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.243362][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.254622][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.517432][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'.
[  149.731509][ T4452] devtmpfs: Cannot disable swap on remount
[  149.793543][ T4469] 9pnet_fd: Insufficient options for proto=fd
[  149.800870][  T465] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  149.857376][ T4476] 9pnet_fd: Insufficient options for proto=fd
[  149.877459][   T36] audit: type=1326 audit(1753619205.110:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.3.1343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab1d8e9a9 code=0x0
[  149.886882][ T4480] 9pnet_fd: Insufficient options for proto=fd
[  149.921073][   T36] audit: type=1400 audit(1753619205.160:451): avc:  denied  { write } for  pid=4477 comm="syz.3.1343" path="socket:[19093]" dev="sockfs" ino=19093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  149.921731][ T4481] __vm_enough_memory: pid: 4481, comm: syz.3.1343, bytes: 18014402804453376 not enough memory for the allocation
[  149.991140][  T465] usb 6-1: Using ep0 maxpacket: 32
[  149.998239][  T465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.010510][  T465] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.024305][  T465] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.034432][   T36] audit: type=1400 audit(1753619205.270:452): avc:  denied  { sqpoll } for  pid=4472 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  150.050852][  T465] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  150.073562][  T465] usb 6-1: config 0 interface 0 has no altsetting 0
[  150.083785][  T465] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  150.099892][  T465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.114943][  T465] usb 6-1: config 0 descriptor??
[  150.209938][   T36] audit: type=1400 audit(1753619205.450:453): avc:  denied  { audit_write } for  pid=4497 comm="syz.0.1350" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  150.354255][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  150.369403][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  150.526963][  T465] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0xd
[  150.541741][  T465] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  150.569870][  T465] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[  150.726614][ T4567] 9pnet_fd: Insufficient options for proto=fd
[  150.731344][    T9] usb 6-1: USB disconnect, device number 4
[  150.733022][    C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71
[  150.769841][ T4569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  150.769884][ T4569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682
[  150.857412][ T4581] bridge_slave_0: entered promiscuous mode
[  150.873671][ T4581] bridge_slave_0: entered allmulticast mode
[  150.933730][ T4578] rust_binder: Error while translating object.
[  150.933797][ T4578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  150.944535][ T4578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:691
[  150.969697][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.988045][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.997197][ T4585] netlink: 'syz.3.1380': attribute type 4 has an invalid length.
[  151.207241][   T36] audit: type=1400 audit(1753619206.450:454): avc:  denied  { map } for  pid=4590 comm="syz.0.1382" path="socket:[19244]" dev="sockfs" ino=19244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.272124][ T4594] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  151.280928][ T4594] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  151.291383][ T4594] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  151.300933][ T4594] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  151.589225][ T4600] rust_binder: Write failure EFAULT in pid:697
[  151.590874][  T465] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  151.626916][ T4605] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  151.637553][ T4605] rust_binder: Error in use_page_slow: ESRCH
[  151.637581][ T4605] rust_binder: use_range failure ESRCH
[  151.644084][ T4605] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[  151.649803][ T4605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  151.658550][ T4605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702
[  151.682253][ T4607] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.696158][ T4607] rust_binder: Error in use_page_slow: ESRCH
[  151.702932][ T4607] rust_binder: use_range failure ESRCH
[  151.709486][ T4607] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[  151.715467][ T4607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  151.723450][ T4609] overlayfs: cannot append lower layer
[  151.723736][ T4607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:704
[  151.735316][ T4610] overlayfs: cannot append lower layer
[  151.762329][  T465] usb 6-1: unable to get BOS descriptor or descriptor too short
[  151.770599][ T4612] rust_binder: Error in use_page_slow: ESRCH
[  151.771095][ T4612] rust_binder: use_range failure ESRCH
[  151.777825][ T4612] rust_binder: Failed to allocate buffer. len:128, is_oneway:true
[  151.777897][  T465] usb 6-1: not running at top speed; connect to a high speed hub
[  151.784048][ T4612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  151.796000][ T4614] batadv_slave_0: entered promiscuous mode
[  151.802115][ T4612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:706
[  151.812836][  T465] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  151.843352][  T465] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.848651][   T36] audit: type=1400 audit(1753619207.090:455): avc:  denied  { execute_no_trans } for  pid=4615 comm="syz.3.1392" path=2F6D656D66643A5B0BDB58202864656C6574656429 dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  151.853194][  T465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.889305][  T465] usb 6-1: Product: syz
[  151.893811][  T465] usb 6-1: Manufacturer: syz
[  151.894387][ T4619] batadv_slave_0: left promiscuous mode
[  151.898711][  T465] usb 6-1: SerialNumber: syz
[  151.905654][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.920259][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.101367][ T4598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.112572][ T4598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.130392][  T465] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  152.144846][  T465] usb 6-1: USB disconnect, device number 5
[  152.152955][ T4118] udevd[4118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  152.456433][ T4635] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  152.500060][ T4646] netlink: 'syz.3.1401': attribute type 3 has an invalid length.
[  152.516489][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'.
[  152.542719][ T4650] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  152.545927][ T4651] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'.
[  152.553194][ T4650] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  152.563653][ T4651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=4651 comm=syz.1.1403
[  152.920909][  T338] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  153.045681][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.046076][ T4670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725
[  153.070926][  T338] usb 6-1: Using ep0 maxpacket: 8
[  153.097441][  T338] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.111761][  T338] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40
[  153.121871][  T338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.131377][ T4677] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.131475][  T338] usb 6-1: Product: ࠉ
[  153.132391][ T4677] rust_binder: Error in use_page_slow: ESRCH
[  153.138845][  T338] usb 6-1: Manufacturer: ѕ
[  153.143398][ T4677] rust_binder: use_range failure ESRCH
[  153.143426][ T4677] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  153.143442][ T4677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  153.143463][ T4677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732
[  153.150640][  T338] usb 6-1: SerialNumber: syz
[  153.196093][  T338] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  153.207019][  T338] usb 6-1: no configuration chosen from 1 choice
[  153.352884][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.361989][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.448697][ T4699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1419'.
[  153.459831][   T36] audit: type=1400 audit(1753619208.700:456): avc:  denied  { write } for  pid=4698 comm="syz.1.1419" name="/" dev="configfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  154.364413][ T4743] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.365358][ T4743] rust_binder: Error in use_page_slow: ESRCH
[  154.372668][ T4743] rust_binder: use_range failure ESRCH
[  154.379347][ T4743] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[  154.385148][ T4743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  154.393866][ T4743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:757
[  154.539556][ T4755] 9pnet_fd: Insufficient options for proto=fd
[  155.267601][ T4773] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.271569][ T4773] rust_binder: Error in use_page_slow: ESRCH
[  155.278141][ T4773] rust_binder: use_range failure ESRCH
[  155.284474][ T4773] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  155.290034][ T4773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  155.298178][ T4773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:763
[  155.324097][ T4776] rust_binder: Error in use_page_slow: ESRCH
[  155.333639][ T4776] rust_binder: use_range failure ESRCH
[  155.339808][ T4776] rust_binder: Failed to allocate buffer. len:72, is_oneway:true
[  155.345743][ T4776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  155.354241][ T4776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:765
[  155.417323][   T36] audit: type=1326 audit(1753619210.660:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e418e9a9 code=0x7fc00000
[  155.485817][ T4801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4801 comm=syz.0.1452
[  155.488973][ T4802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4802 comm=syz.0.1452
[  155.539824][ T4811] exFAT-fs (rnullb0): invalid boot record signature
[  155.547813][ T4811] exFAT-fs (rnullb0): failed to read boot sector
[  155.555797][ T4811] exFAT-fs (rnullb0): failed to recognize exfat type
[  155.602742][ T4826] overlayfs: failed to clone lowerpath
[  155.692268][  T465] usb 6-1: USB disconnect, device number 6
[  155.957797][ T4850] 9pnet_fd: p9_fd_create_unix (4850): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  156.081717][   T36] audit: type=1400 audit(1753619211.330:458): avc:  denied  { read write } for  pid=4854 comm="syz.5.1471" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.106713][   T36] audit: type=1400 audit(1753619211.330:459): avc:  denied  { open } for  pid=4854 comm="syz.5.1471" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.132946][   T36] audit: type=1400 audit(1753619211.330:460): avc:  denied  { mounton } for  pid=4854 comm="syz.5.1471" path="/36" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  156.155948][   T36] audit: type=1400 audit(1753619211.330:461): avc:  denied  { mount } for  pid=4854 comm="syz.5.1471" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  156.178959][   T36] audit: type=1400 audit(1753619211.350:462): avc:  denied  { create } for  pid=4854 comm="syz.5.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.201174][   T36] audit: type=1400 audit(1753619211.360:463): avc:  denied  { write } for  pid=4854 comm="syz.5.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.222824][   T36] audit: type=1400 audit(1753619211.360:464): avc:  denied  { read } for  pid=4854 comm="syz.5.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.245132][   T36] audit: type=1400 audit(1753619211.370:465): avc:  denied  { unmount } for  pid=4100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  156.366681][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.376600][ T4871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123
[  156.377525][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.444959][ T4874] overlayfs: failed to clone upperpath
[  156.470189][  T465] rust_binder: 4864: removing orphan mapping 0:1048
[  156.492085][ T4881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127
[  156.860868][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  156.937679][ T4930] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  157.031272][    T9] usb 6-1: Using ep0 maxpacket: 16
[  157.040710][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  157.068424][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  157.101576][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.120874][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  157.139630][    T9] usb 6-1: SerialNumber: syz
[  157.149766][ T4896] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  157.370899][    T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  157.393885][    T9] usb 6-1: USB disconnect, device number 7
[  157.501798][ T4961] binder: Unknown parameter ''
[  157.678454][ T4977] fuse: Bad value for 'fd'
[  157.710349][ T4979] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.884103][ T4988] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.911799][ T4993] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.970484][ T4994] rust_binder: Error in use_page_slow: ESRCH
[  157.977133][ T4994] rust_binder: use_range failure ESRCH
[  157.984000][ T4994] rust_binder: Failed to allocate buffer. len:16, is_oneway:true
[  157.989967][ T4994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  157.998348][ T4994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:820
[  158.114526][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'.
[  158.345368][ T5023] fuse: Bad value for 'fd'
[  158.416181][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  158.481910][   T36] kauditd_printk_skb: 84 callbacks suppressed
[  158.481932][   T36] audit: type=1400 audit(1753619213.730:550): avc:  denied  { write } for  pid=5032 comm="syz.5.1532" name="sockstat6" dev="proc" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  158.554719][   T36] audit: type=1400 audit(1753619213.800:551): avc:  denied  { watch } for  pid=5053 comm="syz.0.1538" path="/300" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  158.584543][   T36] audit: type=1400 audit(1753619213.830:552): avc:  denied  { bind } for  pid=5060 comm="syz.1.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  158.629841][ T5068] overlayfs: failed to clone upperpath
[  158.638650][   T36] audit: type=1400 audit(1753619213.880:553): avc:  denied  { nlmsg_read } for  pid=5032 comm="syz.5.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.757788][   T36] audit: type=1400 audit(1753619214.000:554): avc:  denied  { ioctl } for  pid=5070 comm="syz.3.1543" path="socket:[22214]" dev="sockfs" ino=22214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.765984][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.795912][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.127264][   T36] audit: type=1400 audit(1753619214.370:555): avc:  denied  { write } for  pid=5072 comm="syz.0.1544" laddr=172.20.20.10 lport=2 faddr=172.20.20.40 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  159.215036][   T36] audit: type=1400 audit(1753619214.460:556): avc:  denied  { mounton } for  pid=5075 comm="syz.5.1545" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  159.215179][ T5077] /dev/sg0: Can't lookup blockdev
[  159.294031][ T5083] 9pnet_fd: Insufficient options for proto=fd
[  159.895732][   T36] audit: type=1400 audit(1753619215.140:557): avc:  denied  { setopt } for  pid=5116 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  159.916531][   T36] audit: type=1400 audit(1753619215.160:558): avc:  denied  { read } for  pid=5116 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  159.927672][ T5121] netlink: 'syz.0.1558': attribute type 58 has an invalid length.
[  159.945745][ T5121] gretap0: left promiscuous mode
[  159.967451][   T36] audit: type=1400 audit(1753619215.210:559): avc:  denied  { bind } for  pid=5127 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  159.994487][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'.
[  160.304727][ T5159] kvm: pic: non byte write
[  160.344121][ T5163] fuse: Bad value for 'user_id'
[  160.349018][ T5163] fuse: Bad value for 'user_id'
[  160.410580][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.419545][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.448133][ T5173] rust_binder: Got transaction with invalid offset.
[  160.448173][ T5173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  160.455345][ T5173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[  160.911813][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.931212][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.939179][ T5194] bridge_slave_0: entered allmulticast mode
[  160.947884][ T5194] bridge_slave_0: entered promiscuous mode
[  160.955974][ T5199] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  160.958533][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.964668][ T5199] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  160.981425][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.984094][ T5199] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  160.995433][ T5194] bridge_slave_1: entered allmulticast mode
[  161.001645][ T5199] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  161.007968][ T5194] bridge_slave_1: entered promiscuous mode
[  161.021448][ T5201] 9pnet_fd: Insufficient options for proto=fd
[  161.106135][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.113731][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.121558][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.129313][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.154572][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.163009][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.173462][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.181309][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.192542][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.200155][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.229775][ T5194] veth0_vlan: entered promiscuous mode
[  161.242805][ T5194] veth1_macvtap: entered promiscuous mode
[  161.530928][  T369] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  161.577751][ T5239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  161.597001][ T5240] rust_binder: 5237 RLIMIT_NICE not set
[  161.643104][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.664354][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.688390][ T5259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  161.689292][ T5259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  161.696628][ T5259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:857
[  161.699414][  T369] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  161.726378][  T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.736110][  T369] usb 2-1: Product: syz
[  161.740489][  T369] usb 2-1: Manufacturer: syz
[  161.745448][  T369] usb 2-1: SerialNumber: syz
[  161.900889][  T338] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  162.060916][  T338] usb 6-1: Using ep0 maxpacket: 16
[  162.068133][  T338] usb 6-1: unable to get BOS descriptor or descriptor too short
[  162.077513][  T338] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.092002][  T338] usb 6-1: config 1 interface 0 has no altsetting 0
[  162.101083][  T338] usb 6-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.40
[  162.111725][  T338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.121007][  T338] usb 6-1: Product: syz
[  162.125382][  T338] usb 6-1: Manufacturer: syz
[  162.130305][  T338] usb 6-1: SerialNumber: syz
[  162.391339][ T5274] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  162.457466][ T5276] SELinux:  policydb version 617752092 does not match my version range 15-33
[  162.467341][ T5276] SELinux: failed to load policy
[  162.496267][ T5280] 9pnet_fd: p9_fd_create_tcp (5280): problem binding to privport
[  162.647600][  T338] usbhid 6-1:1.0: can't add hid device: -71
[  162.654359][  T338] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  162.664024][  T338] usb 6-1: USB disconnect, device number 9
[  162.713831][ T5292] rust_binder: Write failure EFAULT in pid:881
[  162.732642][ T5294] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.747802][ T5294] rust_binder: Error in use_page_slow: ESRCH
[  162.755920][ T5294] rust_binder: use_range failure ESRCH
[  162.762947][ T5294] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[  162.770647][ T5294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  162.780517][ T5294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:883
[  162.835908][ T5297] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.850192][ T5297] rust_binder: Error in use_page_slow: ESRCH
[  162.857890][ T5297] rust_binder: use_range failure ESRCH
[  162.864056][ T5297] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  162.869626][ T5297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  162.878536][ T5297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:886
[  162.954547][ T5300] 9pnet_fd: Insufficient options for proto=fd
[  162.975506][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.985451][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.153999][  T369] rust_binder: 5253: removing orphan mapping 0:112
[  163.160698][  T369] rust_binder: 0: removing orphan mapping 112:1048
[  163.263674][ T5311] rust_binder: Got transaction with invalid offset.
[  163.263715][ T5311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  163.271150][ T5311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192
[  163.523433][   T36] kauditd_printk_skb: 49 callbacks suppressed
[  163.523454][   T36] audit: type=1326 audit(1753619218.770:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.0.1625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x0
[  163.567144][  T338] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  163.720927][  T338] usb 6-1: Using ep0 maxpacket: 16
[  163.729309][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.738296][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.750884][  T338] usb 6-1: unable to get BOS descriptor or descriptor too short
[  163.760464][  T338] usb 6-1: unable to read config index 0 descriptor/start: -71
[  163.768511][  T338] usb 6-1: can't read configurations, error -71
[  164.303656][  T395] usb 2-1: USB disconnect, device number 9
[  164.370281][ T5338] fuse: Bad value for 'user_id'
[  164.376597][ T5338] fuse: Bad value for 'user_id'
[  165.287219][   T36] audit: type=1400 audit(1753619220.530:610): avc:  denied  { mounton } for  pid=5351 comm="syz.1.1634" path="/3/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  165.311669][ T5354] rust_binder: Error in use_page_slow: ESRCH
[  165.311701][ T5354] rust_binder: use_range failure ESRCH
[  165.318482][ T5354] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  165.324390][ T5354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  165.333478][ T5354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:9
[  165.362180][ T5353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9
[  165.372286][  T465] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  165.482977][ T5363] tipc: Started in network mode
[  165.488250][ T5363] tipc: Node identity ac14140f, cluster identity 4711
[  165.496340][ T5363] tipc: New replicast peer: 255.255.255.255
[  165.503024][ T5363] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.540960][  T465] usb 6-1: Using ep0 maxpacket: 16
[  165.547138][   T36] audit: type=1400 audit(1753619220.790:611): avc:  denied  { ioctl } for  pid=5365 comm="syz.0.1638" path="socket:[24215]" dev="sockfs" ino=24215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  165.577167][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.588283][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.599223][  T465] usb 6-1: unable to get BOS descriptor or descriptor too short
[  165.610288][  T465] usb 6-1: unable to read config index 0 descriptor/start: -71
[  165.622528][  T465] usb 6-1: can't read configurations, error -71
[  166.065257][   T36] audit: type=1400 audit(1753619221.310:612): avc:  denied  { create } for  pid=5372 comm="syz.0.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  166.105326][   T36] audit: type=1400 audit(1753619221.310:613): avc:  denied  { name_bind } for  pid=5372 comm="syz.0.1641" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  166.134713][   T36] audit: type=1400 audit(1753619221.310:614): avc:  denied  { node_bind } for  pid=5372 comm="syz.0.1641" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  166.169410][ T5382] rust_binder: Error while translating object.
[  166.169446][ T5382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  166.170306][   T36] audit: type=1400 audit(1753619221.380:615): avc:  denied  { ioctl } for  pid=5377 comm="syz.3.1643" path="socket:[24302]" dev="sockfs" ino=24302 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  166.199800][ T5382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:201
[  166.214203][ T5385] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1645'.
[  166.226098][ T5386] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.242967][ T5386] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  166.251848][ T5386] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  166.264651][ T5386] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  166.276287][ T5386] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  166.291227][ T5390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203
[  166.321064][ T5395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.337817][ T5395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.346853][ T5397] rust_binder: Error in use_page_slow: ESRCH
[  166.351209][ T5398] rust_binder: Error while translating object.
[  166.357421][ T5395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.363521][ T5398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  166.369790][ T5397] rust_binder: use_range failure ESRCH
[  166.384300][ T5395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.390481][ T5398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13
[  166.390710][ T5395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.423986][  T369] rust_binder: 5402: removing orphan mapping 0:4120
[  166.446125][ T5397] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  166.446153][ T5397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  166.468949][ T5397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:904
[  166.481440][ T5416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.580610][ T5422] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.587391][ T5412] rust_binder: Error in use_page_slow: ESRCH
[  166.595240][ T5412] rust_binder: use_range failure ESRCH
[  166.596100][ T5422] rust_binder: Error in use_page_slow: ESRCH
[  166.601772][ T5412] rust_binder: Failed to allocate buffer. len:1072, is_oneway:true
[  166.601813][ T5412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  166.618816][ T5422] rust_binder: use_range failure ESRCH
[  166.625876][ T5412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208
[  166.636464][    T9] tipc: Node number set to 2886997007
[  166.652526][ T5426] rust_binder: 208: no such ref 3
[  166.671025][ T5422] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[  166.671056][ T5422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  166.689327][ T5422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:909
[  166.784925][ T5436] /dev/nbd5: Can't lookup blockdev
[  166.809465][ T5438] /dev/nbd5: Can't lookup blockdev
[  166.880457][   T36] audit: type=1400 audit(1753619222.120:616): avc:  denied  { name_bind } for  pid=5444 comm="syz.5.1667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  167.283233][   T36] audit: type=1400 audit(1753619222.530:617): avc:  denied  { remount } for  pid=5466 comm="syz.5.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  167.325718][   T36] audit: type=1400 audit(1753619222.560:618): avc:  denied  { read } for  pid=5466 comm="syz.5.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.450955][  T369] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  167.574807][ T5475] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  167.575356][ T5475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5475 comm=syz.5.1674
[  167.616580][ T5441] binder: Unknown parameter 'sw'
[  167.622964][ T5477] binder: Unknown parameter 'sw'
[  167.632012][  T369] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  167.645293][  T369] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  167.659436][  T369] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.675528][  T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.692462][  T369] usb 2-1: Product: 鳠꽈좭膎땺틹珟鋄蟔穻핳ᄄ쐱篬鹒퍨㯠쑉
[  167.704413][  T369] usb 2-1: Manufacturer: Ь
[  167.709336][  T369] usb 2-1: SerialNumber: 猲轇છ益틈┨欆﹵䪖璚퀎깄궮鞕쩫뺛㩮띵㍔Ⓐ됟ⷮḾ㬺꽳﨩隁鷽ꪾ㗺﹮ꞛꭀ鹨趽拥틔췢䌇⭕ዂ胦፻㏄⃡蠢ﾸᇎ쵸廳瀤⎎꠮烥剧ﶫ䤎淨鼆朤ᨇ痡鱢ヨᙻ來贚䮳軞㺬ꧭ䮫䶮⣡횜髏뇑憬涸ᨦ䃣鼴臈ᱩﾏ껺㝞澠➭皦ॠ얬㾮뎧몜O槧뫴ᘓΏ⫥㰄교ມቴ開
[  167.970933][  T369] usb 2-1: USB disconnect, device number 10
[  168.332323][ T5508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.342931][ T5508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.371618][ T5508] input: syz1 as /devices/virtual/input/input16
[  168.438794][ T5515] rust_binder: Error while translating object.
[  168.438850][ T5515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.446865][ T5515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[  168.539105][   T36] kauditd_printk_skb: 19 callbacks suppressed
[  168.539129][   T36] audit: type=1400 audit(1753619223.780:638): avc:  denied  { read } for  pid=5518 comm="syz.1.1690" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  168.583142][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'.
[  168.631657][   T36] audit: type=1400 audit(1753619223.830:639): avc:  denied  { open } for  pid=5518 comm="syz.1.1690" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  168.675242][ T5527] /dev/sg0: Can't lookup blockdev
[  168.720915][ T5529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[  168.721505][   T36] audit: type=1400 audit(1753619223.970:640): avc:  denied  { bind } for  pid=5528 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  168.772785][ T5530] rust_binder: Error while translating object.
[  168.772834][ T5530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  168.781607][   T36] audit: type=1400 audit(1753619224.020:641): avc:  denied  { accept } for  pid=5528 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  168.786702][ T5530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:26
[  168.800934][   T36] audit: type=1400 audit(1753619224.020:642): avc:  denied  { transfer } for  pid=5528 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  168.832451][ T5530] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  168.947761][   T36] audit: type=1400 audit(1753619224.190:643): avc:  denied  { create } for  pid=5522 comm="syz.5.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  169.088158][   T36] audit: type=1400 audit(1753619224.330:644): avc:  denied  { execute } for  pid=5541 comm="syz.5.1698" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  169.154563][ T5544] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.155360][   T36] audit: type=1400 audit(1753619224.400:645): avc:  denied  { wake_alarm } for  pid=5543 comm="syz.3.1699" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  169.156057][ T5544] netlink: 'syz.3.1699': attribute type 3 has an invalid length.
[  169.170968][  T395] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  169.185847][ T5544] binder: Bad value for 'stats'
[  169.206512][ T5544] rust_binder: Error in use_page_slow: ESRCH
[  169.206539][ T5544] rust_binder: use_range failure ESRCH
[  169.212743][ T5544] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  169.218258][ T5544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  169.226538][ T5544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:933
[  169.350863][  T395] usb 2-1: Using ep0 maxpacket: 32
[  169.370381][  T395] usb 2-1: unable to get BOS descriptor or descriptor too short
[  169.380774][  T395] usb 2-1: config 8 has an invalid interface number: 220 but max is 0
[  169.397079][  T395] usb 2-1: config 8 has no interface number 0
[  169.412154][  T395] usb 2-1: config 8 interface 220 altsetting 135 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  169.427192][  T395] usb 2-1: config 8 interface 220 has no altsetting 0
[  169.437478][  T395] usb 2-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=36.82
[  169.448876][  T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.459017][  T395] usb 2-1: Product: syz
[  169.465062][  T395] usb 2-1: Manufacturer: syz
[  169.470034][  T395] usb 2-1: SerialNumber: syz
[  169.475596][   T36] audit: type=1400 audit(1753619224.720:646): avc:  denied  { create } for  pid=5549 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  169.514543][ T5552] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true
[  169.515018][ T5553] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.548814][ T5558] rust_binder: Error in use_page_slow: ESRCH
[  169.548845][ T5558] rust_binder: use_range failure ESRCH
[  169.556320][ T5558] rust_binder: Failed to allocate buffer. len:4104, is_oneway:true
[  169.562455][ T5558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  169.572035][ T5558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:946
[  169.610011][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.632922][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.651456][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.662836][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.678901][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.689884][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.711559][ T5539] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1696'.
[  169.743415][  T395] usb 2-1: USB disconnect, device number 11
[  169.965961][ T5563] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  169.974102][ T5563] rust_binder: Write failure EINVAL in pid:247
[  170.000917][   T36] audit: type=1400 audit(1753619225.240:647): avc:  denied  { connect } for  pid=5569 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  170.002418][ T5570] fuseblk: Bad value for 'fd'
[  170.035519][ T5570] fuse: Bad value for 'fd'
[  170.050883][  T395] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  170.210846][  T395] usb 2-1: Using ep0 maxpacket: 16
[  170.218584][  T395] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.232400][  T395] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.243360][  T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.251958][  T395] usb 2-1: SerialNumber: syz
[  170.259251][  T395] hub 2-1:1.0: bad descriptor, ignoring hub
[  170.266279][  T395] hub 2-1:1.0: probe with driver hub failed with error -5
[  170.383114][ T5578] /dev/rnullb0: Can't open blockdev
[  170.389233][ T5578] /dev/rnullb0: Can't open blockdev
[  170.397144][ T5578] /dev/rnullb0: Can't open blockdev
[  170.404114][ T5578] /dev/rnullb0: Can't open blockdev
[  170.410756][ T5578] /dev/rnullb0: Can't open blockdev
[  170.416981][ T5578] /dev/rnullb0: Can't open blockdev
[  170.424145][ T5578] /dev/rnullb0: Can't open blockdev
[  170.430934][ T5578] /dev/rnullb0: Can't open blockdev
[  170.438484][ T5578] /dev/rnullb0: Can't open blockdev
[  170.445690][ T5578] /dev/rnullb0: Can't open blockdev
[  170.451893][ T5578] /dev/rnullb0: Can't open blockdev
[  170.459650][ T5578] /dev/rnullb0: Can't open blockdev
[  170.466296][ T5578] /dev/rnullb0: Can't open blockdev
[  170.466472][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.472134][ T5578] /dev/rnullb0: Can't open blockdev
[  170.472344][ T5578] /dev/rnullb0: Can't open blockdev
[  170.482738][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.489152][ T5578] /dev/rnullb0: Can't open blockdev
[  170.506474][ T5578] /dev/rnullb0: Can't open blockdev
[  170.512314][ T5578] /dev/rnullb0: Can't open blockdev
[  170.517924][ T5578] /dev/rnullb0: Can't open blockdev
[  170.523655][ T5578] /dev/rnullb0: Can't open blockdev
[  170.529281][ T5578] /dev/rnullb0: Can't open blockdev
[  170.535631][ T5578] /dev/rnullb0: Can't open blockdev
[  170.541361][ T5578] /dev/rnullb0: Can't open blockdev
[  170.547599][ T5578] /dev/rnullb0: Can't open blockdev
[  170.553921][ T5578] /dev/rnullb0: Can't open blockdev
[  170.559795][ T5578] /dev/rnullb0: Can't open blockdev
[  170.567282][ T5578] /dev/rnullb0: Can't open blockdev
[  170.581220][ T5578] /dev/rnullb0: Can't open blockdev
[  170.587391][ T5578] /dev/rnullb0: Can't open blockdev
[  170.593164][ T5578] /dev/rnullb0: Can't open blockdev
[  170.599092][ T5578] /dev/rnullb0: Can't open blockdev
[  170.606597][ T5578] /dev/rnullb0: Can't open blockdev
[  170.612645][ T5578] /dev/rnullb0: Can't open blockdev
[  170.618646][ T5578] /dev/rnullb0: Can't open blockdev
[  170.624349][ T5578] /dev/rnullb0: Can't open blockdev
[  170.630950][ T5578] /dev/rnullb0: Can't open blockdev
[  170.637187][ T5578] /dev/rnullb0: Can't open blockdev
[  170.643247][ T5578] /dev/rnullb0: Can't open blockdev
[  170.649034][ T5578] /dev/rnullb0: Can't open blockdev
[  170.655728][ T5578] /dev/rnullb0: Can't open blockdev
[  170.662142][ T5578] /dev/rnullb0: Can't open blockdev
[  170.668431][ T5578] /dev/rnullb0: Can't open blockdev
[  170.670952][  T395] usb 2-1: USB disconnect, device number 12
[  170.674740][ T5578] /dev/rnullb0: Can't open blockdev
[  170.688353][ T5578] /dev/rnullb0: Can't open blockdev
[  170.696178][ T5578] /dev/rnullb0: Can't open blockdev
[  170.701842][ T5578] /dev/rnullb0: Can't open blockdev
[  170.707549][ T5578] /dev/rnullb0: Can't open blockdev
[  170.713317][ T5578] /dev/rnullb0: Can't open blockdev
[  170.718948][ T5578] /dev/rnullb0: Can't open blockdev
[  170.724660][ T5578] /dev/rnullb0: Can't open blockdev
[  170.730646][ T5578] /dev/rnullb0: Can't open blockdev
[  170.736956][ T5578] /dev/rnullb0: Can't open blockdev
[  170.742837][ T5578] /dev/rnullb0: Can't open blockdev
[  170.748990][ T5578] /dev/rnullb0: Can't open blockdev
[  170.754890][ T5578] /dev/rnullb0: Can't open blockdev
[  170.760953][ T5578] /dev/rnullb0: Can't open blockdev
[  170.766614][ T5578] /dev/rnullb0: Can't open blockdev
[  170.772520][ T5578] /dev/rnullb0: Can't open blockdev
[  170.778321][ T5578] /dev/rnullb0: Can't open blockdev
[  170.784095][ T5578] /dev/rnullb0: Can't open blockdev
[  170.789607][ T5578] /dev/rnullb0: Can't open blockdev
[  170.796309][ T5578] /dev/rnullb0: Can't open blockdev
[  170.802158][ T5578] /dev/rnullb0: Can't open blockdev
[  170.807862][ T5578] /dev/rnullb0: Can't open blockdev
[  170.813641][ T5578] /dev/rnullb0: Can't open blockdev
[  170.834801][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.844006][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.853743][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.862508][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.931062][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  170.992311][ T5593] fuse: Bad value for 'fd'
[  171.082170][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.089899][ T5603] 9pnet_fd: Insufficient options for proto=fd
[  171.093768][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.111602][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  171.122061][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.131459][    T9] usb 2-1: config 0 descriptor??
[  171.483216][ T5642] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true
[  171.566696][ T5657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:967
[  171.852920][ T5682] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1745'.
[  171.873293][ T5682] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1745'.
[  171.921658][ T5693] macsec0: left promiscuous mode
[  171.927358][ T5693] macsec0: left allmulticast mode
[  172.354770][  T395] rust_binder: 5648: removing orphan mapping 0:1048
[  172.457767][ T5714] 9pnet_fd: Insufficient options for proto=fd
[  172.571269][ T5727] fuse: Bad value for 'fd'
[  172.583500][ T5727] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1761'.
[  172.646542][ T5737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1764'.
[  173.319468][ T5777] rust_binder: 5776 RLIMIT_NICE not set
[  173.548273][   T36] kauditd_printk_skb: 13 callbacks suppressed
[  173.548297][   T36] audit: type=1400 audit(1753619229.786:661): avc:  denied  { map } for  pid=5785 comm="syz.3.1780" path="socket:[24984]" dev="sockfs" ino=24984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  173.588960][   T36] audit: type=1400 audit(1753619229.786:662): avc:  denied  { read } for  pid=5785 comm="syz.3.1780" path="socket:[24984]" dev="sockfs" ino=24984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  173.624315][   T36] audit: type=1400 audit(1753619229.846:663): avc:  denied  { bind } for  pid=5789 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  173.693765][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  173.700073][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  173.711431][ T5799] binder: Bad value for 'max'
[  173.723014][    T9] usb 2-1: USB disconnect, device number 13
[  173.741713][ T5801] rust_binder: Got transaction with invalid offset.
[  173.741759][ T5801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  173.749090][ T5801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[  173.768311][   T36] audit: type=1400 audit(1753619230.006:664): avc:  denied  { unmount } for  pid=5194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  173.920874][ T5816] rust_binder: 50: no such ref 3
[  173.926246][ T5816] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  173.972437][ T5819] netlink: 'syz.1.1791': attribute type 11 has an invalid length.
[  174.250942][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  174.302347][ T5835] 9pnet_fd: Insufficient options for proto=fd
[  174.400948][    T9] usb 2-1: Using ep0 maxpacket: 32
[  174.408873][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  174.418404][    T9] usb 2-1: config 128 has an invalid interface number: 26 but max is 1
[  174.427343][    T9] usb 2-1: config 128 has an invalid interface number: 250 but max is 1
[  174.436862][    T9] usb 2-1: config 128 has no interface number 0
[  174.450833][    T9] usb 2-1: config 128 has no interface number 1
[  174.457718][    T9] usb 2-1: config 128 interface 26 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  174.466998][ T5842] 9pnet_fd: Insufficient options for proto=fd
[  174.471159][    T9] usb 2-1: config 128 interface 250 altsetting 198 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  174.477931][ T5842] 9pnet_fd: Insufficient options for proto=fd
[  174.488418][    T9] usb 2-1: config 128 interface 26 has no altsetting 0
[  174.515034][    T9] usb 2-1: config 128 interface 250 has no altsetting 0
[  174.524488][    T9] usb 2-1: Dual-Role OTG device on HNP port
[  174.532097][    T9] usb 2-1: New USB device found, idVendor=0846, idProduct=4260, bcdDevice=5f.c2
[  174.548610][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.563585][    T9] usb 2-1: Product: syz
[  174.568622][    T9] usb 2-1: Manufacturer: syz
[  174.575430][    T9] usb 2-1: SerialNumber: syz
[  174.730242][   T36] audit: type=1326 audit(1753619230.966:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.5.1805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d658e9a9 code=0x0
[  174.774439][ T5865] rust_binder: Failed copying remainder into alloc: EFAULT
[  174.774465][ T5865] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  174.782945][ T5865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  174.786514][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1805'.
[  174.803724][ T5865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1004
[  174.902287][ T5879] netlink: 1603 bytes leftover after parsing attributes in process `syz.0.1810'.
[  174.972383][    T9] usb 2-1: USB disconnect, device number 14
[  174.985456][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'.
[  175.005241][ T5893] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1815'.
[  175.016467][ T5894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1815'.
[  175.127261][ T5907] rust_binder: Write failure EFAULT in pid:1023
[  175.326393][ T5909] fuse: Invalid gid '00000000000037777777777'
[  175.340177][ T5909] FAT-fs (rnullb0): bogus number of reserved sectors
[  175.348501][ T5909] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  175.371630][   T36] audit: type=1326 audit(1753619231.616:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x7ffc0000
[  175.397323][   T36] audit: type=1326 audit(1753619231.616:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x7ffc0000
[  175.423418][   T36] audit: type=1326 audit(1753619231.616:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f316198e9a9 code=0x7ffc0000
[  175.457987][   T36] audit: type=1326 audit(1753619231.616:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x7ffc0000
[  175.485142][   T36] audit: type=1326 audit(1753619231.616:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316198e9a9 code=0x7ffc0000
[  175.526069][ T5932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=5932 comm=syz.1.1827
[  175.577020][ T5936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  175.577059][ T5936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1035
[  175.698839][ T5951] overlay: Unknown parameter 'appraise'
[  175.732016][ T5958] tmpfs: Unknown parameter ':;2�SHDO��k����Q:ۘM�ck?3�\7o+Y�;W`��z��C�U\��v��"�I�]�:sU��Br?�I�S�Y�,8'
[  175.745719][ T5958] fuse: Bad value for 'fd'
[  175.751287][ T5958] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1837'.
[  175.766915][ T5962] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.767274][ T5962] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  175.886979][ T5974] rust_binder: Write failure EFAULT in pid:1052
[  175.903569][ T5974] tmpfs: Bad value for 'nr_blocks'
[  175.918169][ T5974] 9pnet_fd: Insufficient options for proto=fd
[  176.106033][ T5979] futex_wake_op: syz.1.1845 tries to shift op by -1; fix this program
[  176.369216][ T6004] binder: Unknown parameter 'fscontext?}'
[  176.400275][ T6010] loop7: detected capacity change from 0 to 7
[  176.408370][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.417911][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.420771][ T6012] rust_binder: 82: no such ref 0
[  176.430425][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.438581][ T6012] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  176.441214][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.448798][ T6012] rust_binder: 82: no such ref 0
[  176.457136][ T4118]  loop7: unable to read partition table
[  176.464024][ T6014] rust_binder: 82: no such ref 0
[  176.471204][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.485868][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.510830][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.521728][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.530810][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.541059][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.550842][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.560281][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.569223][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.578785][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.583025][ T6020] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  176.588522][ T6010]  loop7: unable to read partition table
[  176.588833][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.596961][ T6020] rust_binder: Read failure Err(EFAULT) in pid:87
[  176.602834][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.614366][ T6010] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  176.621486][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.656092][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  176.702111][ T6010] loop7: detected capacity change from 7 to 8
[  177.118570][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.133013][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.408620][ T6065] fuse: Bad value for 'fd'
[  177.744382][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1875'.
[  177.757001][ T6070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6070 comm=syz.5.1875
[  177.983465][ T6095] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  177.994991][ T6095] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  178.005752][ T6095] overlayfs: missing 'lowerdir'
[  178.053687][ T6105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6105 comm=syz.0.1885
[  178.085721][ T6107] incfs: Options parsing error. -22
[  178.091285][ T6107] incfs: mount failed -22
[  178.192475][ T6111] netlink: 'syz.0.1888': attribute type 12 has an invalid length.
[  178.311278][ T6128] 9pnet_fd: Insufficient options for proto=fd
[  178.425054][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1898'.
[  179.199212][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.207969][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.218692][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.228435][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.237822][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.247841][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.285335][   T36] kauditd_printk_skb: 87 callbacks suppressed
[  179.285359][   T36] audit: type=1400 audit(1753619235.526:758): avc:  denied  { mount } for  pid=6181 comm="syz.0.1914" name="/" dev="ramfs" ino=28704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  179.343391][ T6193] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.360636][   T36] audit: type=1400 audit(1753619235.596:759): avc:  denied  { read write } for  pid=6196 comm="syz.1.1918" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  179.423146][   T36] audit: type=1400 audit(1753619235.596:760): avc:  denied  { open } for  pid=6196 comm="syz.1.1918" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  179.541122][ T6222] rust_binder: 119: no such ref 3
[  179.546533][ T6222] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  179.663479][   T36] audit: type=1400 audit(1753619235.906:761): avc:  denied  { bind } for  pid=6228 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  179.690594][   T36] audit: type=1400 audit(1753619235.926:762): avc:  denied  { accept } for  pid=6228 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  179.777785][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.786553][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.795590][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.805522][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.871037][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  180.000988][    T9] usb 2-1: device descriptor read/64, error -71
[  180.105794][   T36] audit: type=1400 audit(1753619236.346:763): avc:  denied  { getopt } for  pid=6251 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  180.160768][ T6260] 9pnet_fd: Insufficient options for proto=fd
[  180.250876][    T9] usb 2-1: device descriptor read/64, error -71
[  180.405580][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.420550][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.500873][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  180.573557][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=6286 comm=syz.5.1945
[  180.650862][    T9] usb 2-1: device descriptor read/64, error -71
[  180.707145][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1951'.
[  180.738988][ T6309] 9pnet_fd: Insufficient options for proto=fd
[  180.900924][    T9] usb 2-1: device descriptor read/64, error -71
[  180.973156][ T6325] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1958'.
[  181.011767][    T9] usb usb2-port1: attempt power cycle
[  181.184168][   T36] audit: type=1400 audit(1753619238.438:764): avc:  denied  { unmount } for  pid=6327 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  181.215141][ T6331] 9pnet_fd: Insufficient options for proto=fd
[  181.233563][   T36] audit: type=1400 audit(1753619238.478:765): avc:  denied  { bind } for  pid=6332 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  181.262431][ T6335] incfs: Error accessing: ./file0.
[  181.266096][ T6336] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1962'.
[  181.277491][ T6335] incfs: mount failed -20
[  181.298358][   T36] audit: type=1400 audit(1753619238.538:766): avc:  denied  { getopt } for  pid=6341 comm="syz.0.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  181.322826][   T36] audit: type=1400 audit(1753619238.538:767): avc:  denied  { setopt } for  pid=6341 comm="syz.0.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  181.425459][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  181.452173][    T9] usb 2-1: device descriptor read/8, error -71
[  181.582218][    T9] usb 2-1: device descriptor read/8, error -71
[  181.820912][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  181.842578][    T9] usb 2-1: device descriptor read/8, error -71
[  181.972167][    T9] usb 2-1: device descriptor read/8, error -71
[  182.044350][ T6371] 9pnet_fd: Insufficient options for proto=fd
[  182.084825][    T9] usb usb2-port1: unable to enumerate USB device
[  182.150526][    T9] rust_binder: 6338: removing orphan mapping 0:1048
[  182.161667][ T6383] 9pnet_fd: Insufficient options for proto=fd
[  182.186076][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1980'.
[  182.224845][ T6388] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  182.641478][ T6390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124
[  182.705209][ T6395] rust_binder: Error while translating object.
[  182.715413][ T6395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  182.723305][ T6395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:124
[  182.735928][ T6395] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  183.024762][ T6421] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  183.134691][ T6436] 9pnet_fd: Insufficient options for proto=fd
[  183.186142][ T6450] rust_binder: Error in use_page_slow: ESRCH
[  183.186173][ T6450] rust_binder: use_range failure ESRCH
[  183.198360][ T6450] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  183.198392][ T6450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  183.206957][ T6450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1115
[  184.189136][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.200319][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.352264][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.371240][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.386328][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.400146][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.414484][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.426921][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.440468][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.452974][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.466785][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.480647][ T6520] __vm_enough_memory: pid: 6520, comm: syz.1.2020, bytes: 18014402804453376 not enough memory for the allocation
[  184.825676][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.836951][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.849822][ T6537] x_tables: duplicate underflow at hook 2
[  185.550980][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.553739][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  185.553765][   T36] audit: type=1400 audit(1753619242.798:783): avc:  denied  { read } for  pid=6558 comm="syz.3.2033" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  185.562851][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.568719][ T6561] syz.3.2033 uses obsolete (PF_INET,SOCK_PACKET)
[  185.615286][ T6559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  185.615316][ T6559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1142
[  185.720905][   T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  185.883899][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  185.892232][   T31] usb 2-1: not running at top speed; connect to a high speed hub
[  185.901928][   T31] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  185.911343][   T31] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  185.922784][   T31] usb 2-1: config 4 has no interface number 0
[  185.932096][   T31] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  185.941413][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.950231][   T31] usb 2-1: Product: syz
[  185.954938][   T31] usb 2-1: Manufacturer: syz
[  185.959758][   T31] usb 2-1: SerialNumber: syz
[  186.019471][   T36] audit: type=1400 audit(1753619243.258:784): avc:  denied  { lock } for  pid=6576 comm="syz.0.2038" path="socket:[29701]" dev="sockfs" ino=29701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  186.172801][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2044'.
[  186.193446][   T31] usb 2-1: USB disconnect, device number 19
[  186.212743][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'.
[  186.243512][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2044'.
[  186.274292][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'.
[  186.340895][   T36] audit: type=1400 audit(1753619243.578:785): avc:  denied  { create } for  pid=6613 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  186.563441][ T6637] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[  186.563476][ T6637] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  186.571476][ T6637] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  186.587747][  T465] rust_binder: 6636: removing orphan mapping 0:1024
[  186.624372][ T6641] overlayfs: missing 'lowerdir'
[  186.624982][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'.
[  186.677039][   T36] audit: type=1400 audit(1753619243.918:786): avc:  denied  { write } for  pid=6644 comm="syz.3.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  186.842918][ T6650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  186.842945][ T6650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:178
[  186.868666][ T6653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.880058][ T6653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.888791][ T6653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.895256][ T6653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.921307][   T36] audit: type=1326 audit(1753619244.168:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.2062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd49cb8e9a9 code=0x0
[  187.483025][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'.
[  187.507916][   T31] rust_binder: get_current_thread was called from the wrong process.
[  187.555977][ T6706] netlink: 'syz.0.2077': attribute type 15 has an invalid length.
[  187.572855][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.584224][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.885409][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2091'.
[  189.402511][ T6790] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2108'.
[  189.799519][ T6805] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2113'.
[  190.070925][   T36] audit: type=1400 audit(1753619247.307:788): avc:  denied  { listen } for  pid=6829 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  190.110832][   T36] audit: type=1400 audit(1753619247.307:789): avc:  denied  { accept } for  pid=6829 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  190.306442][ T6844] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[  190.752398][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.771054][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.792680][ T6857] 8021q: VLANs not supported on lo
[  190.793028][   T36] audit: type=1400 audit(1753619248.037:790): avc:  denied  { setopt } for  pid=6856 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  191.405815][   T36] audit: type=1400 audit(1753619248.647:791): avc:  denied  { setopt } for  pid=6936 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  191.456341][ T6948] 9pnet_fd: Insufficient options for proto=fd
[  191.526291][   T36] audit: type=1400 audit(1753619248.767:792): avc:  denied  { block_suspend } for  pid=6949 comm="syz.3.2149" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  191.580874][   T36] audit: type=1400 audit(1753619248.767:793): avc:  denied  { accept } for  pid=6949 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  191.640131][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1175
[  191.657897][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.678166][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.012446][ T7003] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.012480][ T7003] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.270879][   T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  192.427215][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.430861][   T31] usb 2-1: Using ep0 maxpacket: 16
[  192.436780][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.442140][   T31] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  192.458807][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  192.472749][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  192.481864][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  192.489954][   T31] usb 2-1: SerialNumber: syz
[  192.697244][ T7008] 9pnet_fd: Insufficient options for proto=fd
[  192.703540][   T36] audit: type=1400 audit(1753619249.937:794): avc:  denied  { mounton } for  pid=7007 comm="syz.1.2167" path="/file0" dev="ramfs" ino=31174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  192.725613][   T36] audit: type=1400 audit(1753619249.947:795): avc:  denied  { read } for  pid=7049 comm="syz.0.2181" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  192.727380][   T31] cdc_acm 2-1:1.0: skipping garbage
[  192.752950][   T31] usb 2-1: USB disconnect, device number 20
[  192.970243][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.978695][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.979288][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.987780][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.015073][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'.
[  193.030006][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.038710][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.046929][ T7057] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  193.252607][   T36] audit: type=1400 audit(1753619250.497:796): avc:  denied  { append } for  pid=7073 comm="syz.1.2189" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  193.276555][   T36] audit: type=1400 audit(1753619250.497:797): avc:  denied  { ioctl } for  pid=7073 comm="syz.1.2189" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  193.304083][   T36] audit: type=1400 audit(1753619250.547:798): avc:  denied  { ioctl } for  pid=7071 comm="syz.0.2188" path="socket:[30493]" dev="sockfs" ino=30493 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  193.478363][ T7087] binder: Bad value for 'stats'
[  194.256787][ T7086] incfs: Can't find or create .index dir in ./file0
[  194.263594][ T7086] incfs: mount failed -103
[  194.299291][   T36] audit: type=1400 audit(1753619251.537:799): avc:  denied  { read } for  pid=7095 comm="syz.1.2196" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  194.395310][ T7107] netlink: 'syz.5.2199': attribute type 27 has an invalid length.
[  194.444385][ T7110] FAT-fs (rnullb0): bogus number of reserved sectors
[  194.451152][ T7110] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  194.959332][ T7126] 9pnet_fd: Insufficient options for proto=fd
[  195.077556][ T7159] fuse: Unknown parameter 'gr>zkid'
[  195.250407][ T7194] lo: entered promiscuous mode
[  195.262714][ T7194] lo: left promiscuous mode
[  195.279789][ T7202] rust_binder: 7203 RLIMIT_NICE not set
[  195.293761][  T369] rust_binder: 7201: removing orphan mapping 0:4248
[  195.447103][ T7228] 9pnet_fd: Insufficient options for proto=fd
[  195.560858][  T369] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  195.710869][  T369] usb 2-1: Using ep0 maxpacket: 16
[  195.717990][  T369] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  195.728202][  T369] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  195.742305][  T369] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.752193][  T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  195.760199][  T369] usb 2-1: SerialNumber: syz
[  195.765924][ T7207] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  195.974430][  T369] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  195.984094][  T369] usb 2-1: USB disconnect, device number 21
[  196.084008][ T7255] rust_binder: Write failure EFAULT in pid:1200
[  196.084105][ T7255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1200
[  196.493265][   T36] kauditd_printk_skb: 47 callbacks suppressed
[  196.493286][   T36] audit: type=1400 audit(1753619253.737:847): avc:  denied  { append } for  pid=7257 comm="syz.1.2250" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  196.493556][ T7258] random: crng reseeded on system resumption
[  196.503171][   T36] audit: type=1400 audit(1753619253.737:848): avc:  denied  { open } for  pid=7257 comm="syz.1.2250" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  196.556276][ T7258] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  196.561364][   T36] audit: type=1400 audit(1753619253.797:849): avc:  denied  { ioctl } for  pid=7257 comm="syz.1.2250" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  196.604245][ T7260] FAT-fs (rnullb0): bogus number of reserved sectors
[  196.611090][ T7260] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  196.658855][ T7265] TCP: out of memory -- consider tuning tcp_mem
[  196.665862][ T7265] ------------[ cut here ]------------
[  196.671441][ T7265] WARNING: CPU: 1 PID: 7265 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790
[  196.681208][ T7265] Modules linked in:
[  196.685372][ T7265] CPU: 1 UID: 0 PID: 7265 Comm: syz.1.2253 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b
[  196.699104][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  196.709248][ T7265] RIP: 0010:inet_sock_destruct+0x681/0x790
[  196.715255][ T7265] Code: a3 e8 e3 39 c8 fc 0f 0b e9 53 fe ff ff e8 d7 39 c8 fc 0f 0b e9 92 fe ff ff e8 cb 39 c8 fc 0f 0b e9 c4 fe ff ff e8 bf 39 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff
[  196.735124][ T7265] RSP: 0018:ffffc9000e4d7be8 EFLAGS: 00010293
[  196.741458][ T7265] RAX: ffffffff84bd9131 RBX: 0000000080002000 RCX: ffff88811ca61300
[  196.749527][ T7265] RDX: 0000000000000000 RSI: 0000000080002000 RDI: 0000000000000000
[  196.757591][ T7265] RBP: ffffc9000e4d7c30 R08: ffff888118fc8b7f R09: 1ffff110231f916f
[  196.765712][ T7265] R10: dffffc0000000000 R11: ffffed10231f9170 R12: ffff888118fc8a00
[  196.773838][ T7265] R13: ffff888118fc8a00 R14: ffff888118fc8b64 R15: 1ffff110231f9142
[  196.781889][ T7265] FS:  000055557abef500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  196.791102][ T7265] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.797740][ T7265] CR2: 00007fd49cdb5fac CR3: 0000000134560000 CR4: 00000000003526b0
[  196.805950][ T7265] DR0: 0000000000000002 DR1: 0004000000000002 DR2: 0000000000000408
[  196.813977][ T7265] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  196.822003][ T7265] Call Trace:
[  196.825305][ T7265]  <TASK>
[  196.828258][ T7265]  ? __cfi_inet_sock_destruct+0x10/0x10
[  196.833869][ T7265]  __sk_destruct+0x6b/0x6a0
[  196.838932][ T7265]  ? __sk_free+0x304/0x410
[  196.843492][ T7265]  __sk_free+0x313/0x410
[  196.847771][ T7265]  sk_free+0x58/0xb0
[  196.851734][ T7265]  tcp_close+0xc4/0x120
[  196.855940][ T7265]  inet_release+0x1b4/0x2c0
[  196.860478][ T7265]  sock_close+0xdd/0x280
[  196.864773][ T7265]  ? __cfi_sock_close+0x10/0x10
[  196.869652][ T7265]  __fput+0x1fe/0xa00
[  196.873746][ T7265]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  196.879338][ T7265]  ____fput+0x20/0x30
[  196.883476][ T7265]  task_work_run+0x1e0/0x250
[  196.888154][ T7265]  ? __cfi_task_work_run+0x10/0x10
[  196.893324][ T7265]  ? __kasan_check_read+0x15/0x20
[  196.898397][ T7265]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  196.904520][ T7265]  resume_user_mode_work+0x36/0x50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  196.909660][ T7265]  syscall_exit_to_user_mode+0x64/0xb0
[  196.915201][ T7265]  do_syscall_64+0x64/0xf0
[  196.919653][ T7265]  ? clear_bhb_loop+0x50/0xa0
[  196.924419][ T7265]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  196.930904][ T7265] RIP: 0033:0x7fd49cb8e9a9
[  196.933730][   T36] audit: type=1400 audit(1753619254.177:850): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[2488]" dev="pipefs" ino=2488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  196.935510][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.978710][ T7265] RSP: 002b:00007ffe8b2d5d28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  196.987433][ T7265] RAX: 0000000000000000 RBX: 0000000000030010 RCX: 00007fd49cb8e9a9
[  196.995519][ T7265] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  197.003564][ T7265] RBP: 00007fd49cdb7ba0 R08: 0000000000000001 R09: 000000168b2d601f
[  197.011611][ T7265] R10: 00007fd49ca00000 R11: 0000000000000246 R12: 00007fd49cdb5fac
[  197.020080][ T7265] R13: 00007fd49cdb5fa0 R14: ffffffffffffffff R15: 00007ffe8b2d5e40
[  197.028841][ T7265]  </TASK>
[  197.031923][ T7265] ---[ end trace 0000000000000000 ]---
[  197.090855][  T369] usb 4-1: USB disconnect, device number 34
[  197.348470][   T13] bridge_slave_1: left allmulticast mode
[  197.354214][   T13] bridge_slave_1: left promiscuous mode
[  197.359871][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.367680][   T13] bridge_slave_0: left allmulticast mode
[  197.373558][   T13] bridge_slave_0: left promiscuous mode
[  197.379206][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.524850][   T13] veth1_macvtap: left promiscuous mode
[  197.530422][   T13] veth0_vlan: left promiscuous mode
[  197.854311][   T13] bridge_slave_1: left allmulticast mode
[  197.860175][   T13] bridge_slave_1: left promiscuous mode
[  197.866077][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.873788][   T13] bridge_slave_0: left allmulticast mode
[  197.879457][   T13] bridge_slave_0: left promiscuous mode
[  197.885289][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.053058][   T13] tipc: Disabling bearer <udp:syz2>
[  198.058448][   T13] tipc: Left network mode
[  198.065028][   T13] veth1_macvtap: left promiscuous mode
[  198.070589][   T13] veth0_vlan: left promiscuous mode
[  203.750858][    C0] TCP: out of memory -- consider tuning tcp_mem