last executing test programs:

1m8.821992205s ago: executing program 1 (id=879):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = getpgid(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x484, 0x0, 0x4}]})
prlimit64(r1, 0x5, 0x0, &(0x7f0000000000))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1m8.570262299s ago: executing program 1 (id=885):
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x7, 0x0, 0x5, 0x4, 0x48, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8005, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffd, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x2000003, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x80, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x2, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x200, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fsopen(&(0x7f0000000080)='msdos\x00', 0x1)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000580))
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r5, &(0x7f0000000040), 0x10)
socket$inet(0x2, 0x800, 0xb1)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2801000000000000010072c6423f65d0b46078bd578881"], 0x128}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1m8.4833905s ago: executing program 1 (id=887):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000000)=0x1000, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="886a572b", 0x4}], 0x1}}], 0x1, 0x1004)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x2000000, 0x10010, r0, 0xffffe000)

1m8.470413741s ago: executing program 1 (id=888):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003})
fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd})
read(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$UI_DEV_DESTROY(r5, 0x5502)
r6 = open_tree(r5, &(0x7f00000000c0)='./file0/../file0\x00', 0x89903)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x16)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

1m8.413815672s ago: executing program 1 (id=890):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x8000000000003})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0) (async)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x14, r4, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x40090)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @exit_looper], 0x9e, 0x0, &(0x7f0000000540)="1912449404245bb05c7fb7bac578d59c51a7a7a11e512ae97516f6d5dd5a1b4b35544fefa545c931c9e421d2f2b686bbf91e7a18f73956eade8b0f24eedc064ca075d44e1be2b5d480ae453938e6345eade9c72da6874bd27d1edd3d1af72642a0853d4d538feea72e74faeca24a91162312038ee4c7d8cc3ab3a12402178a45cca36b6236dc1c71cd4847f9bb70d29ed8da7c78ef1595a44ac286ab69eb"})

1m8.251153054s ago: executing program 1 (id=891):
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x2)
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0xd000, 0x108000, 0x8})
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x3}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x803, 0x0) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x9, 0x40, '\x00', 0x37c0598b83533d83, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
fchdir(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) (async)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x60000, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="ba4100ed0f06ba4300ed2e0f01cf3ef90f7e990e00f3f3f20fb7e3f30f0926673e660f388051080fc75e8c", 0x2b}], 0x1, 0x69, &(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f0000000340)={0x2, 0x10, 0x81, 0x10001, 0x21, 0x1, 0xf9, 0xaf5}, &(0x7f0000000380)={0x5, 0x384, 0x2, 0x6, 0xc1, 0xffffffffffff8001, 0x100000000, 0x7f}, &(0x7f00000003c0)={0xa21b, 0xa, 0x0, 0x2, 0x4, 0x6}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x100]}, 0x8}) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000500)={0x8, 0x6}) (async)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000540)=0x8, 0x4) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000580)) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000005c0)={0x2, 0x6}) (async)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000600), 0x4) (async)
fsetxattr$security_capability(r1, &(0x7f0000000640), &(0x7f0000000680)=@v1={0x1000000, [{0x69, 0x4}]}, 0xc, 0x3) (async)
openat$cgroup_freezer_state(r4, &(0x7f00000006c0), 0x2, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000007c0)={&(0x7f0000000700)=""/164, 0xa4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000800)={0x0, 0x3, 0x1, 0x1000, &(0x7f0000fe7000/0x1000)=nil}) (async)
mmap$binder(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x99b)
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000880)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000840)=0x2}) (async)
r6 = geteuid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x400, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in6=@local, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x11, 0x0, r6}, {0x5, 0xd6, 0x6ad, 0x673, 0x8001, 0x9c37, 0x1, 0x2}, {0xf64, 0x1, 0x21d1, 0x267}, 0x7, 0x6e6bb8, 0x2, 0x1, 0x3, 0x2}, [@lastused={0xc, 0xf, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x90}, 0x40095) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

1m8.250379864s ago: executing program 32 (id=891):
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x2)
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0xd000, 0x108000, 0x8})
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x3}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x803, 0x0) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x9, 0x40, '\x00', 0x37c0598b83533d83, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
fchdir(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) (async)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x60000, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="ba4100ed0f06ba4300ed2e0f01cf3ef90f7e990e00f3f3f20fb7e3f30f0926673e660f388051080fc75e8c", 0x2b}], 0x1, 0x69, &(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f0000000340)={0x2, 0x10, 0x81, 0x10001, 0x21, 0x1, 0xf9, 0xaf5}, &(0x7f0000000380)={0x5, 0x384, 0x2, 0x6, 0xc1, 0xffffffffffff8001, 0x100000000, 0x7f}, &(0x7f00000003c0)={0xa21b, 0xa, 0x0, 0x2, 0x4, 0x6}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x100]}, 0x8}) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000500)={0x8, 0x6}) (async)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000540)=0x8, 0x4) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000580)) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000005c0)={0x2, 0x6}) (async)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000600), 0x4) (async)
fsetxattr$security_capability(r1, &(0x7f0000000640), &(0x7f0000000680)=@v1={0x1000000, [{0x69, 0x4}]}, 0xc, 0x3) (async)
openat$cgroup_freezer_state(r4, &(0x7f00000006c0), 0x2, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000007c0)={&(0x7f0000000700)=""/164, 0xa4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000800)={0x0, 0x3, 0x1, 0x1000, &(0x7f0000fe7000/0x1000)=nil}) (async)
mmap$binder(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x99b)
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000880)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000840)=0x2}) (async)
r6 = geteuid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x400, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in6=@local, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x11, 0x0, r6}, {0x5, 0xd6, 0x6ad, 0x673, 0x8001, 0x9c37, 0x1, 0x2}, {0xf64, 0x1, 0x21d1, 0x267}, 0x7, 0x6e6bb8, 0x2, 0x1, 0x3, 0x2}, [@lastused={0xc, 0xf, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x90}, 0x40095) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

4.775327024s ago: executing program 0 (id=1705):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$read(0xb, r2, &(0x7f0000000000)=""/89, 0x59)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r3, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@acquire, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})

4.751174114s ago: executing program 0 (id=1706):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x906, 0xffffffff88020080, 0x4, 0x6, 0x4, 0x9, 0x0, 0x0, 0x10, 0x4}}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
shutdown(r2, 0x1)
r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0xb0, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/214, 0xd6, 0x2, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x2f}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}}, @free_buffer={0x40086303, r3}, @acquire_done={0x40106309, 0x2}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c20000ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x0, 0x31, 0x25, {0x25, 0x11, "d0b87a8d8e69bd9b0801a226bd3791c7475c1c388aaefd93c4d7584187dea84a12515b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4000})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000640)={0x2c, r9, 0x317, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400085c}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x9, 0xffffffff], 0x1000}, 0x10)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r11, 0x400455c8, 0x0)
pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)

1.671858863s ago: executing program 0 (id=1755):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = socket$inet6(0xa, 0x3, 0xff) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='nv\x00', 0x3) (async)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xfe) (async)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000005c0), 0x10)
recvmmsg(r8, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10002, 0x0) (async)
sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
writev(r7, &(0x7f0000001780)=[{&(0x7f0000000000)="5718ff75b8ed1063328e8edf2cb71cf5f4f834cc7b5463d7571ee2c53a3d544b17c50c24b9f99507fc02994eddcf21589184f81190efcf", 0x37}, {&(0x7f00000001c0)="b6a0f25d8ceda37996b47ba17b6a8a26292e7b406742ec0059d407e0aec8249de53f611b4fb1d3c2f20e22655eb87119d54cf768adb0c08f25f4f0a0a9769d2867d6ecd09a4d", 0x46}, {&(0x7f0000000040)="cd31d007ca4c08a693c8dfab72dc606b3f07ebc96ffb45dc10b5fd653473b6b464f6a09b75f2441af5e717d60df375c6be685ad8b365ab7bfdb041f42dea895d", 0x40}, {&(0x7f0000000380)="90a1415bdc8232cb18ba4e2912ddc784d38e9eb4c5b97d165550d262bd2f8515974c68ec7b4082e11449e16c96d0a68240ebb0a74a1efdb116782f37a9a930a9498e62d419a7420ecece320a9b683644c0793dabfb939ab54c9284fbf91bcaad41a38a060cfa2ff4d2379516c3389789eb2df253d1bc4ee01f4f8128ad94f7b2590a5aa4f5e549f61b819212513c5d67d4c57402bd73ef28396b15808cc4f3fe8423ecd56adcb9cb01f9b63a69e20c6a5df4127b823de70ef6df9f0129d39ad9baa77172a24c8b77352616a2d00437808c52475ca576287f46632bcaf2484c85288d1d8712d98103", 0xe8}, {&(0x7f0000000480)="103ac0dd462a9047d3a38da435c3d0833f166afca1987b9c58099d5569938f35099ad9baf3397811f5482e9d373d06384067679f91a8d776c019ef8d19986349f4948213a0c8810aecdf37d33ff9142c5e5920a0223cdecb8ae2bdd59e4fdbef94c5a8f3063f20cd83c34ddcc2a6dba7d0cd6cdbaef55048b1497d6b8e8b21a79eae7906e71436b5c2", 0x89}, {&(0x7f0000000540)="524123175f935ebf4822e42e9ea180b20d3a4b49d2dfaa1e0e4e3a9190852858ff2d729a91880a2a6dcb075302e1ea2a0c1e2d644a4d081956d5db41ce9aa41a0d1718bfc25f23dca17259f6acc95f0d086788649712bac36a27b2ed271295a91764d8a0ac564ca6b2eb1678718b21b78fc13264849efa29fb4e4d2a02c673f5d1b48afe7b1e5d253cfe9caa1c209bf552e6835fa934060aa61735a3032ff66df0b719eb76d6ccaac2be8681b788110e48a91967a37f6e526800a41d53d0cfedf2", 0xc1}, {&(0x7f0000000140)="fe588a23af15bac524e1c74faa4ded8af21cc17a79d5a18a4687", 0x1a}, {&(0x7f0000000680)="cc3a654de7dc9183a8817caa06f618f57df405baae94f0af3d93040e6bc693c0de5d8364ce348f9d337c2231034918d59b228fad2f3ae1ff33d38b78bd9f31c9856983f37c1053679cb10faa38c83727cd5f7d36f9be4feae709b24e967c9f769ea2295d6617b55bfa60e14ec8c998ed45ad2e82fbf7acc8cf64adc86918402c58e9b1112c0a6c1c758157e30c5c8bc599f6eaf1e8b3b47b775f1836e47b49f0fbd7b2f04991f8ad1e3a2294de803ff6cb6ac4685e2ac8823011172c5a07a9ec328585897ccfdfc54d88", 0xca}, {&(0x7f0000000780)="ba6da216cdbbbc7a0d4d361406e3262eb19054acd5e35aecccf37af61e2b2f2c52d2a32ed71d55be35d14e405d8e69b186fd127ad02ca05c196212f471fa94e4dcfd925901440026a2d0cafcb976c5d9a32d55fbb5356c214e269987b3531efdf8e02c24285117e7e1d4571e3d690269d78911eac780e8cdd05c1ddeff5d6e36923e81a575fe489b6f1793886a34d2f7158bdd0275304ba2d56c443b2fbafbcb010a2b974641d8d76cffc991af22a9848a1cd9105c0dc2e1ba3fcfacfe024e481b257b78a1bc90bc4a18bb570611dd0c655bb938338872fc12217f82ca62fa200e87671e5f2100f962e8ce896009bd39f98e570e8a2d238c3bcc3adc27bde08c67101075971d97433f3906773bb0bbdcfad1d27bb679110920c0384d8d776e47e54051871059825416c741c82120f2a32223862e2d533cb2e472cfeaea79af04a7d8e396da7a61a767bf7a489775298b51ccb4ac45781acdd1648f517d71ffd6e7ecd76f6358b4da73b7263da40724edebea2e383f27a9a20a91ea12e3624acab881d6fe75ba9caa484932bf6945e401355d0abc0bc2e5252df3bf1404143ac9100a08d2072fdfdf9385a9d73f3d25c25fc1e9881bab0f0c66093246b3e025f39c60b8fb9f0a3dfdc2ba73a33877c0ee7ae5aae4fb9538a10fb2b46c66b04aa5438c2818b56a81314bfd08893419f876c085260a47bd8817aebde22e6baed287d1e6d3043d0d281a38039c9e89ef26f9cc9468f926a849a1b05cae88cf1ebc1768bf6ac866a862c5be9c379865c35be991d53c293a01a3144dc4e67cebb6fe72e218eef1f296b1667a67a3e00117d3b7ae940b691b63f630862c0c02f0dec6e4f8f4e3816701f2281b07799534a49fb0663c98ac53bd4581ceeead4568d43476c08f19065694e6df7358d147a14d13d0c7cbfca72b1617b50d5a3da4bafd2ac0fec7b60c000ce987f6f8ef798bc9eddef76506bd0874512d052c0c5d2b5d3b1da28be612da3392f1e1be2770afb64afc7dae4b807c87d70d59e0987200a6ad532cfc8b1fe34430a8b8a33a1fa039a85f30218f9e48000d579e8f3838432fe4f981eb1d6c4b1f94f417774f925015335ca3abf6301100efe35a08b09aa1d838421e470d0ab5b66593ba6bb3b59aac2a227221f79e50d8a475e73d1e02fb60e46a71f9f39b4b3afa05fc1b4d4785a9eff7003927791e1622ec33b544ca9de2a33bc7be09a286b3a7366a8da447b3abbbc0b5ca6f99fb790b13e95455060ca3ec84f1b8c4a906d5125b4910b7cf655a77569a47bd475a9246cb524342bbc15052bba9ab62d6218cbd7e7587a3d519e3897c8db373fc841bd9baec85496dea8aa0d5cacfd56916bc4fc5e52c69b0644f4a2608d1c4253984d69c82cbd00bd2f980027e53acc03a193120568c9f02b8e4a8e2b036b896e2c86a5d9b77b83f33db03b86a39f497cd27e0a1dd4867787669f243bb6b7438175a2cfbfe49bd02737608d0bd5ba6953b4ffdb29dcdabe81161c6b228c92c099fee5874466fd81a65e4526eae9b39ad09d20aef73f0c7521bf3d7a4ef97033b59d352a8c3df4ab8f55730c0ded43e658646315bf0cf53ceb9c4db70d02fb82f4bcf5557921915746670c323802093d5425e3ec9af20ecbbca688c7d5a2de2feaaa9ea5f1f308ca28564cc596e8838b0de0bf9c132f52344d29408004fb5157d3a17bd44ab818a94b4e0c781707035dbfd7744f5c1651a7e12893b0612637b28265b3e1db49272d28598c60bb522d81ab91f6349f453137159e6ca48cd7afbd8d651cf3e7b94305900e2a5a6aa6642b8a2cb5060558bf1430821b9fa1e70f6fc0b1f55e6cde9a692d5b28794cfa17d4e6ba94c0db926ba6db9bd73867e08db231d125c5792353fab8ebfb5f3aeb3e9104ed0961018818e78530e4483903e3982ae162aa97eac280a8200ed58900c034e5beec8692012729bcd29b4d46bd4044f6575298b64a06af5a6f107fab8dd3a6de6b06310c346ceaf209192354478bfe4aee6d42607ce22e81baed2fd774ec92d38a5afe77b6c77114b745ccd93950256c600f82c7677bfc12676d0cfbe58589b31e14e28d150c93d406fa07d4ce00a3054098b2d49166b2721fe0e2dbfd60c82fe38b7872d6b62d72cfcef6052736932ac00eab58c370fd4c2aba174f42f511c6594cf44c61e694a3d895e335a1e62c7d37c853ce59ff9dbcea9f683c9f4d90db95ae43a13379a0ae220d98f6693c7b7d24245ced889328d663ac0f1da2bc9163c4f33b3e33237f79036a265296749cbd8b82e3188d0c0c25456c7aebc84d507aa8fb707f1e6249f737444a8c404451aa987e9c7b3de15e511d6f97130126a409f6328c7590f887b576da42fc3e4e6d95b3e25aa7f9b60349472ff41d07e26c8b7b9d64816ce203edbf253c2947a8923018a4e73c6c6256d697c343aa1d1fa899df85ce9fcca45798602e6a0ff7688a36b8739e041e7c430ad0392219ee0b64c8f93d23b4d36d1368fad7c685ba2d4b72ce898d6b8ba0de73bf9565de98a23473ea5c21daab07be268cbabf12909ad8b3422d87bc650b31e2a050acfa38ff9603e177146a1001d0b650ab008e6451cff69f87899cd85091fa3a82b8eb23eae80d7368b3a22ebfb8b7431828d6bd504a0680b8dae47138b37d936dd4ccc6c1fec96281984bd7914c9e30d51e61eb381e026ff7585f09878f951fa09134a4253b1c4f594a3ed6d4bcea3845c787a0c358753fbbabafd98bb173b0c6053e2acf534a9f14e3d2b0d14b443d8f6907f0a01d4dfe26355f43fd8a33ec94be4ce98c9e511c9f46e853861f3961d50a00fa62160ffc783c08966bfec6b8dfc9e7e39e46e54ce97fc270f97e5c13f39d79a5dc5653264b9d909701eede461abf3b725cf0d5cdbcf13432fcb595b98c7eaf3ebe1e94836d238946a71a158399a6a4a81a4df6d824aa9cb8f8df38dcb8357afaec04e69c945ba5d0d273e0973376fdff3c81b382080a6042f5d361c92087e021c715a81c2eb187132c0be3715a577bdbdf26934384f54ccb15dc9c13869376a2f33f3681b65ff23b654e373d9911adaf7c03a3b0b3a89bc8ba25a1a2a8a6fa611f925f309c46d2d20fbb208637536a3432271d786af9dec35904c4ddd718aba2c78cdedd723d70eeccf680a0a87b2145411ab6396e9543b18de4c1782720fe814b3736cfb90a74d9b1e72c98f8e80b379e6c0c3278edccf12e216590fbcc083641340ad7978169887442b57c1800955c0257c1f09accfa82aaefadf3823406e4148d097aa4e96d9699c34d590d268bbee747fe1a420ce03d9e3f7a33fd99ae1d2250f66a7638c918fc03bf71fec213866fa50e13c0492f12f43b6ec86dc9212b3aaf403d0f738601216992f72f0f1082564af0043df96c9ec142989e307cf806b49268b0db315a480cf88cfcc070dc7648f710bda6206ff41c1baed23e27860f7f72a33b4a4070fc6aa460345b93cae5492d05c7f44e75929ab6fe38bf0e10ca7e48a7d6434f6b1786d69822b293ef6da180ef6065ce05023b6b2765bf1a565963538abd91cdaecb3122f472195bc513cc57769009e7e15996ac1f72607088de90139bc7de18b758b291d23ba639f6c7899bd32fcb7a424ac3b87044e5100145694055e825ea00e80cdedc32b1cf2d837265a9a8c19d4cf3b5c33512531e10fdd4e73476565a935c2c64e85a0dd57d4c54179defea38a9b2874817a30f6867efdcb2db49a160d030f1c2818987993b8e1c007cfd3e43b672c6b7231f65ce4ddea0face6d27b74013b8e6d62244d5251254bb6a9d6b77ea532745d535223b6bb87b2f93a5095bf142780ca2d2593c16b28132f4ab35aa9376cfcc6d90bc3bb581faf13934798b51a19e7e3858902ae9efe1018c2ccb801a80f422ea2ec63946d2ace81295c067f96a506298c0776cc9d26d17143e562d9668f0e2c5ad2903cce4b61b9812d6ecc9e104b72246d5dab4caf5ad8bf6b1bcec105d776fa95451ecce446879455d3c691f31546918b0066542502f89c48d799b9edcde56f353a05068cab92552a33666fedad26c3e0a6e45bf69d129bd54235bc17d9205e426060bce706eff357143c12df54cc42fb3a4c47a479ea36606abe37b20afc603cd8e8d500b258b11e69bda404604002035f18d25169f15106a17e4ee43332ad3bbf2f257635b25e0d62480e656d6c7c3f735b1db5d793363fe386ef57de6d500ab8a575151d16ff42ebbbbb4e052b39cafdcce1bcceaf5673de61a22f4271c68c58831ae7259c2676e25d81789711faa9f92af8fd9bd95b8c6205c1585ff34c6f7fd7c394500425e8ed729f10d61172140e3f91601cbd38c515c7f54a7f2ffe154f6953303ad83df462cd472e6f5aa224d33bf8e5f33d8ef03623e947a68ca2823166fc8a5dadd1b823c44ccc1d150605f28c41cc031493f4a84800d9aea54ccbe933cd5c305a8f7d61b7c0e534fddac1e2cdd956a438ebabfb39e94e66581a93fb4ea3dbaad86d9401793e059fcd277d2eb11ffb5b4ce4cbf238f80137b26633e56ff521c5b056b6b0d6411433b8d28a9393f466f014b00198fe7083e7e79d73c6f259e9e28b2e4c4ce7960b7ff605ca9e7086361deceae37e52e726c0362296aedab7f069b482d2e7df9c309ca49513dea9a8659ecf73ddf4878ff5d5ea641d60b4b1abf7d62af14c772d41238d18df31ea00d6c49bb7809224df9bd7b01d36cf675f4174af05d17a2fe0dc2d05b901c4ed686449fda4f6f50adc895c114605b84065c6671d999470ccc9ef713393194fce8dcdfba193349189535bf877e79642c1d7a386844201c047594b4cd312aa7635e32835f0c5ab4b22bd985c2f921fdfaeb21fde398dbf718c2cfe94f8e41bf95074a5d34621442dbb660cea0f036283353dcb8eb17618326226a627fa920c1840659333608699ec6cee1b3491fa33eb507bfb56e36bc53eaadec54f29e3d7c00d97d3d319ec980a8499a008e032deb27371388ecf0b53a123574867c33a82ae812c21e1bbbb245135c4d06249e054420320de17fcdcd62503edfc62522ad7797d6a893e2d150e773bce0bae7497d185a7001dedc4dea23b4d72e4c7107a1b02b1242df1cb22e4331c5e234df3911184ded58d006f7386537783749b56ba3f2fb13d01a0c2a9fc9a312528e3bea313f01263ded2208980a6309a2a6d6a8bf5d6d422f461bf4957c9b591d97b4be96114ca651e0073e4277893502cf2fe53655bd893a55d6c2ac3e25ad4d38a367b1582f6dad152a5fe45087a878321f015f5efc40241df22a51f61323bd44c74c57c40e59d95edc3dee851ac5122180f53dd00c5a72033418e67fe27f8451e6abddf2663e941ab41adee124989396e305e6190d26fcc85739afd8c9a248ffacdf71ff1a3a2f2d138726bfa934af78834d474e8376a10f2c7fe74d49686d5e4ffc6f1cad3664d146d7962f50e474e02b43e36410bdd1e0ad7a85cf52374321beaa629f6baa18ee2749d0ac4d04dfbc8e30670bb2d43745d744c680ee36c585fff741af4e05c34d7cab4f573c77348b5fb9ed4fef1e9277a89a11ba586cc71da8aa15b5d351696a36790c487a992bede344cad4f7c2eaf1ba569d932551dad3d38030ca5c19efac2f6019b90ab4946061e50cae30fc4d673e6d98fce5cd580fb088757b7c76888c521246667ba7e88a85e1e3cb1230dd386b26e290b0e45ad52aa2e338bb2e4855ac00000f32b258c3e0286b72f9b08bd87cd85dbaa785573487192e196cd9dfd7dfc8bcc5fb2414b898dda0f6056", 0x1000}], 0x9) (async)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x8, 0x4) (async)
syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0}}, 0x58) (async)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0})

1.598053995s ago: executing program 0 (id=1756):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fcntl$getflags(r1, 0x401)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(r3, &(0x7f0000020240), 0x10010)
splice(r2, 0x0, r4, 0x0, 0x100000004, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x26000801}, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000002780))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1.350373308s ago: executing program 2 (id=1759):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@cpuid={0x2, 0x18, {0x400, 0x3}}, @code={0x1, 0x41, {"660f3881460046d9de470f794b4dc4414d7d9947b5000042d04ad00f01cf3664400fc72ce30f01f866b871008ee8d930"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x6b, {"48b8f4ffffffff7f00000f23c00f21f835000002000f23f86643d0580466b8b4008ed8d9e9f30fbcf667360f01cb2e263e66430f3a0f9800300000a3b9800000c00f3235000100000f3066400f1ec70f20e035000020000f22e0"}}, @uexit={0x0, 0x18, 0xb2f0}, @code={0x1, 0x61, {"0f324a0fc75f0ac744240000000000c7442402c9f50000c7442406000000000f011c248fc800ef1ae6c4e1cde112260f2196f2460f5d030f20d835080000000f22d88fe978828622910000c4227d1de2"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x4274, 0xcdcc}}, @code={0x1, 0x47, {"66bad004ed0f09c1d22d440f20c03509000000440f22c036450fc73d4de90000470f795460000f01c2f3430f5f66644223d2460f7922"}}, @code={0x1, 0x4d, {"26652e420f79a3643f00000f01dfc463f96075659f36430f35c4a1a9e36e0a0f0096027f733e8f2970965a05c44121f6e5c402c8f3de66baa00066ed"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x1, 0xfffffff8}}, @cpuid={0x2, 0x18, {0x6, 0x19}}, @cpuid={0x2, 0x18, {0x7, 0x7f}}, @cpuid={0x2, 0x18, {0x8be, 0x9b6d}}, @code={0x1, 0x68, {"b805000000b9060000000f01c1f3410faec50f30b99a0900000f32b805000000b9000000000f01d9260fc71f48b8e5270000000000000f23d00f21f835000000010f23f8c4c3f9607e57008f6978d1ea36df837d020000"}}, @uexit={0x0, 0x18, 0x7fff}, @cpuid={0x2, 0x18, {0x80000, 0xffffff00}}, @uexit={0x0, 0x18, 0x4a}, @code={0x1, 0x4e, {"66baf80cb8ee86b288ef66bafc0c66ed67440f015c5aa32e0f30c401f1e18bfd6f00004a0fc71b2e36f3d9e8400f01cfc4812dfad2430f01c3450f01c5"}}, @uexit={0x0, 0x18, 0x4}], 0x3bf})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000004c0)={[0x3, 0x2, 0x10, 0x7, 0x2, 0x2, 0x1, 0x800, 0xa72, 0x7, 0x4f05adab, 0xbe, 0x7, 0x10001, 0x1, 0x1], 0x2000, 0x10000})

1.207241941s ago: executing program 2 (id=1762):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = timerfd_create(0x8, 0x80800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
timerfd_settime(r0, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1, 0x9, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]})
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x98}}, 0xc004004)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0)

1.099236802s ago: executing program 2 (id=1766):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@code={0x1, 0x78, {"a9001000003ef30f2dbc772a0000000f08b9210800000f320f07650f01df48b800000000008000000f23d00f21f835200000090f23f8470fc719c74424007b000000c744240200000100c7442406000000000f011424b9fe090000b800000000ba010000000f30"}}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0xf551}, @cpuid={0x2, 0x18, {0xd3, 0x3}}, @cpuid={0x2, 0x18, {0x40, 0x2}}, @code={0x1, 0x71, {"c461f9d363b48f486886be3648bcaf6b66bad104b8ee0a0000ef654a0fc79b4f000000440f790230b600800000660f3882b2d4857543b940060000b800000080ba000000000f30b92e090000b8f4ffffffbaffffffff0f30672e26f30fae75f9"}}, @uexit={0x0, 0x18, 0x800}, @uexit={0x0, 0x18, 0xc3d}, @uexit={0x0, 0x18, 0xdc45}, @cpuid={0x2, 0x18, {0x8000, 0xa1e0000}}, @cpuid={0x2, 0x18, {0x4963, 0x5}}, @cpuid={0x2, 0x18, {0x10, 0x6}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x7, 0x7}}, @code={0x1, 0x6b, {"c4617dd7f13e460f2207c4e2259674e1b40fc73d0b000000430f0666460f070f20e035000020000f22e066baf80cb8148a878fef66bafc0cecb9800000c00f3235000800000f30c74424008d000000c7442402024f0000ff2c24"}}, @cpuid={0x2, 0x18, {0x7ff, 0x40}}, @cpuid={0x2, 0x18, {0x6, 0x10001}}, @code={0x1, 0x45, {"c4e2ad050500000000450f01c52e470f01c9b9a60b00000f32440f01c90f01f8fec46766470fc7b20001c0fed3d8c4815572d500"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x6d, {"f3430f00980000c0fe0f09c483f917031d3e2e440f017d056766440f388000b9034d544b0f32c74424000a010000c74424020b000000ff2c24f3430fbdb600000080c7442400bf000000c74424028d000000ff2c249fa92892f21385"}}, @cpuid={0x2, 0x18, {0x21, 0x8}}, @cpuid={0x2, 0x18, {0xb, 0x4841}}, @code={0x1, 0x71, {"0f07b9fb090000b8120b0000ba000000000f30440f01c4c42139f4cbb9800000c00f3235004000000f30b92c000000b888a20000ba000000000f30f3400f005700450fddcdb92a0b0000b81b000000ba000000000f30660f3a149bd120a11aad"}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0xffff, 0xf}}, @uexit={0x0, 0x18, 0x7fffffff}, @code={0x1, 0x7d, {"b9dc0a00000f32c74424000e010000c7442402e4170000ff1c2466b890000f00d866ba4000b80c000000ef470fb187cd000000362ef0118b00500000f3400f169a548e849ac744240001ca0000c744240242d37c94c7442406000000000f011c24c4a27918f166bad10466ed"}}], 0x4ec})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
lseek(r2, 0xfbb6, 0x1)

1.054037463s ago: executing program 2 (id=1768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2})
write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[], 0xb0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x800, 0x73ca, 0xfffffff8, 0x82, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2c00, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00')
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)

663.259099ms ago: executing program 0 (id=1780):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xa00, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r2, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0xe})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000002c0)=@other={0xfffffffffffff001, &(0x7f00000001c0)=0x6})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0})

662.790859ms ago: executing program 4 (id=1781):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, r4, 0xb3d68000)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000001fc0)=ANY=[@ANYBLOB="96"])
readahead(r0, 0x1, 0x79844e1c)

570.161631ms ago: executing program 4 (id=1782):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00')
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nf_conntrack\x00')
fchdir(r3)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x1d, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)

530.044151ms ago: executing program 4 (id=1783):
r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x13220c28)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3)
getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

435.254183ms ago: executing program 0 (id=1784):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "506ac1"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_macvtap\x00', 0x200})
sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x4)
write(r3, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

396.204364ms ago: executing program 4 (id=1785):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQeDM\x19\x1a@\xbd\xfc\"\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xfa\xa6c\x03\x13\xf5o\xa2\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x02\x00\x00\x00\x00\x00\x00\x00\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xce\xd3\xe2\t\xd5yr=\xd4M\xe2\xc5\xda<\xa5\xd5\x17\x10\xf7(\xde1\xe8\xdc%\xc0\xbe\x7f7\xdb\x85[\xac\x8d\x8d\xe2l\xbdGK\xbd')

369.276434ms ago: executing program 3 (id=1786):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x400880, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r0, 0xd0eb4000)

287.305055ms ago: executing program 3 (id=1787):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setgroups(0x0, 0x0) (async)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2) (async)
getgroups(0x1, &(0x7f0000000080)=[<r3=>0xee00]) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setregid(0x0, r3)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2a, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

286.846935ms ago: executing program 4 (id=1788):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004)
socketpair(0x6, 0x2, 0x6, &(0x7f0000000000))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xb8}}, 0x4040000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x211500, 0x0)
syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})

277.002725ms ago: executing program 3 (id=1789):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002a80)={0x1, 0x0, [{0x560, 0x0, 0x800}]})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000300))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000740)={0x30}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60)
r14 = eventfd(0x2)
ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000080)={r14, 0x1})
close_range(r9, 0xffffffffffffffff, 0x0)

202.283586ms ago: executing program 3 (id=1790):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x8304)
read$usbmon(r1, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0xd0eb4000)

155.238477ms ago: executing program 4 (id=1791):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000380))
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c)
recvmmsg(r3, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x380, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f00000005c0)={0x0, 0x1, 0x68, {0x68, 0x3, "a315b0e1a245f8866281bf4e1c3388629d676ed75ce41fb28d6c9ba032f327aae832942187f4698f18164f1bd76207b7359b75ea12bca37f88f2b09edccdd8dc2460f111816dbc8e75b2d8b1ef35a2124633b6994b554434f9fd52d1173a34bf73d7d716b201"}}, 0x0}, 0x0)
r6 = getpgrp(0x0)
dup(0xffffffffffffffff)
rt_tgsigqueueinfo(r6, r6, 0xa, &(0x7f0000000180)={0x16, 0x6, 0x9})
syz_usb_control_io$hid(r5, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0)
syz_usb_ep_write(r5, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
ppoll(&(0x7f00000001c0)=[{r0, 0x8002}, {r1, 0x102}, {r2, 0x40}, {r3, 0x4000}, {r4, 0x8508}], 0x5, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x8]}, 0x8)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r7, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x0, 0x1000}}, 0x50)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})

150.405007ms ago: executing program 3 (id=1792):
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001, 0x3})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x82840, 0xf2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000006c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x520, r2, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x2d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6f}, @broadcast, @device_a, @from_mac=@device_b, {0x6, 0x7}, @value=@ver_80211n={0x0, 0x7e30, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0xffff, @default, 0xc423, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x3ff}, @val={0x5, 0xc5, {0x8f, 0xbf, 0x7, "5825e5123ef0e696f018065e989078d58cc1337c17a626a0240e7d6e204f105818b9297f13e1703b9f24fe04dd72fa6465d1b14ce0ebdb05fc81eb44b2974cd8f01132ec2bbb32a6359fe8c91e7248933a9a5e8ac65c6c3a5aaad71a419761ccb58320c98afca3708df4a05f8c993fe00f7f9af5d99da99d20f25b58ba5bc48d273b3ba3dbf460142bd5ef7b4e44e5a8201d34d1663e6034708ac5bdee269e9b08c25a7fe95c6bd54f28b034c28a8ce799447df8329f6b9c2e0f009ecde02130bd3b"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x81, 0x0, 0x7f}}, @val={0x2d, 0x1a, {0x400, 0x1, 0x1, 0x0, {0x9, 0x7, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x4}}, @void, @void, @val={0x76, 0x6, {0xd9, 0xe4, 0x26, 0x9}}, [{0xdd, 0x4a, "64d47bae7e474fd30b089cd4b95a461dfa2c3dd55687e6dc1ab7da0158d621d3f27fdd69c3a646d37330667df95a1eb3d324489ad390544667d7d4f11b0a330fe2c17906b55725501b86"}, {0xdd, 0xd6, "23eb94da413da484715ba6fa9ab9e81fcbf2524945ff648f33bed2858a6e0b10f25fb2b26c427ee789be7eb242dbf02dcaf0934ad2ace10f203f6b11877bdc2483554fc112796cb5c6484abd89940bb86750dfa39f8915a3dd12a30c6442ed8b31d8383030e2c2e27393269a7e6805c39d64d8ee1a5ea875243f2d6422749c5014ca3f30653d0a691b4f30ef38c938e14fa8e7f39c807d67259cfe1755982f6c1caff468d748712aaa03e2b7e7a3cb0903d7a101c5157ce5463c321534b55f10720f054c86607a06a32d6211fcef32c5d160a5b58aa5"}, {0xdd, 0x84, "bb63f3c0de7a2566548ff3418f36817dd0c6e754a1a21d1e582291451eadffa542a12752b3d9ee9cf578c17a0e51f7c68a117bd7b829a8af0cb4b24c8ad1df1fcfe56d5607f342c9a30c94e0a7cb191354885c812edf990592be3f4cab228e6723b35750ec78112026494ea69639094a5ce34705e79007fa72d09d06f8218cd2fa1ab0fc"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x10, 0x3, "fababcc95b26f08b583aea05"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "b796232429afc4bc4f0592ef819a5aebc6c57782b35762ac101f45496094af4546a97fda1c0ea9c7ea506e0c0344c1cd1b87f1f973227d9b2f806923696cbc0baebed08eaa144830be9712888af3d3babe6edcfcf7f0211bb5c89f10040227cbf8055010feb1a8948621d536f6435a36ca78bdd91762bc4f2e7eebbe9fd6619fa5ee9280669b594c3c288c98479a961a17ac7283efcd06e1f021e158c5fbea9d485760ca639c958b71496b715fe7c8b8c3ff2739b7b866"}]}, @NL80211_ATTR_BEACON_TAIL={0xc1, 0xf, [@random={0xb, 0xbb, "ac4b912e9a7869ca79f8b4f38e4d11dbaa7d92e779f5b569e409956e957653cd2ecd58dc38bd1cfc74e0099c6694783c39a45219a5a3cd332b18d02466e9d552b04aafa51c58cf3294baa77a7971d635bcbb5837cb57e37fd27edfd293fb013625c3225c04a114873334b1b2543fd9a9ac32e19f2adf4036204a8e5e4c1198fad7f58d6296d1de7f4b0fe459ea45ad6dc9002ed7bbe30c84f7502ba4dfe4be9c322fc4ac031a7d6428716dc0f21980ddf84b7f39d9fb41d99682c1"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8f, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x0, @broadcast, 0x9, @value=@broadcast, 0xfff, 0x8, @broadcast, 0x8}}, @fast_bss_trans={0x37, 0x62, {0x6, 0x2, "d71ba7cbe84225ce1c5a661c4592da4a", "e723f684d5dd3f0431a379bdf0831918a4121b40165022f421a7c0a741999bac", "cde74bbc5d27d2387b2a57fb9847e0ad64943f4adb0de59c5ba6e0245fc80b76", [{0x3, 0x4, "8cb9950c"}, {0x3, 0x8, "1777cf57498d5352"}]}}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x20008011}, 0x80)
keyctl$set_reqkey_keyring(0xe, 0x4)
chdir(&(0x7f0000000700)='.\x00')
execveat(r1, &(0x7f0000000740)='./file0\x00', &(0x7f0000000800)={[&(0x7f0000000780)='/.\x00', &(0x7f00000007c0)='\x00']}, &(0x7f0000000900)={[&(0x7f0000000840)='\x01\x01\x01\x01\x01\x01', &(0x7f0000000880)='\x01\x01\x01\x01\x01\x01', &(0x7f00000008c0)='\xff\xff\xff\xff\xff\xff']}, 0x800)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000940)={{}, {0x77359400}}, &(0x7f0000000980))
openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x101800, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000b80))
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r5, 0x14, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2404c8c0}, 0x4)
r6 = openat$cgroup_ro(r1, &(0x7f0000000d80)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x101)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000dc0)={[{0xfffffe01, 0x2, 0x5, 0x4, 0x7f, 0x2, 0xfe, 0x3, 0x2, 0x1f, 0x7, 0x1, 0x8e1}, {0x7, 0x0, 0x81, 0x6, 0xb, 0x7, 0x6, 0x8, 0x0, 0xaa, 0xd, 0xf4, 0x2}, {0x4, 0x2, 0x6, 0x3, 0xf8, 0x6, 0x8, 0x7, 0x6, 0xf6, 0x6, 0x4, 0x3}], 0x8})
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001ec0)=@urb_type_bulk={0x3, {0xc, 0x1}, 0x8, 0x20, &(0x7f0000000e40)="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", 0x1000, 0x9, 0x7f, 0x2c08, 0xfffff352, 0xffffffff, &(0x7f0000001e40)="72c3baa62ecf1120f829da983c30f74f34ee4c46bae7fe4da2a437dea577117c2b86750884d1b909cb40c5706d8d60b1928d506e8ff6822157918991f4214bbbfa0412de9c375c2cf6aea7b4bccc713b3d86524f162081e3f513c7568fc1d332b99e87401178584a2befea1ccdb2b4afb1b4eff472d29a9947bed9f710"})
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000001f00)=0x8)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001fc0)=[@text16={0x10, &(0x7f0000001f40)="0f0d200f01d167f3ab660f6e478066b8000000000f23d00f21f866353000000a0f23f80f01c466b98903000066b83900000066ba000000000f3065660ff872070f16f36466660fc77604", 0x4a}], 0x1, 0x8, &(0x7f0000002000)=[@efer={0x2, 0x6001}], 0x1)
read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x48100}, 0x80)

113.424088ms ago: executing program 2 (id=1793):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x5, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil})

50.462049ms ago: executing program 3 (id=1794):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100)
sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xfffc, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="30e11faf11be489bbdf6102398504b0f476b488afcf5f8bfe56af657c3b5e251ef5ecaef68cfc0989341ec494e46d816aa530af2f639cb47ec5c9515bf1a1989530552e0b6f26515a7f360a790db9556851bbadf85f3b28336cf715b088ccbb66eb618dca0eeee5cefaf0fb32adbe1e1795c079c19594ca75ccd28111855e3d45519a1457b74a94d5f23585473f0bbb509be0cba53846b5cf6473734c750686da15bed149dab60993fa0fc73f2d506252c433da33c074194edac705af2541b3e06bb64eedb30134de70bfd259677681a7bcb488ccb363f180c00efc35f530b079c46b5", 0xe3}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="c9c528a44f187744cc94e83786ef32de0ae37bd7feaf790f364eb90c80d9afc27c98743d075070970e0efb1531dbe6586b484682d4078f185d9d9beb7b45cb5ff750f799fefc8ff20b2d9da52981fc4a2d446afa3035b5bf43976d224f33807dfd0c09248671487c8ad9b855d4998b90530fddc88677aab7c37623d2afe23d99acf5d0bcc04b89d75c6d7a43f6eb4201ebf76108045e4c", 0x97}, {&(0x7f00000002c0)="f2a0ab1c113eb8d0b040ba53ad896c77883c7d2c3c10dd69520c26a694c37dabd6cec8cb0852fddc51fac2be3f5a93de51e3186f6bc37eaa", 0x38}, {&(0x7f0000000300)="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", 0xfa}], 0x3, 0x664d, 0x4, 0x4)
pselect6(0x40, &(0x7f0000000440)={0x62, 0xfffffffffffff000, 0x5, 0x2, 0x9, 0x1457, 0x2, 0x7fff}, &(0x7f0000000480)={0xce10, 0xb2c, 0x9, 0x101, 0x1, 0x800, 0x2c1, 0x8000000000000001}, &(0x7f00000004c0)={0x2, 0x9, 0x100, 0x6, 0x1, 0x0, 0x5, 0x438}, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0x4]}, 0x8})
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x72, 0x60, 0x8a, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x0, 0x88, 0x1, {0x22, 0x579}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x4, 0xff, 0xb, 0x40, 0x10}, 0x19, &(0x7f0000000640)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x26, 0x2, 0x3, 0xf000, 0x10, [0xff3f00, 0xc000]}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3844}}, {0x7c, &(0x7f0000000700)=@string={0x7c, 0x3, "e29b1207fec1aef34184a518e047b871686b888b7168d4f4138c3cec0e1ce2baac4753f4b208defe4b01d91b92e33f801f51022b78ed7737406d8463c837364ae3e709aa7bcea9af087cc9777da346284201d9226ced2df5f220567b377e1e327ab20cafc490e0657e61ae4b217ee7914634ddbe2eb6afe8a792"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x24, &(0x7f00000007c0)={0x0, 0x0, 0x5c, {0x5c, 0x21, "99285e11b12f980b6f2bc371e97ce4794ca38389b5580c9acd3c1dace42f338b22c05b1af7556c6e17c509fa92793177d8001703d07c9bb6967405ec3bb7b2d2a2a1c74fb8595e7b40eeef86f79a431de1b37cdd5a7b16f775c4"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000880)={0x0, 0x22, 0x1c, {[@global=@item_012={0x2, 0x1, 0xb, "d0e5"}, @local=@item_012={0x2, 0x2, 0x2, "4baf"}, @global=@item_012={0x2, 0x1, 0x8, "ba9c"}, @main=@item_4={0x3, 0x0, 0x8, "dc8adf1c"}, @global=@item_012={0x2, 0x1, 0x4, "9c1c"}, @local=@item_4={0x3, 0x2, 0x3, "d2251912"}, @main=@item_4={0x3, 0x0, 0xa, "168221ac"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8b0, 0x1, 0x1, {0x22, 0x512}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0x16, 0xf4, "6876f92cb2c0f8c66625e72d18215ebe112570a56082c9303af4b972c9ba00fda89f393ddf014108a35c1e46904bdfc48e50a9fe4bb3eb7521a9e5d7c79c9b3a27e068728cbbdb9d5372777665dc33b8200f034e7422ab2265e707817490621e09e1efc77f9748c5ae0eae52cffa1bd98f86595f9120d64cb535dea3eb5bdeb206773f1be0b34ecf7eded504c1c4f6ab0b521113e38e16316210429024242fe4391efc62842ebf5d24eabba35c7a9a98fd33bf89454e977ae22ba25a7517ce5596ce33d1f63b87ad2cbe5318a5460c22b2dcbd9d2c7c64984cb3ed02537bff67f97a74fc3e056e70d6150ac6c45d05cbc691accb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000ac0)={0x20, 0x1, 0x1d, "ec76dfc1cfd5c6c22829ac7792dbe75f074cba192dc52c632337daa308"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x2}})
r2 = syz_usb_connect$cdc_ecm(0x4, 0x7d, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x9, 0x40, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "02ee98"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x3, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0xffff, 0x2, 0x67, 0x7, 0xc, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x8, 0x93, 0x53, 0x2, 0xf3}, @obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x210, 0xc3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfe, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x3, 0xe2}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x310, 0x4, 0xe, 0x7, 0x40, 0x1}, 0x2d, &(0x7f0000000c40)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "47c616133385b255df28f25686b63f16"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7b, 0x37, 0x3}]}, 0x4, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1c0a}}]})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x40, 0xc, 0xab, {0xab, 0x0, "0d47759df5d46b3a27482e8c409bdcb1dc4637e50493e645fba81e2c18fa3454980e98c2664f0899bdf4050eb310cd0500772896cd2dcc718e49bcf2b5ff61f6743c635955480b7d11d9bf5b90bfc966b73430c5b2fee28e0e4a7593472d997ee053cfeb223812e6d408652024a1b8010a1ad22f9813d8c479557aebab43993c689a6c5dffb3dd22d0be2468ac5c8bc1c7fb6e2608d5e3269dfa8a73714eea87ee3afa727f9c727cf3"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x20, 0xa, 0x2a, "750befe7ee4f5f7a22f89a1472734037db866f1d2721adbf5b6b45a1931f37d7ba91dbeed5d44ab1b3b6"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x7}})
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfc, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x22, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xe, 0xc2, 0x1, {0x22, 0xaa8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x9, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7, 0x5}}]}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x201, 0x6, 0x1, 0x10, 0x10, 0x9}, 0x24, &(0x7f00000010c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x8, 0xa, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xb2, 0x2, 0x1, 0xf00f, 0x7, [0x0, 0x7f80cf]}]}, 0x1, [{0xdc, &(0x7f0000001100)=@string={0xdc, 0x3, "8c3f60f4440b00ad5428772451269ba4c83d86121befff1b25c1b5515bc895303ae1fe6b89173182400a61902e96b9405c2fde12edc34821735278c70b80c1b5eef10531456b605797d388c5d4c16148dc9cee793e29ae22480f8da740c20481250b132cca1eac7f61f88ef82d985c275a5886ffe4113ec4cc2c7dc51f5cbe4aa7a844749982cfbf785fe732a322b884ec53ca8c4d731e40fb3f181d93fe906d40c65e0bb8ecafda3b91317efbacb41971e333b70070a8a52e301e64075dcf91a41b4e4b0ba10aac1b5fc97315b974970c810d225ba22372056b"}}]})
write$P9_RVERSION(r0, &(0x7f0000001240)={0x15, 0x65, 0xffff, 0xfff, 0x8, '9P2000.L'}, 0x15)
write$char_usb(r0, &(0x7f0000001280)="97009fdc62fbae730bc0", 0xa)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x30, r0, 0x4833a000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001380)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000001480)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000014c0)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000001500)=0xc)
mount$fuse(0x0, &(0x7f00000012c0)='./file0/file0\x00', &(0x7f0000001300), 0x4000, &(0x7f0000001540)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, ',+'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '9P2000.L'}}]}})
r8 = syz_usb_connect(0x1, 0x179, &(0x7f0000001600)={{0x12, 0x1, 0x200, 0xe2, 0x81, 0xaf, 0x10, 0xbb4, 0xa46, 0x217c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x167, 0x1, 0x5, 0x7f, 0x0, 0xf4, [{{0x9, 0x4, 0x97, 0x8, 0x4, 0x84, 0xaf, 0x46, 0x7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "32f5c5c4"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x2}}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x7}}], [{{0x9, 0x5, 0x2, 0x11, 0x20, 0x8, 0xf9, 0xc, [@generic={0x31, 0xd, "35200815976ffd3d4858bc68be58d91e95011b95f217b1bb5a2b553a3cf70848dce6293f4f3debdd15a60bf552a3a9"}, @generic={0xcf, 0x23, "916f611530e4336a715732700d03c873217f56ba8e0342cda63f199d78190a046b52117eca9241443143b140ba9426aa5e37bf4bfd8952c967a69722581a0f2292e0fa4153b0ddf07cb91ffc139ed0e5a5d7c80cf5e57faf05f61be810bc2b0f4f29cf1234c8ac36f1a00fbdeb122e347d488eb40f6b853edc720cb3a58d36953baa66c5f27a21f7d183e6c71933539ba5d5386e96dcc8e566696ed060461b75bc58a6e13a1b6b20119061fd208322c84c9dbe42c366eadef1c6c2f9d3ebfe132b0fe43c80e1ceddb6b31b5fdd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x2, 0x9, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1a58}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x2, 0x2, 0x7f}}]}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x310, 0x4, 0x5, 0xb, 0x40, 0x81}, 0x61, &(0x7f00000017c0)={0x5, 0xf, 0x61, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x8, 0x0, 0x400, [0xff3f30, 0x0, 0xff003f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x45, 0x4, 0x1ff}, @generic={0x30, 0x10, 0x2, "91650ae0cf2b86e2015e59df84c35c52073dc866fe5d7d285585e8cb6cf1a05dcd0daf16c4d5cc3c227baafbee"}]}, 0x7, [{0xbc, &(0x7f0000001840)=@string={0xbc, 0x3, "4f28ef4a71b275976151c0ec311a57d0e7869097fec1fc6a6212456e788933a36a13ce9a64cf0b73b47e4285ab8e4149f634e3f0073c888da4d752f09aea8f3f0178e82a189cbd209cfa6aa27f6f655eb801cb458f74cb85c494ae91c674cc0f640cf2b603a09a927d9865df1946d529f3c4b8c8089232538eb2679d098b02c2cbabfe61ec23ca5b09ebe3e3f9570d1c87db5a57d6c269b93ede62e1bbebfd890a862eefec407b859adce221fec62d4fa3ba2d0bb99489f572ed"}}, {0xbe, &(0x7f0000001900)=@string={0xbe, 0x3, "89516508162fafbdfe6fec2ba5f7883627a687c6fb95bb32387028f151a5b700356a27eba0433aa84094faefe46ee3683be8ea2125cac613c8ac3256d091248f078302c3e9f84b06b72bdcbd132f38612d2db6ccaf3622619c7c46efcf31b5ee9db82f0c97c937f7f84064d55c57c59b3f5601a5c3ad1bd8a9d4af21eea434d367d50a76dba4c86229f48a051f8180d77e9eb203f9c4c26c6ae0dee94eda4842558053c245e93d6d207259efa3c24f49ecc64db667972119dcdefbfb"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x140a}}, {0x51, &(0x7f0000001a80)=@string={0x51, 0x3, "322bbdf78fe09241fafc16e7030b1f5a494fcca1f8fa2602fe98932dd8f171bd1e7c7901f381a835c4e545e7ff5ee1c264887ec126b20a468f89664aa7057890bf4be54964f8046369c99217fd73b0"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x41b}}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000001dc0)={0x24, &(0x7f0000001bc0)={0x40, 0x31, 0x7c, {0x7c, 0xa, "d067d804f6c84031c879c1d802c2638ec5b5a18da6b3a801fcadc5e7863e6097c0ce6ce4b6ef992890d67c04c12863958e023eb37fcd183304a416c64f7fbbb2e4ea2babd7b2fe20735d172a038a654fd127a68dfd74ab3a5acdbca0cb1b6931192adb10ebc107e5a7d032b8c8682df5f2b40095e81a37a395cd"}}, &(0x7f0000001c80)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "7c82f3efb2e8f61a3317e68e54c5e4ced39b0b581b7c4ac77a182cdbfde37a6c7c46bc0deba0d8c39726bc8fd593c50c5f3d3dfe6474221d1393711a0d15dd2c1b10f222998a6c1ab014b46572e39815690c73b076f1ab6eafa56de4e7466220a033844f0b708f7406fd43087e8499d231d1bc50663bb143c83b3b9958a006dc304f3fca68cbe002aa019b848a65ac4daff022cce01a2577fe2f3865ed7df9"}}, &(0x7f0000001d40)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "6dd5b638"}, @main=@item_012={0x1, 0x0, 0x9, '*'}]}}, &(0x7f0000001d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x82e}}}}, &(0x7f0000001f80)={0x2c, &(0x7f0000001e00)={0x0, 0xb, 0x3e, "d0fe05d79e39d43d33c3c77dffdd733d34970dd6d614ac6ffdd157cfd25ae8a8b5f8fedde8340815202ec83549b5a65895360f4c6a7d7c0f25db79e357fe"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001f00)={0x20, 0x1, 0xe, "410c33e5f80ac54bbdc3aed2c60f"}, &(0x7f0000001f40)={0x20, 0x3, 0x1, 0xf}})
syz_usb_control_io$hid(r3, &(0x7f0000002180)={0x24, &(0x7f0000001fc0)={0x0, 0x7, 0x6, {0x6, 0x9, "8aaf5627"}}, &(0x7f0000002000)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "e3a1afa3fe9038aedee35d4924ac52df985a3c316c012346071618c6aa2343796fe3b4b3374ae3705e3ee6eddb8e30012ff049a1285c0ce21314ccf6f5b568b28b2b006fdbf6339bceb61011470e6684f519257e74055510b39d6c73a82b0576ba5bd2afcbffdfa4d981eb30a7dc0c3713cdfa54bdc2e21ad886d04873b2926be2b7d501c77e99773c96a1c1887c1f8d8326e53594bb9bbd9aead09491263cb710d842dd89d55aedf63078b5bccb73fd347470c93ab46331ccfccbd7bf630f03d6188cac32da7435741fd99636cdf8c7bbd0c07b6701"}}, &(0x7f0000002100)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x6, "73ce"}]}}, &(0x7f0000002140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x33d}}}}, &(0x7f0000002380)={0x2c, &(0x7f00000021c0)={0x20, 0x14, 0x79, "a15b412d682abb2a6b3592594fda8fe0b93d7f711ed4572890f9dacc227804e821a7ed9200c847a964f1863b6a01fdceb1ca8c9b0afab6dcc27ec5ac2935026866dea4379ab01549db1be230d7b044cc5d72f5858d2b7bb80ed3954c6f9e44647b6cb26c9f9aea06993844df5d1c7fe7a77402f4cfa4565846"}, &(0x7f0000002240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002280)={0x0, 0x8, 0x1, 0x76}, &(0x7f00000022c0)={0x20, 0x1, 0x3b, "86f435e13c77f4b98716bf95c06f029052f6c6e13161bc1c943c0a028546aea6c6d6263c458733b8d3d77d089cc5ea8bd0c8ae9f1691264ffe98a6"}, &(0x7f0000002340)={0x20, 0x3, 0x1, 0xf7}})
syz_usb_control_io$printer(r8, &(0x7f0000002480)={0x14, &(0x7f00000023c0)={0x0, 0xd, 0x74, {0x74, 0x21, "fd156e814fbff3f1090513fb4481c8a3139843aff01b2a215fc610c61ab38be096f7ca4bcae9fc70833a9c0fb43530814f1cfeac56f0896d08874f8cf13e0f7130e079c50773d573f8d637b8b9157a16d65293d7ddb8c342c2926762ce6771d4eca1497e422d498053db99414df7bafe407a"}}, &(0x7f0000002440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x821}}}, &(0x7f0000002680)={0x34, &(0x7f00000024c0)={0x40, 0xa, 0x55, "e4ce77f7762acc38abb0e9d6644c95f701623a59814b7ac934a0480b9f877809ca649bb13d0546294ade79aea03b3d09c5c41243ef6339895c6733d7ef0ebacd8425527f47c157e321936acba1d1d2c55ea7046457"}, &(0x7f0000002540)={0x0, 0xa, 0x1}, &(0x7f0000002580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000025c0)={0x20, 0x0, 0x29, {0x27, "50e014696b1d33c32f92ea25fc89edfaaf38d9684332fb66436ec28e130ba7942c23e0b3d139f5"}}, &(0x7f0000002600)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000002640)={0x20, 0x0, 0x1, 0xd}})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
syz_usb_connect$cdc_ncm(0x1, 0xb0, &(0x7f00000026c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x2, 0x1, 0x1, 0x0, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a7b03c044d04"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0x9}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm_detail={0x29, 0x24, 0x13, 0xf7, "060e22bd97d9e10c261702e32fcb7d4f2f667f49c0fd33e12cca075d7a76726f464cd4c3e1"}, @mbim={0xc, 0x24, 0x1b, 0xc, 0x5f20, 0x6, 0xab, 0x1000, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x5, 0x8, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xec, 0x0, 0x3b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x2, 0x9}}}}}}}]}}, &(0x7f0000002b80)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x250, 0x2, 0xff, 0x3, 0x20, 0x1}, 0x90, &(0x7f00000027c0)={0x5, 0xf, 0x90, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x0, 0x5}, @generic={0x66, 0x10, 0x0, "1c0df1b2858d4bf9dd04d9304cc75fcda04233ef3a93ff61cd0909c285eb1f76b9a3c45487e82095c4d6d3857503a8bf20bd3804d6a91a3b35b6eda8f4ffc05fe4ff401dd378db4a5f7ebf5c101322a29e1da0ea289457c0e98155a37ac305ccc3224d"}, @ss_container_id={0x14, 0x10, 0x4, 0xdc, "b49f6cb95568788b59fe95d063f54cd0"}]}, 0x8, [{0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x814}}, {0x9e, &(0x7f00000028c0)=@string={0x9e, 0x3, "cdeb9bc0d9855b152b31705a115e2f54aea3683134267fb1073eccfa1332b52caa4247ce70bd6af544355e3f2eb786d6f3784fa1112773f93f374ead135064d839f9777526734181ba31883dda623730470775f90f4c5f702bb8e66b81b48d8cceddc0f384376ef5c4e951016b0d925f0329c911cdbe0b3ff68cd12c0b858fd579295c778f01ea3ef053233e9805ee3a182923228db9bbe7aa368c0b"}}, {0x87, &(0x7f0000002980)=@string={0x87, 0x3, "a908fec05e5e1a6b04c3ed6d9afcb7766f26a0194bec9363a6800254f239afd4da671f5dce5be8beb497255ed573cdda65ec29f7cd0609a7f84b52ef99cb8d7bbb7da7349741727dcae5d8344a48b6edf6e4e6012b12dc00a13d3c6c59054051e127e84fdf9672d74040b1bcf886f6f958e2441147b9897de4f244f1b8ee8f562c9140041a"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x440a}}]})
syz_genetlink_get_family_id$ethtool(&(0x7f0000002c00), r0)
pipe(&(0x7f0000002c40))
llistxattr(&(0x7f0000002c80)='./file0/file0\x00', &(0x7f0000002cc0)=""/178, 0xb2)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002d80), &(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00), 0x200800, &(0x7f0000002e80)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}], [{@smackfstransmute}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000002f40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x8d, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0x200, 0x6, 0x67, 0x9, 0x20, 0x80}, 0x5, &(0x7f0000002fc0)={0x5, 0xf, 0x5}, 0x1, [{0x32, &(0x7f0000003000)=@string={0x32, 0x3, "0e920919325d042768cd74e9205fff2e6bbd389308c2b04397d344e4f8ac02e88304a83bf213ec72ca154446558fe633"}}]})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000003080)={0x29, @broadcast, 0x4e21, 0x1, 'lblc\x00', 0x8, 0x9, 0x3e}, 0x2c)

0s ago: executing program 2 (id=1795):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xbc, 0x0, &(0x7f0000000300)=[@enter_looper, @enter_looper, @decrefs={0x40046307, 0x2}, @exit_looper, @free_buffer={0x40086303, r1}, @acquire, @decrefs, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x1, 0x5}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x1, 0x2c}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x9, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/26, 0x1a, 0x0, 0x6}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

slow: ESRCH
[   87.206873][ T2794] rust_binder: use_range failure ESRCH
[   87.212901][  T355] usb 2-1: config 0 interface 123 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 231
[   87.233158][ T2794] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   87.233183][ T2794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   87.241868][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:489
[   87.261600][  T355] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d
[   87.309593][  T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.320732][  T355] usb 2-1: Product: syz
[   87.332652][  T355] usb 2-1: Manufacturer: syz
[   87.337330][  T355] usb 2-1: SerialNumber: syz
[   87.350609][  T355] usb 2-1: config 0 descriptor??
[   87.362893][  T355] cdc_acm 2-1:0.123: More than one union descriptor, skipping ...
[   87.507792][ T2798] binder: Unknown parameter '0x0000000000000000'
[   87.747342][ T2805] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   87.767816][   T64] usb 2-1: USB disconnect, device number 22
[   87.774607][ T2805] rust_binder: Write failure EINVAL in pid:493
[   87.911912][ T2820] rust_binder: Write failure EFAULT in pid:493
[   87.942388][ T2820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493
[   88.059456][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.084903][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.104100][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.111105][ T2829] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.209618][  T355] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   88.223685][   T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   88.260986][ T2845] batadv_slave_0: entered promiscuous mode
[   88.298409][ T2847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502
[   88.311904][ T2844] batadv_slave_0: left promiscuous mode
[   88.365887][ T2850] rust_binder: Write failure EINVAL in pid:502
[   88.388572][  T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.407149][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[   88.419089][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.429106][  T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.441131][   T64] usb 2-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00
[   88.451991][  T355] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   88.462036][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.470740][  T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.482131][   T64] usb 2-1: config 0 descriptor??
[   88.489949][  T355] usb 4-1: config 0 descriptor??
[   88.506921][ T2861] overlayfs: failed to clone upperpath
[   88.572554][ T2861] tipc: Started in network mode
[   88.577460][ T2861] tipc: Node identity ac1414aa, cluster identity 4711
[   88.585096][ T2861] tipc: Enabled bearer <udp:s>, priority 10
[   88.625457][ T2864] fuse: Unknown parameter '00000000000000000003'
[   88.747094][   T64] usbhid 2-1:0.0: can't add hid device: -71
[   88.760156][   T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   88.776821][   T64] usb 2-1: USB disconnect, device number 23
[   88.858550][ T2875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[   88.917524][ T2879] overlayfs: failed to resolve './file0': -2
[   88.919954][  T355] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[   88.936330][  T355] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   89.127846][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.136374][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.315928][  T355] cp2112 0003:10C4:EA90.000B: error requesting version
[   89.333640][  T355] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71
[   89.348901][  T355] usb 4-1: USB disconnect, device number 18
[   89.454558][ T2898] fido_id[2898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   89.512973][ T2900] binder: Unknown parameter 'defcontextuG��\��<�+��
[   89.512973][ T2900] �j'
[   89.537545][  T356] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   89.586398][ T2905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.864'.
[   89.704106][  T356] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   89.715709][  T356] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   89.726685][  T356] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   89.737951][  T356] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   89.746199][  T355] tipc: Node number set to 2886997162
[   89.749834][  T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.764630][ T2893] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.419014][ T2929] rust_binder: Write failure EFAULT in pid:431
[   90.606428][   T36] kauditd_printk_skb: 910 callbacks suppressed
[   90.606446][   T36] audit: type=1400 audit(1750636963.574:8516): avc:  denied  { ioctl } for  pid=2892 comm="syz.2.862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.612522][ T2941] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.613751][   T36] audit: type=1400 audit(1750636963.574:8517): avc:  denied  { read } for  pid=2939 comm="syz.1.879" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.631973][ T2941] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   90.677539][   T36] audit: type=1400 audit(1750636963.574:8518): avc:  denied  { read open } for  pid=2939 comm="syz.1.879" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.709873][   T36] audit: type=1400 audit(1750636963.574:8519): avc:  denied  { ioctl } for  pid=2939 comm="syz.1.879" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.735712][   T36] audit: type=1400 audit(1750636963.584:8520): avc:  denied  { read } for  pid=2939 comm="syz.1.879" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   90.760254][   T36] audit: type=1400 audit(1750636963.584:8521): avc:  denied  { read open } for  pid=2939 comm="syz.1.879" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   90.784431][   T36] audit: type=1400 audit(1750636963.584:8522): avc:  denied  { ioctl } for  pid=2939 comm="syz.1.879" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   90.809088][   T36] audit: type=1400 audit(1750636963.593:8523): avc:  denied  { map } for  pid=2939 comm="syz.1.879" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.839495][   T36] audit: type=1400 audit(1750636963.593:8524): avc:  denied  { read } for  pid=2939 comm="syz.1.879" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.863770][   T36] audit: type=1400 audit(1750636963.593:8525): avc:  denied  { ioctl } for  pid=2939 comm="syz.1.879" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.958332][ T2958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'.
[   91.034998][ T2962] SELinux: failed to load policy
[   91.338670][   T45] bridge_slave_1: left allmulticast mode
[   91.344440][   T45] bridge_slave_1: left promiscuous mode
[   91.350110][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.358529][   T45] bridge_slave_0: left allmulticast mode
[   91.364229][   T45] bridge_slave_0: left promiscuous mode
[   91.370030][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.405966][  T356] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   91.413818][  T356] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input13
[   91.428581][  T356] usb 3-1: USB disconnect, device number 26
[   91.428616][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   91.468739][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.475845][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.483660][ T2968] bridge_slave_0: entered allmulticast mode
[   91.490075][ T2968] bridge_slave_0: entered promiscuous mode
[   91.496925][   T45] veth1_macvtap: left promiscuous mode
[   91.502482][   T45] veth0_vlan: left promiscuous mode
[   91.541109][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.548148][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.555238][ T2968] bridge_slave_1: entered allmulticast mode
[   91.561540][ T2968] bridge_slave_1: entered promiscuous mode
[   91.647595][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.654685][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.661975][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.669036][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.723181][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.730648][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.745481][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.752549][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.762892][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.769967][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.843855][ T2968] veth0_vlan: entered promiscuous mode
[   91.876735][ T2968] veth1_macvtap: entered promiscuous mode
[   92.158710][ T2973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510
[   92.236437][ T2987] overlayfs: overlapping lowerdir path
[   92.368763][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   92.550615][ T3005] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   92.550633][ T3005] rust_binder: Error while translating object.
[   92.560004][ T3005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   92.561614][ T3006] rust_binder: Read failure Err(EAGAIN) in pid:15
[   92.566319][ T3005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524
[   92.583616][    T9] usb 4-1: Using ep0 maxpacket: 32
[   92.606000][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.613668][ T3008] usb usb2: usbfs: process 3008 (syz.2.904) did not claim interface 0 before use
[   92.628061][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   92.639697][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   92.651064][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   92.660446][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.670118][    T9] usb 4-1: config 0 descriptor??
[   92.676790][ T2977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   92.685196][    T9] hub 4-1:0.0: USB hub found
[   92.891772][    T9] hub 4-1:0.0: 2 ports detected
[   92.936325][ T3018] netlink: 596 bytes leftover after parsing attributes in process `syz.2.907'.
[   93.187237][  T355] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[   93.346678][  T355] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   93.363419][  T355] usb 3-1: config 179 has no interface number 0
[   93.379184][  T355] usb 3-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[   93.392449][  T355] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10
[   93.407149][  T355] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8
[   93.419320][  T355] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   93.429493][  T355] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   93.443377][  T355] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   93.452531][  T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.464441][ T3018] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   93.575108][ T3027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24
[   93.635282][ T3029] rust_binder: Error while translating object.
[   93.645588][ T3029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   93.651832][ T3029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:26
[   93.885203][  T306] usb 3-1: USB disconnect, device number 27
[   94.180201][ T3043] rust_binder: Read failure Err(EAGAIN) in pid:35
[   94.341313][    T9] hub 4-1:0.0: hub_ext_port_status failed (err = 0)
[   94.525577][    T9] usb 4-1: reset high-speed USB device number 19 using dummy_hcd
[   94.680335][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:544
[   95.088032][ T3082] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.296170][ T3085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'.
[   95.296279][ T3092] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   95.329953][ T3092] rust_binder: Error while translating object.
[   95.341519][   T64] usb 4-1: USB disconnect, device number 19
[   95.354509][    T9] hub 4-1:0.0: set hub depth failed
[   95.355809][ T3092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   95.359762][ T3092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550
[   95.424460][ T3085] overlayfs: failed to clone upperpath
[   95.599455][ T3105] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   95.750529][   T36] kauditd_printk_skb: 828 callbacks suppressed
[   95.750545][   T36] audit: type=1400 audit(1750636968.591:9354): avc:  denied  { ioctl } for  pid=3095 comm="syz.3.935" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.783667][   T36] audit: type=1400 audit(1750636968.601:9355): avc:  denied  { read write } for  pid=3095 comm="syz.3.935" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.840221][   T36] audit: type=1400 audit(1750636968.601:9356): avc:  denied  { read write open } for  pid=3095 comm="syz.3.935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.865766][   T36] audit: type=1400 audit(1750636968.601:9357): avc:  denied  { ioctl } for  pid=3095 comm="syz.3.935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.892790][   T36] audit: type=1400 audit(1750636968.631:9358): avc:  denied  { ioctl } for  pid=3095 comm="syz.3.935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.918873][   T36] audit: type=1400 audit(1750636968.631:9359): avc:  denied  { ioctl } for  pid=3095 comm="syz.3.935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.946016][   T36] audit: type=1400 audit(1750636968.631:9360): avc:  denied  { ioctl } for  pid=3095 comm="syz.3.935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.971923][   T36] audit: type=1400 audit(1750636968.631:9361): avc:  denied  { create } for  pid=3113 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.992709][   T36] audit: type=1400 audit(1750636968.631:9362): avc:  denied  { ioctl } for  pid=3113 comm="syz.0.942" path="socket:[22711]" dev="sockfs" ino=22711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   96.017447][   T36] audit: type=1400 audit(1750636968.650:9363): avc:  denied  { bind } for  pid=3113 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   96.044036][  T306] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[   96.198748][  T306] usb 4-1: config 0 has an invalid interface number: 216 but max is 0
[   96.206930][  T306] usb 4-1: config 0 has no interface number 0
[   96.213173][  T306] usb 4-1: config 0 interface 216 has no altsetting 0
[   96.219985][  T306] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   96.229686][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.238866][  T306] usb 4-1: config 0 descriptor??
[   96.400401][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   96.451305][  T306] asix 4-1:0.216 (unnamed net_device) (uninitialized): invalid hw address, using random
[   96.553057][    T9] usb 3-1: Using ep0 maxpacket: 32
[   96.560136][    T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[   96.568257][    T9] usb 3-1: config 0 has no interface number 0
[   96.577076][    T9] usb 3-1: New USB device found, idVendor=0856, idProduct=ac27, bcdDevice=10.b7
[   96.586281][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.594293][    T9] usb 3-1: Product: syz
[   96.598451][    T9] usb 3-1: Manufacturer: syz
[   96.603029][    T9] usb 3-1: SerialNumber: syz
[   96.609715][    T9] usb 3-1: config 0 descriptor??
[   96.617107][    T9] ftdi_sio 3-1:0.11: FTDI USB Serial Device converter detected
[   96.625591][    T9] ftdi_sio ttyUSB0: unknown device type: 0x10b7
[   97.814422][  T776] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   97.966897][  T776] usb 5-1: Using ep0 maxpacket: 16
[   97.974787][  T776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.985753][  T776] usb 5-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[   97.994838][  T776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.004600][  T776] usb 5-1: config 0 descriptor??
[   98.444691][  T776] wacom 0003:056A:010E.000C: unknown main item tag 0x0
[   98.451637][  T776] wacom 0003:056A:010E.000C: unknown main item tag 0x0
[   98.458542][  T776] wacom 0003:056A:010E.000C: unknown main item tag 0x0
[   98.465635][  T776] wacom 0003:056A:010E.000C: unknown main item tag 0x0
[   98.472511][  T776] wacom 0003:056A:010E.000C: unknown main item tag 0x0
[   98.481438][  T776] wacom 0003:056A:010E.000C: hidraw0: USB HID v4.05 Device [HID 056a:010e] on usb-dummy_hcd.4-1/input0
[   98.584888][  T306] asix 4-1:0.216 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   98.608425][  T306] asix 4-1:0.216: probe with driver asix failed with error -71
[   98.619761][  T306] usb 4-1: USB disconnect, device number 20
[   98.697385][ T3179] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.705087][ T3179] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.726327][ T3179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:537
[   98.735414][ T3180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.248640][  T306] usb 3-1: USB disconnect, device number 28
[   99.261719][  T306] ftdi_sio 3-1:0.11: device disconnected
[   99.399505][ T3195] syzkaller0: entered promiscuous mode
[   99.415163][ T3195] syzkaller0: entered allmulticast mode
[   99.444209][ T3195] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096)
[   99.444228][ T3195] rust_binder: Error while translating object.
[   99.457366][ T3195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.463747][ T3195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567
[   99.813315][ T3212] rust_binder: Write failure EINVAL in pid:547
[   99.825110][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   99.863342][ T3217] netlink: 'syz.3.978': attribute type 2 has an invalid length.
[   99.872708][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.897619][ T3222] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.962274][ T3226] input: syz0 as /devices/virtual/input/input18
[  100.000786][ T3226] binder: Bad value for 'stats'
[  100.003259][    T9] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  100.014187][    T9] usb 3-1: config 0 has no interface number 0
[  100.024144][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  100.034223][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.044265][    T9] usb 3-1: Product: syz
[  100.048999][    T9] usb 3-1: Manufacturer: syz
[  100.053657][    T9] usb 3-1: SerialNumber: syz
[  100.060831][    T9] usb 3-1: config 0 descriptor??
[  100.286593][    T9] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[  100.298322][    T9] usb 3-1: No valid video chain found.
[  100.310020][    T9] usb 3-1: USB disconnect, device number 29
[  100.687122][  T306] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  100.718363][    T9] usb 5-1: USB disconnect, device number 2
[  100.756674][ T3244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[  100.847816][   T36] kauditd_printk_skb: 573 callbacks suppressed
[  100.847835][   T36] audit: type=1400 audit(1750636973.611:9937): avc:  denied  { create } for  pid=3248 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  100.854312][  T306] usb 4-1: config 111 has an invalid descriptor of length 111, skipping remainder of the config
[  100.867333][   T36] audit: type=1400 audit(1750636973.611:9938): avc:  denied  { ioctl } for  pid=3240 comm="syz.3.986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.900233][  T306] usb 4-1: config 111 has 0 interfaces, different from the descriptor's value: 1
[  100.946766][  T306] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  100.956597][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.965086][   T36] audit: type=1400 audit(1750636973.611:9939): avc:  denied  { ioctl } for  pid=3240 comm="syz.3.986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.990853][   T36] audit: type=1400 audit(1750636973.611:9940): avc:  denied  { ioctl } for  pid=3240 comm="syz.3.986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  101.015910][   T36] audit: type=1400 audit(1750636973.611:9941): avc:  denied  { ioctl } for  pid=3240 comm="syz.3.986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  101.040728][   T36] audit: type=1400 audit(1750636973.611:9942): avc:  denied  { ioctl } for  pid=3240 comm="syz.3.986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  101.065626][   T36] audit: type=1400 audit(1750636973.630:9943): avc:  denied  { write } for  pid=3248 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.085736][   T36] audit: type=1400 audit(1750636973.630:9944): avc:  denied  { nlmsg_write } for  pid=3248 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.106323][   T36] audit: type=1400 audit(1750636973.630:9945): avc:  denied  { create } for  pid=3248 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.126481][   T36] audit: type=1400 audit(1750636973.630:9946): avc:  denied  { write } for  pid=3248 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.312322][  T306] usb 4-1: string descriptor 0 read error: -71
[  101.320626][  T306] usb 4-1: USB disconnect, device number 21
[  101.747311][ T3260] rust_binder: Write failure EFAULT in pid:59
[  101.984250][ T3269] incfs_lookup_dentry err:-1
[  101.995020][ T3269] incfs: Can't find or create .index dir in ./file0
[  102.001636][ T3269] incfs: mount failed -1
[  102.014113][ T3269] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.023637][ T3269] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  102.125792][  T776] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  102.287811][  T776] usb 5-1: Using ep0 maxpacket: 16
[  102.294784][  T776] usb 5-1: config 9 has an invalid interface number: 186 but max is 0
[  102.303027][  T776] usb 5-1: config 9 has no interface number 0
[  102.309141][  T776] usb 5-1: config 9 interface 186 altsetting 10 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  102.320179][  T776] usb 5-1: config 9 interface 186 altsetting 10 endpoint 0x9 has an invalid bInterval 116, changing to 7
[  102.331404][  T776] usb 5-1: config 9 interface 186 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  102.342448][  T776] usb 5-1: config 9 interface 186 has no altsetting 0
[  102.353203][  T776] usb 5-1: string descriptor 0 read error: -22
[  102.359811][  T776] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=98.63
[  102.368853][  T776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.382053][  T776] usbhid 5-1:9.186: couldn't find an input interrupt endpoint
[  102.590134][    T9] usb 5-1: USB disconnect, device number 3
[  102.881683][ T3262] binder: Bad value for 'max'
[  102.922114][ T3321] rust_binder: Error while translating object.
[  102.922151][ T3321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  102.928436][ T3321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604
[  103.126333][ T3337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599
[  103.411060][    T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  103.552621][    T9] usb 3-1: device descriptor read/64, error -71
[  103.691626][ T3358] syz.0.1025: vmalloc error: size 270532608, failed to allocated page array size 528384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  103.710639][ T3358] CPU: 1 UID: 0 PID: 3358 Comm: syz.0.1025 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  103.710665][ T3358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  103.710679][ T3358] Call Trace:
[  103.710685][ T3358]  <TASK>
[  103.710692][ T3358]  __dump_stack+0x21/0x30
[  103.710725][ T3358]  dump_stack_lvl+0x10c/0x190
[  103.710743][ T3358]  ? __cfi_dump_stack_lvl+0x10/0x10
[  103.710764][ T3358]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  103.710790][ T3358]  dump_stack+0x19/0x20
[  103.710809][ T3358]  warn_alloc+0x1bc/0x2a0
[  103.710827][ T3358]  ? __kasan_slab_free+0x5f/0x80
[  103.710854][ T3358]  ? __cfi_warn_alloc+0x10/0x10
[  103.710871][ T3358]  ? __get_vm_area_node+0x1dc/0x3a0
[  103.710890][ T3358]  ? xt_alloc_entry_offsets+0x56/0xe0
[  103.710918][ T3358]  __vmalloc_node_range_noprof+0x68e/0x1420
[  103.710937][ T3358]  ? __kernel_text_address+0x11/0x40
[  103.710961][ T3358]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  103.710983][ T3358]  ? __kmalloc_large_node_noprof+0x1e/0xe0
[  103.711005][ T3358]  ? __kmalloc_node_noprof+0x2a5/0x450
[  103.711026][ T3358]  ? nf_setsockopt+0x28d/0x2b0
[  103.711046][ T3358]  __kvmalloc_node_noprof+0xfc/0x300
[  103.711066][ T3358]  ? xt_alloc_entry_offsets+0x56/0xe0
[  103.711091][ T3358]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  103.711113][ T3358]  xt_alloc_entry_offsets+0x56/0xe0
[  103.711147][ T3358]  translate_table+0x19c/0x2050
[  103.711171][ T3358]  ? cred_has_capability+0x281/0x380
[  103.711198][ T3358]  ? ip6t_register_table+0x7c0/0x7c0
[  103.711220][ T3358]  ? __kmalloc_node_noprof+0x1b1/0x450
[  103.711240][ T3358]  ? __kvmalloc_node_noprof+0x11d/0x300
[  103.711269][ T3358]  ? __kvmalloc_node_noprof+0x168/0x300
[  103.711288][ T3358]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  103.711307][ T3358]  ? should_fail+0xf/0x20
[  103.711325][ T3358]  ? _copy_from_user+0x8b/0xb0
[  103.711348][ T3358]  ? copy_from_sockptr_offset+0x77/0xb0
[  103.711372][ T3358]  do_ip6t_set_ctl+0x6f6/0x8b0
[  103.711396][ T3358]  ? __cfi_do_ip6t_set_ctl+0x10/0x10
[  103.711417][ T3358]  ? avc_has_perm+0x1f2/0x220
[  103.711434][ T3358]  ? __cfi_avc_has_perm+0x10/0x10
[  103.711450][ T3358]  ? futex_wake+0x63a/0x900
[  103.711468][ T3358]  ? __cfi_mutex_unlock+0x10/0x10
[  103.711484][ T3358]  ? selinux_socket_setsockopt+0x2ea/0x390
[  103.711504][ T3358]  nf_setsockopt+0x28d/0x2b0
[  103.711522][ T3358]  ipv6_setsockopt+0x130/0x170
[  103.711545][ T3358]  udpv6_setsockopt+0xa3/0xc0
[  103.711560][ T3358]  sock_common_setsockopt+0xb5/0xd0
[  103.711581][ T3358]  ? __cfi_sock_common_setsockopt+0x10/0x10
[  103.711602][ T3358]  do_sock_setsockopt+0x26a/0x400
[  103.711628][ T3358]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  103.711657][ T3358]  __x64_sys_setsockopt+0x1b8/0x250
[  103.711683][ T3358]  x64_sys_call+0x2adc/0x2ee0
[  103.711706][ T3358]  do_syscall_64+0x58/0xf0
[  103.711729][ T3358]  ? clear_bhb_loop+0x35/0x90
[  103.711757][ T3358]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  103.711782][ T3358] RIP: 0033:0x7ff23818e929
[  103.711803][ T3358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.711819][ T3358] RSP: 002b:00007ff238ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.711837][ T3358] RAX: ffffffffffffffda RBX: 00007ff2383b5fa0 RCX: 00007ff23818e929
[  103.711851][ T3358] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  103.711862][ T3358] RBP: 00007ff238210b39 R08: 00000000000d0060 R09: 0000000000000000
[  103.711874][ T3358] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  103.711886][ T3358] R13: 0000000000000000 R14: 00007ff2383b5fa0 R15: 00007ffec8f0d0d8
[  103.711901][ T3358]  </TASK>
[  103.711912][ T3358] Mem-Info:
[  103.805431][    T9] usb 3-1: device descriptor read/64, error -71
[  103.836133][ T3366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83
[  103.841989][ T3358] active_anon:6562 inactive_anon:6 isolated_anon:0
[  103.841989][ T3358]  active_file:12610 inactive_file:11487 isolated_file:0
[  103.841989][ T3358]  unevictable:0 dirty:64 writeback:0
[  103.841989][ T3358]  slab_reclaimable:5222 slab_unreclaimable:70423
[  103.841989][ T3358]  mapped:24414 shmem:215 pagetables:919
[  103.841989][ T3358]  sec_pagetables:0 bounce:0
[  103.841989][ T3358]  kernel_misc_reclaimable:0
[  103.841989][ T3358]  free:1515689 free_pcp:5064 free_cma:0
[  103.856386][ T3366] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  103.858082][ T3358] Node 0 active_anon:26248kB inactive_anon:24kB active_file:50440kB inactive_file:45948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97656kB dirty:256kB writeback:0kB shmem:860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4556kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no
[  103.865376][ T3366] rust_binder: Read failure Err(EFAULT) in pid:83
[  103.868412][ T3358] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB
[  104.124074][ T3382] cannot load conntrack support for proto=3
[  104.135241][ T3358] lowmem_reserve[]: 0 3921 3921
[  104.222150][ T3358] Normal free:3111176kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26572kB inactive_anon:24kB active_file:50440kB inactive_file:45948kB unevictable:0kB writepending:256kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4328kB local_pcp:2900kB free_cma:0kB
[  104.260480][ T3358] lowmem_reserve[]: 0 0 0
[  104.264896][ T3358] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  104.270657][    T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  104.284585][ T3358] Normal: 85*4kB (ME) 336*8kB (UME) 538*16kB (UME) 417*32kB (UME) 665*64kB (UME) 175*128kB (UME) 34*256kB (UME) 19*512kB (UME) 8*1024kB (UME) 8*2048kB (UME) 727*4096kB (M) = 3110740kB
[  104.309721][ T3358] 24389 total pagecache pages
[  104.314434][ T3358] 30 pages in swap cache
[  104.319439][ T3358] Free swap  = 124460kB
[  104.323931][ T3358] Total swap = 124996kB
[  104.328099][ T3358] 2097051 pages RAM
[  104.341314][ T3358] 0 pages HighMem/MovableOnly
[  104.361527][ T3358] 351520 pages reserved
[  104.365689][ T3358] 0 pages cma reserved
[  104.392269][ T3358] Memory allocations:
[  104.396282][ T3358]          0 B        0 init/main.c:1370 func:do_initcalls
[  104.408896][ T3358]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  104.417709][ T3358]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  104.422223][    T9] usb 3-1: device descriptor read/64, error -71
[  104.426646][ T3358]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  104.448825][ T3358]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  104.477291][ T3395] rust_binder: Write failure EFAULT in pid:89
[  104.477509][ T3358]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  104.492370][ T3358]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  104.500354][ T3358]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  104.508308][ T3358]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  104.516251][ T3358]          0 B        0 init/initramfs.c:101 func:find_link
[  104.674819][    T9] usb 3-1: device descriptor read/64, error -71
[  104.786384][    T9] usb usb3-port1: attempt power cycle
[  104.844635][ T3418] tmpfs: Unknown parameter 'fd'
[  105.129565][    T9] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  105.152554][    T9] usb 3-1: device descriptor read/8, error -71
[  105.293737][    T9] usb 3-1: device descriptor read/8, error -71
[  105.544714][    T9] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  105.596700][    T9] usb 3-1: device descriptor read/8, error -71
[  105.617459][ T3431] random: crng reseeded on system resumption
[  105.645028][ T3429] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  105.645047][ T3429] rust_binder: Read failure Err(EFAULT) in pid:637
[  105.706200][ T3435] rust_binder: Write failure EINVAL in pid:639
[  105.751742][    T9] usb 3-1: device descriptor read/8, error -71
[  105.897506][    T9] usb usb3-port1: unable to enumerate USB device
[  105.948754][   T36] kauditd_printk_skb: 740 callbacks suppressed
[  105.948769][   T36] audit: type=1400 audit(1750636978.662:10687): avc:  denied  { create } for  pid=3441 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.976329][   T36] audit: type=1400 audit(1750636978.682:10688): avc:  denied  { setopt } for  pid=3441 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.995940][   T36] audit: type=1400 audit(1750636978.682:10689): avc:  denied  { ioctl } for  pid=3441 comm="syz.3.1051" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  106.021517][   T36] audit: type=1400 audit(1750636978.692:10690): avc:  denied  { create } for  pid=3440 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.025644][ T3442] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[  106.044136][   T36] audit: type=1400 audit(1750636978.731:10691): avc:  denied  { write } for  pid=3440 comm="syz.4.1050" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.068852][ T3442] SELinux: failed to load policy
[  106.073148][   T36] audit: type=1400 audit(1750636978.731:10692): avc:  denied  { mounton } for  pid=3440 comm="syz.4.1050" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  106.097757][   T36] audit: type=1400 audit(1750636978.731:10693): avc:  denied  { mount } for  pid=3440 comm="syz.4.1050" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  106.120317][   T36] audit: type=1400 audit(1750636978.731:10694): avc:  denied  { load_policy } for  pid=3440 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  106.159909][   T36] audit: type=1400 audit(1750636978.870:10695): avc:  denied  { read write } for  pid=2968 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  106.184418][   T36] audit: type=1400 audit(1750636978.870:10696): avc:  denied  { read write open } for  pid=2968 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  106.624108][  T776] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  106.730580][ T3476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3476 comm=syz.3.1061
[  106.746670][ T3476] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.1061'.
[  106.759207][ T3476] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  106.759226][ T3476] rust_binder: Read failure Err(EFAULT) in pid:649
[  106.775457][  T776] usb 3-1: Using ep0 maxpacket: 32
[  106.813935][  T776] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  106.838836][  T776] usb 3-1: config 0 has no interface number 0
[  106.853951][  T776] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  106.865461][ T3480] rust_binder: Error while translating object.
[  106.865483][ T3480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.873190][  T776] usb 3-1: config 0 interface 196 has no altsetting 0
[  106.891125][ T3480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651
[  106.934183][  T776] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  106.974905][  T776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.986967][  T776] usb 3-1: Product: syz
[  106.991843][  T776] usb 3-1: Manufacturer: syz
[  106.996503][  T776] usb 3-1: SerialNumber: syz
[  107.006849][  T776] usb 3-1: config 0 descriptor??
[  107.019521][ T3453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.082853][ T3495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[  107.219536][  T306] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  107.391064][  T306] usb 4-1: Using ep0 maxpacket: 32
[  107.400703][  T306] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  107.413681][  T306] usb 4-1: config 1 interface 0 has no altsetting 0
[  107.423163][  T306] usb 4-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.40
[  107.432278][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.440267][  T306] usb 4-1: Product: 赀聃둨⭴惒悈킖뮡焫鳆庀酃陖歟璾宋Ⓚ蹃ᯮ꟧㣺冿셑
[  107.451283][  T306] usb 4-1: Manufacturer: ◅䦋쇀奌⼠汪토硗䁰긠⬷◸恰様瞥ふ嫾㆕焲噉齤ꂵᶵ㲤鳩呿頭앑㍬򶛲졘ᑉ⋗豢﨩璠싰䦄㳄淁幂៲괤豑鈰쿜ᦅ樗솓ऌ耹彎뤋⺌꨽꾨햜茄姒⾥捼쐏铻⡪䯁䅪筮ģ꘰뎏竣皶ꜿ鬮⁩䥮⌭忼ꢇ樲潎릅䦀ꁄ캟蔸♴풊⮆ﯝ뽒稈௉᫈簧
[  107.482990][  T306] usb 4-1: SerialNumber: syz
[  107.654506][  T776] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  107.665045][  T776] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  107.869447][   T64] usb 3-1: USB disconnect, device number 34
[  107.914050][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.929069][   T64] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  107.946572][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.182302][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.197026][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.215351][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.227396][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.263667][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.295703][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.319817][  T306] usbhid 4-1:1.0: can't add hid device: -71
[  108.325806][  T306] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  108.351291][  T306] usb 4-1: USB disconnect, device number 22
[  108.635684][ T3554] rust_binder: Write failure EFAULT in pid:152
[  108.785229][ T3569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612
[  109.216266][    T9] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  109.357397][    T9] usb 4-1: device descriptor read/64, error -71
[  109.599206][    T9] usb 4-1: device descriptor read/64, error -71
[  109.841052][    T9] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  109.902778][ T3627] fuse: Bad value for 'fd'
[  109.971037][ T3633] rust_binder: Write failure EFAULT in pid:620
[  109.993710][    T9] usb 4-1: device descriptor read/64, error -71
[  110.012398][  T334] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.163491][  T334] usb 5-1: Using ep0 maxpacket: 16
[  110.176645][  T334] usb 5-1: config 1 interface 0 altsetting 140 bulk endpoint 0x82 has invalid maxpacket 32
[  110.187820][  T334] usb 5-1: config 1 interface 0 altsetting 140 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  110.214700][  T334] usb 5-1: config 1 interface 0 has no altsetting 0
[  110.234143][  T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  110.243616][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.244086][    T9] usb 4-1: device descriptor read/64, error -71
[  110.251637][  T334] usb 5-1: Product: ࠔ
[  110.262039][  T334] usb 5-1: Manufacturer: 涬옿胨葱䄷䴰㜑귣﷾ﶿڜ턚裍偊⠅㍇詓돔᲋룵曷衻ꈉ쬯䜑⫇Ṵ鳆댅蚰ꬎ╚铑䎢〡寪ᆌ㵅駗ᆸ硎咆㐺睨㈽㘶㣡峽壮顩᥀鋬ᦩꘄ뫎隣㯻㊵禝﫵碫쪑㘭㾆吐ᜲ
[  110.285595][  T334] usb 5-1: SerialNumber: ᠌
[  110.293038][ T3619] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  110.300552][ T3619] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  110.379036][    T9] usb usb4-port1: attempt power cycle
[  110.531829][ T3652] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1114'.
[  110.534881][  T334] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  110.557887][  T334] usb 5-1: USB disconnect, device number 4
[  110.575926][ T1426] udevd[1426]: setting mode of /dev/bus/usb/005/004 to 020664 failed: No such file or directory
[  110.589475][ T1426] udevd[1426]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory
[  110.657064][  T306] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  110.727581][    T9] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  110.759117][    T9] usb 4-1: device descriptor read/8, error -71
[  110.798075][  T306] usb 3-1: device descriptor read/64, error -71
[  110.892022][    T9] usb 4-1: device descriptor read/8, error -71
[  110.940654][ T3679] overlayfs: missing 'workdir'
[  110.999983][   T36] kauditd_printk_skb: 1093 callbacks suppressed
[  111.000000][   T36] audit: type=1400 audit(1750636983.670:11790): avc:  denied  { ioctl } for  pid=3581 comm="syz.3.1091" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.033828][   T36] audit: type=1400 audit(1750636983.670:11791): avc:  denied  { create } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.055869][   T36] audit: type=1400 audit(1750636983.670:11792): avc:  denied  { write } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.066062][  T306] usb 3-1: device descriptor read/64, error -71
[  111.100180][   T36] audit: type=1400 audit(1750636983.670:11793): avc:  denied  { nlmsg_write } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.125482][   T36] audit: type=1400 audit(1750636983.670:11794): avc:  denied  { create } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.145907][    T9] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  111.156190][   T36] audit: type=1400 audit(1750636983.670:11795): avc:  denied  { write } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.159086][ T3691] rust_binder: Write failure EFAULT in pid:165
[  111.192994][    T9] usb 4-1: device descriptor read/8, error -71
[  111.207481][   T36] audit: type=1400 audit(1750636983.670:11796): avc:  denied  { nlmsg_write } for  pid=3682 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.230070][   T36] audit: type=1400 audit(1750636983.700:11797): avc:  denied  { ioctl } for  pid=3581 comm="syz.3.1091" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.257045][   T36] audit: type=1400 audit(1750636983.700:11798): avc:  denied  { create } for  pid=3684 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.297899][   T36] audit: type=1400 audit(1750636983.700:11799): avc:  denied  { write } for  pid=3684 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.352005][  T306] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  111.354864][    T9] usb 4-1: device descriptor read/8, error -71
[  111.472859][    T9] usb usb4-port1: unable to enumerate USB device
[  111.492915][  T306] usb 3-1: device descriptor read/64, error -71
[  111.744652][  T306] usb 3-1: device descriptor read/64, error -71
[  111.855449][  T306] usb usb3-port1: attempt power cycle
[  112.066731][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  112.197583][  T306] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  112.227767][    T9] usb 5-1: Using ep0 maxpacket: 8
[  112.231999][  T306] usb 3-1: device descriptor read/8, error -71
[  112.256039][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.274698][    T9] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.287088][    T9] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.298175][    T9] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.311851][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  112.319117][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  112.328223][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.339102][    T9] usb 5-1: config 0 descriptor??
[  112.381257][  T306] usb 3-1: device descriptor read/8, error -71
[  112.408520][ T3746] netlink: 'syz.3.1146': attribute type 3 has an invalid length.
[  112.620296][  T306] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  112.654330][  T306] usb 3-1: device descriptor read/8, error -71
[  112.753285][    T9] ryos 0003:1E7D:3232.000D: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0
[  112.795424][  T306] usb 3-1: device descriptor read/8, error -71
[  112.912598][  T306] usb usb3-port1: unable to enumerate USB device
[  112.932229][  T776] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  112.955322][ T3772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.963906][ T3774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.964169][ T3772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.972337][ T3774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.999455][ T3772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.008513][ T3772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.083159][  T776] usb 4-1: Using ep0 maxpacket: 16
[  113.091344][  T776] usb 4-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config
[  113.102468][  T776] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.111444][  T776] usb 4-1: config 1 has no interface number 1
[  113.117599][  T776] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  113.130496][  T776] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  113.144933][  T776] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.154084][  T776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.162077][  T776] usb 4-1: Product: syz
[  113.166281][  T776] usb 4-1: Manufacturer: syz
[  113.170883][  T776] usb 4-1: SerialNumber: syz
[  113.387642][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.398644][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.429742][  T776] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  113.455995][  T776] usb 4-1: found format II with max.bitrate = 2, frame size=30167
[  113.473286][  T776] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  113.490009][  T776] usb 4-1: USB disconnect, device number 27
[  113.599933][ T3788] rust_binder: Write failure EFAULT in pid:637
[  113.687530][ T1426] udevd[1426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  114.468170][ T3817] input: syz1 as /devices/virtual/input/input20
[  114.603115][ T3825] netlink: 'syz.3.1170': attribute type 29 has an invalid length.
[  114.611206][ T3825] netlink: 'syz.3.1170': attribute type 29 has an invalid length.
[  114.619206][ T3825] netlink: 'syz.3.1170': attribute type 29 has an invalid length.
[  114.627134][ T3825] netlink: 'syz.3.1170': attribute type 29 has an invalid length.
[  114.635066][ T3825] netlink: 'syz.3.1170': attribute type 29 has an invalid length.
[  114.891962][    T9] usb 5-1: USB disconnect, device number 5
[  114.934910][ T3827] syzkaller0: entered allmulticast mode
[  114.946251][ T3827] rust_binder: Error while translating object.
[  114.946278][ T3827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  114.955959][ T3827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:187
[  115.282450][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  115.298006][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  115.311791][ T3837] rust_binder: Write failure EFAULT in pid:642
[  115.336045][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  115.361023][ T3838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3838 comm=syz.3.1175
[  115.497602][    T9] usb 5-1: no configurations
[  115.502257][    T9] usb 5-1: can't read configurations, error -22
[  115.637611][    T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  115.789529][    T9] usb 5-1: no configurations
[  115.795496][    T9] usb 5-1: can't read configurations, error -22
[  115.802859][    T9] usb usb5-port1: attempt power cycle
[  116.039943][   T36] kauditd_printk_skb: 1483 callbacks suppressed
[  116.039977][   T36] audit: type=1400 audit(1750636988.680:13283): avc:  denied  { read } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.066630][   T36] audit: type=1400 audit(1750636988.680:13284): avc:  denied  { read } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.095255][   T36] audit: type=1400 audit(1750636988.680:13285): avc:  denied  { create } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.141893][   T36] audit: type=1400 audit(1750636988.680:13286): avc:  denied  { write } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.176189][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  116.180378][   T36] audit: type=1400 audit(1750636988.680:13287): avc:  denied  { create } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.197487][ T3871] audit: audit_backlog=65 > audit_backlog_limit=64
[  116.207930][   T36] audit: type=1400 audit(1750636988.680:13288): avc:  denied  { write } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.212428][ T3871] audit: audit_lost=29 audit_rate_limit=0 audit_backlog_limit=64
[  116.232544][   T36] audit: type=1400 audit(1750636988.680:13289): avc:  denied  { create } for  pid=3865 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.239573][ T3871] audit: backlog limit exceeded
[  116.265273][ T3871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.265299][ T3871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645
[  116.266485][    T9] usb 5-1: no configurations
[  116.288427][    T9] usb 5-1: can't read configurations, error -22
[  116.441797][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  116.464701][    T9] usb 5-1: no configurations
[  116.469366][    T9] usb 5-1: can't read configurations, error -22
[  116.492057][    T9] usb usb5-port1: unable to enumerate USB device
[  116.631038][ T3887] warn_alloc: 1 callbacks suppressed
[  116.631054][ T3887] syz.2.1194: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[  116.653433][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.2.1194 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  116.653462][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.653474][ T3887] Call Trace:
[  116.653481][ T3887]  <TASK>
[  116.653488][ T3887]  __dump_stack+0x21/0x30
[  116.653515][ T3887]  dump_stack_lvl+0x10c/0x190
[  116.653536][ T3887]  ? __cfi_dump_stack_lvl+0x10/0x10
[  116.653559][ T3887]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  116.653587][ T3887]  dump_stack+0x19/0x20
[  116.653607][ T3887]  warn_alloc+0x1bc/0x2a0
[  116.653625][ T3887]  ? stack_depot_save_flags+0x38/0x800
[  116.653648][ T3887]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  116.653691][ T3887]  ? __cfi_warn_alloc+0x10/0x10
[  116.653710][ T3887]  ? kasan_save_track+0x4f/0x80
[  116.653735][ T3887]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  116.653758][ T3887]  ? xskq_create+0x68/0x2a0
[  116.653788][ T3887]  ? xsk_init_queue+0xb6/0x120
[  116.653815][ T3887]  ? xsk_setsockopt+0x43f/0x6f0
[  116.653842][ T3887]  ? do_sock_setsockopt+0x26a/0x400
[  116.653871][ T3887]  ? __x64_sys_setsockopt+0x1b8/0x250
[  116.653909][ T3887]  ? x64_sys_call+0x2adc/0x2ee0
[  116.653935][ T3887]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.653964][ T3887]  __vmalloc_node_range_noprof+0x135/0x1420
[  116.653990][ T3887]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  116.654012][ T3887]  ? avc_has_perm+0x1f2/0x220
[  116.654033][ T3887]  ? kasan_save_alloc_info+0x40/0x50
[  116.654054][ T3887]  ? __kasan_kmalloc+0x96/0xb0
[  116.654081][ T3887]  vmalloc_user_noprof+0x77/0x90
[  116.654101][ T3887]  ? xskq_create+0xdb/0x2a0
[  116.654130][ T3887]  xskq_create+0xdb/0x2a0
[  116.654160][ T3887]  xsk_init_queue+0xb6/0x120
[  116.654187][ T3887]  xsk_setsockopt+0x43f/0x6f0
[  116.654215][ T3887]  ? __cfi_xsk_setsockopt+0x10/0x10
[  116.654243][ T3887]  ? do_futex+0x309/0x500
[  116.654271][ T3887]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  116.654290][ T3887]  ? security_socket_setsockopt+0x33/0xd0
[  116.654315][ T3887]  ? __cfi_xsk_setsockopt+0x10/0x10
[  116.654343][ T3887]  do_sock_setsockopt+0x26a/0x400
[  116.654384][ T3887]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  116.654412][ T3887]  __x64_sys_setsockopt+0x1b8/0x250
[  116.654445][ T3887]  x64_sys_call+0x2adc/0x2ee0
[  116.654468][ T3887]  do_syscall_64+0x58/0xf0
[  116.654493][ T3887]  ? clear_bhb_loop+0x35/0x90
[  116.654520][ T3887]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.654546][ T3887] RIP: 0033:0x7f031e78e929
[  116.654561][ T3887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.654577][ T3887] RSP: 002b:00007f031f567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.654597][ T3887] RAX: ffffffffffffffda RBX: 00007f031e9b5fa0 RCX: 00007f031e78e929
[  116.654611][ T3887] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  116.654623][ T3887] RBP: 00007f031e810b39 R08: 0000000000000004 R09: 0000000000000000
[  116.654635][ T3887] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  116.654647][ T3887] R13: 0000000000000000 R14: 00007f031e9b5fa0 R15: 00007ffeb97da268
[  116.654661][ T3887]  </TASK>
[  116.654705][ T3887] Mem-Info:
[  116.965015][ T3887] active_anon:6665 inactive_anon:6 isolated_anon:0
[  116.965015][ T3887]  active_file:12648 inactive_file:11493 isolated_file:0
[  116.965015][ T3887]  unevictable:0 dirty:33 writeback:0
[  116.965015][ T3887]  slab_reclaimable:4965 slab_unreclaimable:71001
[  116.965015][ T3887]  mapped:24434 shmem:213 pagetables:969
[  116.965015][ T3887]  sec_pagetables:0 bounce:0
[  116.965015][ T3887]  kernel_misc_reclaimable:0
[  116.965015][ T3887]  free:1524641 free_pcp:2707 free_cma:0
[  117.009874][ T3887] Node 0 active_anon:26660kB inactive_anon:24kB active_file:50592kB inactive_file:45972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97736kB dirty:132kB writeback:0kB shmem:852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4752kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no
[  117.041673][ T3887] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB
[  117.071824][ T3887] lowmem_reserve[]: 0 3921 3921
[  117.076749][ T3887] Normal free:3140888kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26660kB inactive_anon:24kB active_file:50592kB inactive_file:45972kB unevictable:0kB writepending:132kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3020kB local_pcp:2828kB free_cma:0kB
[  117.108268][ T3887] lowmem_reserve[]: 0 0 0
[  117.112619][ T3887] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  117.128057][ T3887] Normal: 535*4kB (UME) 370*8kB (UME) 1219*16kB (UME) 865*32kB (UME) 711*64kB (UME) 182*128kB (UME) 38*256kB (UME) 21*512kB (UME) 9*1024kB (UME) 6*2048kB (UME) 727*4096kB (UM) = 3140860kB
[  117.146761][ T3887] 24380 total pagecache pages
[  117.151475][ T3887] 30 pages in swap cache
[  117.155732][ T3887] Free swap  = 124460kB
[  117.159890][ T3887] Total swap = 124996kB
[  117.164028][ T3887] 2097051 pages RAM
[  117.167875][ T3887] 0 pages HighMem/MovableOnly
[  117.172552][ T3887] 351520 pages reserved
[  117.176711][ T3887] 0 pages cma reserved
[  117.182384][ T3887] Memory allocations:
[  117.186478][ T3887]          0 B        0 init/main.c:1370 func:do_initcalls
[  117.193710][ T3887]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  117.201788][ T3887]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  117.209433][ T3887]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  117.217348][ T3887]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  117.225244][ T3887]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  117.233846][ T3887]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  117.241771][ T3887]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  117.249682][ T3887]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  117.257598][ T3887]          0 B        0 init/initramfs.c:101 func:find_link
[  117.295832][  T540] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  117.485015][ T3907] sock: sock_timestamping_bind_phc: sock not bind to device
[  117.532396][ T3910] fuse: Unknown parameter '0x0000000000000005'
[  117.566785][ T3916] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1202'.
[  117.575795][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  117.727821][  T306] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  117.880969][  T306] usb 3-1: not running at top speed; connect to a high speed hub
[  117.890195][  T306] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 18502, setting to 64
[  117.901233][  T306] usb 3-1: config 1 interface 0 has no altsetting 0
[  117.910909][  T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  117.920019][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.928003][  T306] usb 3-1: Product: 
[  117.932222][  T306] usb 3-1: Manufacturer: 켼蝻囐ጙ❙懘莽睶底㚃㈹垠毀䝽⣻⥗篽嚉븸⽯落뙮間様ퟚ靎淰⟩ἢ尀
[  117.945473][  T306] usb 3-1: SerialNumber:  
[  117.953070][ T3907] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  118.224085][ T3935] binder: Unknown parameter 'Yw'
[  118.305881][ T3945] rust_binder: Error while translating object.
[  118.305907][ T3945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  118.314052][ T3945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:200
[  118.376304][  T306] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  118.400133][  T306] usb 3-1: USB disconnect, device number 39
[  118.468914][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.480467][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.480727][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.491509][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.495400][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.502297][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.508627][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.515531][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.521832][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.528728][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.535049][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.541956][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.548831][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.556322][ T3957] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  118.562272][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.570462][ T3957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  118.584640][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.590412][ T3957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:722
[  118.597184][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.606749][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.622071][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.622380][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.636625][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.637707][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.644608][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.650912][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.657798][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.664617][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.671062][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.677909][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.687176][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.693212][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.699791][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.708123][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.715434][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.772373][ T3960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.812876][ T3959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207
[  118.859223][ T3967] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  118.905112][ T3969] binder: Bad value for 'stats'
[  119.032541][ T3973] rust_binder: Error in use_page_slow: ESRCH
[  119.032563][ T3973] rust_binder: use_range failure ESRCH
[  119.040344][ T3973] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  119.045935][ T3973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  119.053937][ T3973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:211
[  119.063922][ T3973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:211
[  119.184124][  T306] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  119.204253][  T334] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  119.324807][ T3990] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  119.376045][  T334] usb 3-1: no configurations
[  119.380709][  T334] usb 3-1: can't read configurations, error -22
[  119.387053][  T306] usb 4-1: Using ep0 maxpacket: 16
[  119.407498][  T306] usb 4-1: config 0 has no interfaces?
[  119.418540][  T306] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  119.428073][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.436135][  T306] usb 4-1: Product: syz
[  119.440528][  T306] usb 4-1: Manufacturer: syz
[  119.445199][  T306] usb 4-1: SerialNumber: syz
[  119.451804][  T306] usb 4-1: config 0 descriptor??
[  119.535829][  T334] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  119.625911][   T64] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  119.696820][  T334] usb 3-1: no configurations
[  119.701482][  T334] usb 3-1: can't read configurations, error -22
[  119.710074][  T334] usb usb3-port1: attempt power cycle
[  119.798888][   T64] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  119.806322][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  119.817934][   T64] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.830225][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  119.841922][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  119.853859][  T355] usb 4-1: USB disconnect, device number 28
[  119.862103][   T64] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  119.876921][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  119.896679][   T64] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.911454][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  119.923097][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  119.936137][   T64] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  119.944562][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  119.955948][   T64] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  119.968209][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  119.979907][   T64] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  119.996787][   T64] usb 5-1: string descriptor 0 read error: -22
[  120.003437][   T64] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  120.012519][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.047597][  T334] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  120.069483][  T334] usb 3-1: no configurations
[  120.080142][  T334] usb 3-1: can't read configurations, error -22
[  120.228329][  T334] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  120.231151][   T64] usb 5-1: USB disconnect, device number 10
[  120.250158][  T334] usb 3-1: no configurations
[  120.254800][  T334] usb 3-1: can't read configurations, error -22
[  120.262348][  T334] usb usb3-port1: unable to enumerate USB device
[  120.440764][ T4022] fuse: Bad value for 'fd'
[  120.611534][ T4031] rust_binder: inc_ref_done called when no active inc_refs
[  121.081905][   T36] kauditd_printk_skb: 960 callbacks suppressed
[  121.081930][   T36] audit: type=1400 audit(1750636993.698:14247): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.141727][   T64] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  121.149900][   T36] audit: type=1400 audit(1750636993.758:14248): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.175004][   T36] audit: type=1400 audit(1750636993.758:14249): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.200037][   T36] audit: type=1400 audit(1750636993.798:14250): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.242515][   T36] audit: type=1400 audit(1750636993.858:14251): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.322939][   T36] audit: type=1400 audit(1750636993.937:14252): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.325651][   T64] usb 5-1: unable to get BOS descriptor or descriptor too short
[  121.348035][   T36] audit: type=1400 audit(1750636993.937:14253): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.357296][   T64] usb 5-1: not running at top speed; connect to a high speed hub
[  121.380604][   T36] audit: type=1400 audit(1750636993.937:14254): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.392166][   T64] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  121.413647][   T36] audit: type=1400 audit(1750636993.937:14255): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.425746][   T64] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.450051][   T36] audit: type=1400 audit(1750636993.937:14256): avc:  denied  { ioctl } for  pid=4054 comm="syz.4.1245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.463981][   T64] usb 5-1: config 1 interface 0 has no altsetting 0
[  121.496981][   T64] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  121.506043][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.514126][   T64] usb 5-1: Product: syz
[  121.518314][   T64] usb 5-1: Manufacturer: syz
[  121.522940][   T64] usb 5-1: SerialNumber: syz
[  121.538103][ T4055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  121.614567][ T4061] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1247'.
[  121.625414][ T4061] binder: Bad value for 'max'
[  121.757518][ T4055] rust_binder: Write failure EINVAL in pid:229
[  121.762595][   T64] usbhid 5-1:1.0: can't add hid device: -71
[  121.782474][   T64] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  121.793867][   T64] usb 5-1: USB disconnect, device number 11
[  121.900616][ T4083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764
[  122.361220][ T4113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.398276][ T4113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.459986][ T4118] SELinux: security_context_str_to_sid () failed with errno=-22
[  122.469337][ T4083] wg2: entered promiscuous mode
[  122.486358][ T4083] wg2: entered allmulticast mode
[  122.596821][  T334] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  122.742580][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'.
[  122.760743][  T334] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  122.769281][  T334] usb 5-1: config 0 has no interface number 0
[  122.775419][  T334] usb 5-1: config 0 interface 41 has no altsetting 0
[  122.786368][  T334] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  122.810656][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.819841][  T334] usb 5-1: Product: syz
[  122.824051][  T334] usb 5-1: Manufacturer: syz
[  122.834676][  T334] usb 5-1: SerialNumber: syz
[  122.843598][  T334] usb 5-1: config 0 descriptor??
[  123.057285][  T334] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  123.066901][  T334] usb 5-1: USB disconnect, device number 12
[  123.721006][ T4145] tipc: Started in network mode
[  123.733595][ T4145] tipc: Node identity 4, cluster identity 4711
[  123.739903][ T4145] tipc: Node number set to 4
[  123.921166][ T4158] fuse: Unknown parameter '����'
[  123.956436][ T4158] SELinux: failed to load policy
[  124.099299][ T4169] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.102579][ T4169] rust_binder: Error in use_page_slow: ESRCH
[  124.114831][ T4169] rust_binder: use_range failure ESRCH
[  124.121584][ T4169] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  124.128620][ T4169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  124.137411][ T4169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:782
[  124.278280][ T4179] incfs: Error accessing: ./file0.
[  124.292567][ T4179] incfs: mount failed -20
[  124.328213][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'.
[  124.763521][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  124.769680][  T540] Bluetooth: hci0: command 0x1003 tx timeout
[  124.803891][ T4186] binder: Bad value for 'max'
[  124.863681][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  125.042488][ T4209] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  125.280305][ T4217] rust_binder: Error while translating object.
[  125.280342][ T4217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  125.287410][ T4217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:702
[  125.716207][  T334] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  125.879430][  T334] usb 3-1: unable to get BOS descriptor or descriptor too short
[  125.887754][  T334] usb 3-1: not running at top speed; connect to a high speed hub
[  125.897221][  T334] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.910071][  T334] usb 3-1: config 1 interface 0 has no altsetting 0
[  125.922877][  T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  125.931929][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.939926][  T334] usb 3-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡
[  125.946698][  T334] usb 3-1: SerialNumber: syz
[  126.159788][   T36] kauditd_printk_skb: 717 callbacks suppressed
[  126.159805][   T36] audit: type=1400 audit(1750636998.762:14974): avc:  denied  { create } for  pid=4227 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.163521][ T4228] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  126.166052][   T36] audit: type=1400 audit(1750636998.762:14975): avc:  denied  { create } for  pid=4227 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.213788][   T36] audit: type=1400 audit(1750636998.762:14976): avc:  denied  { write } for  pid=4227 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.221794][  T334] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[  126.238020][   T36] audit: type=1400 audit(1750636998.762:14977): avc:  denied  { shutdown } for  pid=4227 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.258174][  T334] usb 3-1: USB disconnect, device number 44
[  126.272773][  T334] usblp0: removed
[  126.276565][   T36] audit: type=1400 audit(1750636998.762:14978): avc:  denied  { mounton } for  pid=4227 comm="syz.2.1304" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  126.299789][   T36] audit: type=1400 audit(1750636998.792:14979): avc:  denied  { read write } for  pid=4227 comm="syz.2.1304" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  126.324459][   T36] audit: type=1400 audit(1750636998.792:14980): avc:  denied  { read write open } for  pid=4227 comm="syz.2.1304" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  126.355441][   T36] audit: type=1400 audit(1750636998.792:14981): avc:  denied  { ioctl } for  pid=4227 comm="syz.2.1304" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  126.387302][   T36] audit: type=1400 audit(1750636998.982:14982): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  126.433449][   T36] audit: type=1400 audit(1750636999.012:14983): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  126.530779][ T4238] overlayfs: failed to resolve './file0': -2
[  126.551089][ T4243] rust_binder: Error while translating object.
[  126.551114][ T4243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  126.557338][ T4243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261
[  126.625378][ T4246] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.742465][ T4252] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.690844][ T4290] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.699234][ T4290] rust_binder: Error in use_page_slow: ESRCH
[  127.725757][ T4290] rust_binder: use_range failure ESRCH
[  127.732364][ T4290] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  127.737965][ T4290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  127.747017][ T4290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:814
[  128.555100][ T4344] rust_binder: Write failure EINVAL in pid:817
[  128.588988][ T4347] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.649322][ T4349] rust_binder: Error in use_page_slow: ESRCH
[  128.655911][ T4349] rust_binder: use_range failure ESRCH
[  128.661915][ T4349] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  128.667430][ T4349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  128.675362][ T4349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:819
[  129.655687][  T356] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  129.664081][ T4367] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.685111][ T4367] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1348'.
[  129.702161][ T4367] rust_binder: Error in use_page_slow: ESRCH
[  129.702177][ T4367] rust_binder: use_range failure ESRCH
[  129.708237][ T4367] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  129.713722][ T4367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  129.721757][ T4367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:830
[  129.820721][  T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  129.838452][ T4372] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.854620][  T356] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  129.887538][  T356] usb 3-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00
[  129.907340][  T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.924147][  T356] usb 3-1: config 0 descriptor??
[  129.935517][ T4357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  129.950783][ T4385] binder: Unknown parameter '00000000000000000000006'
[  130.018119][ T4395] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  130.304365][ T4418] rust_binder: Write failure EINVAL in pid:276
[  130.383927][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.397538][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.404942][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.412810][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.421888][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.435356][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.444076][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.452519][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.461594][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.469400][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.476797][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.482322][ T4427] syzkaller0: entered promiscuous mode
[  130.485725][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.489720][ T4427] syzkaller0: entered allmulticast mode
[  130.498325][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.510806][  T334] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  130.518455][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.526325][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.540255][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.548004][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.555412][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.562831][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.570446][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.582231][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.589707][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.597119][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.607848][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.617824][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.625234][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.647715][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.655124][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.683510][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.697799][  T334] usb 4-1: Using ep0 maxpacket: 16
[  130.702993][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.717914][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.725474][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.747910][  T334] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  130.756629][  T334] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  130.766758][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.777854][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.785754][  T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.795145][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.803092][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.819898][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.830142][  T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.843586][  T356] hid-generic 0003:1477:1024.000E: unknown main item tag 0x0
[  130.851049][  T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.859574][  T334] usb 4-1: Product: syz
[  130.863914][  T356] hid-generic 0003:1477:1024.000E: hidraw0: USB HID v0.00 Device [HID 1477:1024] on usb-dummy_hcd.2-1/input0
[  130.875549][  T334] usb 4-1: Manufacturer: syz
[  130.881859][  T334] usb 4-1: SerialNumber: syz
[  130.886618][  T356] usb 3-1: USB disconnect, device number 45
[  130.951189][ T4438] overlayfs: overlapping lowerdir path
[  131.133407][  T334] usb 4-1: 0:2 : does not exist
[  131.166711][  T334] usb 4-1: USB disconnect, device number 29
[  131.178749][   T36] kauditd_printk_skb: 860 callbacks suppressed
[  131.178764][   T36] audit: type=1400 audit(1750637003.761:15844): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.219208][   T36] audit: type=1400 audit(1750637003.761:15845): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.228031][ T4448] audit: audit_backlog=65 > audit_backlog_limit=64
[  131.241641][   T36] audit: type=1400 audit(1750637003.761:15846): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.258278][ T4450] fido_id[4450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  131.273382][   T36] audit: type=1400 audit(1750637003.761:15847): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.282977][ T4448] audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64
[  131.315483][   T36] audit: type=1400 audit(1750637003.761:15848): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.315705][ T4448] audit: backlog limit exceeded
[  131.337652][   T36] audit: type=1400 audit(1750637003.761:15849): avc:  denied  { setopt } for  pid=4445 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.395099][ T2968] audit: audit_backlog=65 > audit_backlog_limit=64
[  131.410018][ T1426] udevd[1426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  131.622374][ T4469] rust_binder: Write failure EINVAL in pid:773
[  131.622783][ T4469] rust_binder: Read failure Err(EAGAIN) in pid:773
[  131.693121][ T4473] rust_binder: Write failure EINVAL in pid:312
[  132.581419][ T4512] 9pnet_fd: p9_fd_create_tcp (4512): problem connecting socket to 127.0.0.1
[  132.795156][ T4519] binder: Unknown parameter '?��~��OD?�'
[  132.965041][ T4527] netlink: 'syz.2.1398': attribute type 4 has an invalid length.
[  133.034626][ T4538] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.041226][ T4538] rust_binder: Error in use_page_slow: ESRCH
[  133.047727][ T4538] rust_binder: use_range failure ESRCH
[  133.053763][ T4538] rust_binder: Failed to allocate buffer. len:152, is_oneway:true
[  133.059233][ T4538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  133.067082][ T4538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:877
[  133.212433][   T64] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  133.392494][   T64] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.410156][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.421621][ T4555] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  133.421651][ T4555] rust_binder: Error while translating object.
[  133.432532][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  133.461287][ T4555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  133.461320][ T4555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:884
[  133.470837][   T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  133.502945][   T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.518314][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  133.527258][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.544483][   T64] usb 3-1: config 0 descriptor??
[  133.702537][ T4585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1416'.
[  133.962047][   T64] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max
[  133.973135][ T4612] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.979082][   T64] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  134.007737][   T64] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  134.165547][ T4612] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  134.202093][ T4612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  134.273811][ T4612] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  134.816407][ T4643] rust_binder: Write failure EFAULT in pid:901
[  135.068745][ T4661] fuse: Bad value for 'group_id'
[  135.079935][ T4661] fuse: Bad value for 'group_id'
[  135.155198][ T4665] 9p: Unknown access argument �: -22
[  135.187075][ T4665] overlayfs: failed to clone upperpath
[  135.212120][ T4665] overlayfs: failed to clone upperpath
[  135.378026][ T4659] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.500880][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.514638][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.522982][ T4669] bridge_slave_0: entered allmulticast mode
[  135.529968][ T4669] bridge_slave_0: entered promiscuous mode
[  135.537960][  T304] bridge_slave_1: left allmulticast mode
[  135.543721][  T304] bridge_slave_1: left promiscuous mode
[  135.550508][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.560046][  T304] bridge_slave_0: left allmulticast mode
[  135.565750][  T304] bridge_slave_0: left promiscuous mode
[  135.572170][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.642488][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.649667][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.658118][ T4669] bridge_slave_1: entered allmulticast mode
[  135.664424][ T4669] bridge_slave_1: entered promiscuous mode
[  135.682516][  T304] tipc: Disabling bearer <udp:s>
[  135.693861][  T304] tipc: Left network mode
[  135.708501][  T304] veth1_macvtap: left promiscuous mode
[  135.722899][  T304] veth0_vlan: left promiscuous mode
[  135.945341][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.952446][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.959780][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.966850][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.077206][ T1649] usb 3-1: USB disconnect, device number 46
[  136.202529][   T36] kauditd_printk_skb: 756 callbacks suppressed
[  136.202545][   T36] audit: type=1400 audit(1750637008.783:16604): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.242743][   T36] audit: type=1400 audit(1750637008.793:16605): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.246261][ T4669] veth0_vlan: entered promiscuous mode
[  136.276643][   T36] audit: type=1400 audit(1750637008.793:16606): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.303001][   T36] audit: type=1400 audit(1750637008.793:16607): avc:  denied  { ioctl } for  pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.342034][   T36] audit: type=1400 audit(1750637008.813:16608): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.358618][ T4669] veth1_macvtap: entered promiscuous mode
[  136.375182][   T36] audit: type=1400 audit(1750637008.813:16609): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.398966][   T36] audit: type=1400 audit(1750637008.863:16610): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.420363][   T36] audit: type=1400 audit(1750637008.863:16611): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.444101][   T36] audit: type=1400 audit(1750637008.863:16612): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.465462][   T36] audit: type=1400 audit(1750637008.863:16613): avc:  denied  { sys_module } for  pid=4669 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.567491][ T1649] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  136.741448][ T1649] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  136.766725][ T1649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  136.777784][ T1649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  136.787538][ T1649] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  136.800467][ T1649] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  136.809516][ T1649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.819221][ T1649] usb 4-1: config 0 descriptor??
[  137.236410][ T1649] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  137.245573][ T1649] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  137.256398][ T1649] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  137.500336][ T4690] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  137.501726][ T4690] rust_binder: Error in use_page_slow: ESRCH
[  137.508160][ T4690] rust_binder: use_range failure ESRCH
[  137.514340][ T4690] rust_binder: Failed to allocate buffer. len:168, is_oneway:false
[  137.519858][ T4690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  137.527758][ T4690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:913
[  137.569433][  T334] usb 4-1: USB disconnect, device number 30
[  138.151395][ T4746] rust_binder: Write failure EFAULT in pid:919
[  138.179668][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'.
[  138.334193][ T4752] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  138.334727][ T4753] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  139.203446][ T4789] binder: Unknown parameter '00000000000000000007���E'
[  139.273325][ T4794] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q��k�p
[  139.273325][ T4794] �C<+
[  139.323364][ T4797] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  139.368529][ T4799] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  139.375374][ T4799] rust_binder: Write failure EINVAL in pid:938
[  139.429783][ T4801] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  139.671303][  T355] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  139.821445][  T355] usb 4-1: device descriptor read/64, error -71
[  139.823505][ T4805] cgroup: Need name or subsystem set
[  140.002653][ T4814] netlink: 'syz.4.1486': attribute type 6 has an invalid length.
[  140.049768][ T4816] 9pnet_fd: Insufficient options for proto=fd
[  140.081715][  T355] usb 4-1: device descriptor read/64, error -71
[  140.292702][ T4836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  140.292731][ T4836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19
[  140.321987][  T355] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  140.462687][ T4850] 9pnet_fd: Insufficient options for proto=fd
[  140.470944][ T4850] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  140.480325][  T355] usb 4-1: device descriptor read/64, error -71
[  140.722438][  T355] usb 4-1: device descriptor read/64, error -71
[  140.833304][  T355] usb usb4-port1: attempt power cycle
[  141.172866][  T355] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  141.194990][  T355] usb 4-1: device descriptor read/8, error -71
[  141.323634][   T36] kauditd_printk_skb: 608 callbacks suppressed
[  141.323651][   T36] audit: type=1400 audit(1750637013.897:17222): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.354946][   T36] audit: type=1400 audit(1750637013.897:17223): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.380228][   T36] audit: type=1400 audit(1750637013.957:17224): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.405824][   T36] audit: type=1400 audit(1750637013.987:17225): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.430822][  T355] usb 4-1: device descriptor read/8, error -71
[  141.431206][   T36] audit: type=1400 audit(1750637013.987:17226): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.462421][   T36] audit: type=1400 audit(1750637014.007:17227): avc:  denied  { ioctl } for  pid=4800 comm="syz.3.1481" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.504794][   T36] audit: type=1400 audit(1750637014.086:17228): avc:  denied  { create } for  pid=4870 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.524905][   T36] audit: type=1400 audit(1750637014.086:17229): avc:  denied  { setopt } for  pid=4870 comm="syz.4.1507" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.546212][   T36] audit: type=1400 audit(1750637014.106:17230): avc:  denied  { setopt } for  pid=4870 comm="syz.4.1507" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.567894][   T36] audit: type=1400 audit(1750637014.126:17231): avc:  denied  { mounton } for  pid=4870 comm="syz.4.1507" path="/158/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  141.666378][ T4888] lo: entered promiscuous mode
[  141.671866][ T4887] lo: left promiscuous mode
[  141.693411][  T355] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  141.716876][  T355] usb 4-1: device descriptor read/8, error -71
[  141.845813][  T355] usb 4-1: device descriptor read/8, error -71
[  141.953708][  T355] usb usb4-port1: unable to enumerate USB device
[  142.166984][ T4914] SELinux: security_context_str_to_sid () failed with errno=-22
[  142.265065][ T4921] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1522'.
[  142.354595][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.506345][ T4927] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.506830][ T4927] rust_binder: Read failure Err(EAGAIN) in pid:944
[  142.532055][ T4929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:825
[  142.586864][ T4927] rust_binder: Error in use_page_slow: ESRCH
[  142.610726][ T4927] rust_binder: use_range failure ESRCH
[  142.628487][ T4927] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  142.633975][ T4927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  142.641868][ T4927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:944
[  142.844460][  T355] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  143.004592][  T355] usb 3-1: Using ep0 maxpacket: 32
[  143.011696][  T355] usb 3-1: config index 0 descriptor too short (expected 124, got 36)
[  143.019907][  T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  143.029569][  T355] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  143.039267][  T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.049073][  T355] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  143.058824][  T355] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  143.067877][  T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.079077][  T355] usb 3-1: config 0 descriptor??
[  143.211624][ T4942] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  143.240224][ T4944] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.290109][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.303171][ T4945] rust_binder: Error in use_page_slow: ESRCH
[  143.304916][ T4945] rust_binder: use_range failure ESRCH
[  143.307337][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.314020][ T4945] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  143.325865][ T4945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  143.334871][ T4945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:952
[  144.021637][  T355] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  144.042656][  T355] usb 3-1: USB disconnect, device number 47
[  144.050932][  T355] usblp0: removed
[  144.150329][ T4990] input: syz0 as /devices/virtual/input/input22
[  144.679943][ T5008] rust_binder: Error while translating object.
[  144.679977][ T5008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  144.686262][ T5008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:842
[  145.256647][  T356] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  145.418609][  T356] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  145.430199][  T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  145.441239][  T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  145.451027][  T356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.463935][  T356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.473018][  T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.482647][  T356] usb 3-1: config 0 descriptor??
[  145.899816][  T356] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max
[  145.909452][  T356] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  145.920933][  T356] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  146.411507][   T36] kauditd_printk_skb: 575 callbacks suppressed
[  146.411524][   T36] audit: type=1400 audit(1750637018.982:17807): avc:  denied  { ioctl } for  pid=5025 comm="syz.2.1559" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  146.443940][   T36] audit: type=1400 audit(1750637019.012:17808): avc:  denied  { name_bind } for  pid=5070 comm="syz.4.1574" src=3615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  146.466373][   T36] audit: type=1400 audit(1750637019.012:17809): avc:  denied  { create } for  pid=5070 comm="syz.4.1574" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  146.488788][   T36] audit: type=1400 audit(1750637019.012:17810): avc:  denied  { ioctl } for  pid=5070 comm="syz.4.1574" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33597 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  146.512639][ T5073] @: renamed from vlan0 (while UP)
[  146.515973][   T36] audit: type=1400 audit(1750637019.012:17811): avc:  denied  { ioctl } for  pid=5070 comm="syz.4.1574" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33597 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  146.547416][   T36] audit: type=1400 audit(1750637019.012:17812): avc:  denied  { ioctl } for  pid=5070 comm="syz.4.1574" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33597 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  146.580146][   T36] audit: type=1400 audit(1750637019.032:17813): avc:  denied  { create } for  pid=5070 comm="syz.4.1574" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  146.625359][   T36] audit: type=1400 audit(1750637019.032:17814): avc:  denied  { create } for  pid=5070 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  146.648911][   T36] audit: type=1400 audit(1750637019.032:17815): avc:  denied  { write } for  pid=5070 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  146.684471][   T36] audit: type=1400 audit(1750637019.032:17816): avc:  denied  { read } for  pid=5070 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  147.512809][ T5119] rust_binder: Error while translating object.
[  147.512852][ T5119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  147.519835][ T5119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:51
[  147.795635][ T5130] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  147.811746][ T5130] rust_binder: Write failure EINVAL in pid:857
[  147.988772][  T356] usb 3-1: USB disconnect, device number 48
[  148.290384][ T5138] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.291624][ T5138] rust_binder: Error in use_page_slow: ESRCH
[  148.298128][ T5138] rust_binder: use_range failure ESRCH
[  148.304142][ T5138] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  148.309639][ T5138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  148.317618][ T5138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:971
[  148.351577][ T5140] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  148.394167][ T5142] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.406495][ T5142] rust_binder: Write failure EINVAL in pid:975
[  148.531649][ T5146] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.662404][ T5150] rust_binder: Write failure EINVAL in pid:867
[  148.669809][ T5150] rust_binder: Error while translating object.
[  148.676336][ T5150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  148.683670][ T5150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:867
[  148.736784][ T5154] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.751241][ T5153] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  148.753560][ T5154] rust_binder: Error in use_page_slow: ESRCH
[  148.765718][ T5154] rust_binder: use_range failure ESRCH
[  148.773415][ T5154] rust_binder: Failed to allocate buffer. len:168, is_oneway:true
[  148.778962][ T5154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  148.786901][ T5154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:981
[  148.889839][ T5162] fuse: Bad value for 'fd'
[  149.181202][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  150.243503][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'.
[  150.759512][ T5219] fuse: Unknown parameter 'gro����00000000000000000000'
[  150.808904][ T5221] rust_binder: Write failure EFAULT in pid:61
[  150.818955][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.857813][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.869051][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.877514][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.989503][ T5231] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  151.001369][ T5231] overlayfs: missing 'lowerdir'
[  151.048756][ T5235] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1636'.
[  151.210287][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  151.314590][ T5249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  151.314620][ T5249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:885
[  151.421030][   T36] kauditd_printk_skb: 942 callbacks suppressed
[  151.421049][   T36] audit: type=1400 audit(1750637023.989:18759): avc:  denied  { read write } for  pid=5252 comm="syz.2.1642" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  151.459773][   T36] audit: type=1400 audit(1750637024.019:18760): avc:  denied  { read open } for  pid=5252 comm="syz.2.1642" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  151.483456][   T36] audit: type=1400 audit(1750637024.019:18761): avc:  denied  { create } for  pid=5252 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  151.503971][   T36] audit: type=1400 audit(1750637024.019:18762): avc:  denied  { mount } for  pid=5252 comm="syz.2.1642" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  151.526365][   T36] audit: type=1400 audit(1750637024.019:18763): avc:  denied  { map } for  pid=5252 comm="syz.2.1642" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  151.554667][   T36] audit: type=1400 audit(1750637024.019:18764): avc:  denied  { read } for  pid=5252 comm="syz.2.1642" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  151.578098][   T36] audit: type=1400 audit(1750637024.079:18765): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  151.602308][   T36] audit: type=1400 audit(1750637024.079:18766): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  151.628408][   T36] audit: type=1400 audit(1750637024.079:18767): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  151.658862][ T5260] can0: slcan on ptm0.
[  151.687038][   T36] audit: type=1400 audit(1750637024.119:18768): avc:  denied  { read write } for  pid=5254 comm="syz.2.1643" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  151.737112][ T5261] can0 (unregistered): slcan off ptm0.
[  152.637087][ T5325] fuse: Unknown parameter '0177777777777777777777718446744073709551615'
[  152.697229][ T5329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  153.035981][ T5350] rust_binder: Write failure EFAULT in pid:918
[  153.046971][ T5351] rust_binder: Write failure EFAULT in pid:918
[  153.375668][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.389087][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.641489][  T334] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  153.720377][ T5402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'.
[  153.793540][  T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.804543][  T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.814401][  T334] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  153.827015][  T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.836880][  T334] usb 3-1: config 0 descriptor??
[  154.252059][  T334] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  154.267895][  T334] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  154.290113][ T5425] overlayfs: failed to clone upperpath
[  154.461530][  T334] cp2112 0003:10C4:EA90.0012: Part Number: 0xBD Device Version: 0x4B
[  154.603792][ T5455] binder: Unknown parameter 'sdats'
[  154.691183][ T5461] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  154.695349][ T5459] rust_binder: Write failure EINVAL in pid:103
[  154.739901][ T5463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1707'.
[  154.759402][ T5463] raw_sendmsg: syz.4.1707 forgot to set AF_INET. Fix it!
[  154.782444][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'.
[  154.797112][ T5465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105
[  155.015612][ T5474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1711'.
[  155.073160][  T334] cp2112 0003:10C4:EA90.0012: error reading lock byte: -32
[  155.086690][  T334] usb 3-1: USB disconnect, device number 49
[  155.183214][ T5475] fido_id[5475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  155.596045][ T5483] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1715'.
[  155.996707][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'.
[  156.022466][  T334] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  156.182510][  T334] usb 3-1: Using ep0 maxpacket: 16
[  156.204392][  T334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.222523][  T334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.253740][  T334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.275774][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.285822][  T334] usb 3-1: Product: syz
[  156.290007][  T334] usb 3-1: Manufacturer: syz
[  156.302578][  T334] usb 3-1: SerialNumber: syz
[  156.433164][   T36] kauditd_printk_skb: 1083 callbacks suppressed
[  156.433183][   T36] audit: type=1400 audit(1750637028.997:19852): avc:  denied  { create } for  pid=5536 comm="syz.4.1734" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.462239][   T36] audit: type=1400 audit(1750637028.997:19853): avc:  denied  { ioctl } for  pid=5536 comm="syz.4.1734" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34708 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.488490][   T36] audit: type=1400 audit(1750637028.997:19854): avc:  denied  { execmem } for  pid=5536 comm="syz.4.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  156.498980][ T5541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5541 comm=syz.4.1736
[  156.507891][   T36] audit: type=1400 audit(1750637028.997:19855): avc:  denied  { ioctl } for  pid=5536 comm="syz.4.1734" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34708 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.531353][    T9] usb 3-1: USB disconnect, device number 50
[  156.549951][   T36] audit: type=1400 audit(1750637029.027:19856): avc:  denied  { create } for  pid=5537 comm="syz.3.1735" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.579819][   T36] audit: type=1400 audit(1750637029.027:19857): avc:  denied  { ioctl } for  pid=5537 comm="syz.3.1735" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35310 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.606062][   T36] audit: type=1400 audit(1750637029.027:19858): avc:  denied  { mounton } for  pid=5537 comm="syz.3.1735" path="/352/file0" dev="tmpfs" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  156.628865][   T36] audit: type=1400 audit(1750637029.057:19859): avc:  denied  { create } for  pid=5540 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  156.648708][   T36] audit: type=1400 audit(1750637029.057:19860): avc:  denied  { create } for  pid=5540 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.669251][   T36] audit: type=1400 audit(1750637029.057:19861): avc:  denied  { write } for  pid=5540 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.716396][ T5549] overlayfs: failed to clone upperpath
[  157.300730][ T5563] overlayfs: failed to clone upperpath
[  157.346791][ T5559] rust_binder: Read failure Err(EFAULT) in pid:946
[  158.368567][ T5654] netlink: 'syz.2.1766': attribute type 4 has an invalid length.
[  158.383305][ T5654] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1766'.
[  158.411824][ T5655] fuse: Bad value for 'user_id'
[  158.423915][ T5655] fuse: Bad value for 'user_id'
[  158.672879][ T5699] overlayfs: failed to clone upperpath
[  159.039621][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'.
[  159.121373][ T5717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:118
[  159.572822][ T5747] rust_kernel: panicked at drivers/android/binder/node.rs:877:13:
[  159.572822][ T5747] attempt to subtract with overflow
[  159.603890][ T5747] ------------[ cut here ]------------
[  159.609399][ T5747] kernel BUG at rust/helpers/bug.c:7!
[  159.624026][ T5747] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  159.631009][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz.2.1795 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  159.644482][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  159.654553][ T5747] RIP: 0010:rust_helper_BUG+0x8/0x10
[  159.659870][ T5747] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 95 18 e9 b1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 df dc a0 3d 90 90 90 90 90 90 90 90 90
[  159.679517][ T5747] RSP: 0018:ffffc900046c5a90 EFLAGS: 00010246
[  159.685603][ T5747] RAX: 0000000000000061 RBX: 1ffff920008d8b54 RCX: 068637096c5bf700
[  159.693608][ T5747] RDX: ffffc90002e87000 RSI: 000000000000557e RDI: 000000000000557f
[  159.701604][ T5747] RBP: ffffc900046c5a90 R08: ffffc900046c5787 R09: 1ffff920008d8af0
[  159.709598][ T5747] R10: dffffc0000000000 R11: fffff520008d8af1 R12: 0000000000000000
[  159.717595][ T5747] R13: dffffc0000000000 R14: ffffc900046c5ac0 R15: ffffc900046c5af0
[  159.725593][ T5747] FS:  00007f031f5466c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  159.734546][ T5747] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.741152][ T5747] CR2: 00007f031f545f98 CR3: 000000013101a000 CR4: 00000000003526b0
[  159.749151][ T5747] DR0: 0000000000000000 DR1: 0000000000000099 DR2: 0000000000000000
[  159.757147][ T5747] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  159.765146][ T5747] Call Trace:
[  159.768445][ T5747]  <TASK>
[  159.771392][ T5747]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  159.778884][ T5747]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  159.786905][ T5747]  ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810
[  159.797188][ T5747]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  159.810777][ T5747]  ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  159.821408][ T5747]  ? __kasan_check_write+0x18/0x20
[  159.826539][ T5747]  ? _raw_spin_lock+0x8c/0x120
[  159.831326][ T5747]  ? __cfi__raw_spin_lock+0x10/0x10
[  159.836549][ T5747]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  159.843790][ T5747]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  159.851719][ T5747]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[  159.861664][ T5747]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[  159.872285][ T5747]  _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860
[  159.882034][ T5747]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10
[  159.892140][ T5747]  ? __kasan_check_write+0x18/0x20
[  159.897297][ T5747]  ? _raw_spin_lock+0x8c/0x120
[  159.902095][ T5747]  ? __cfi__raw_spin_lock+0x10/0x10
[  159.907331][ T5747]  ? __kasan_check_write+0x18/0x20
[  159.912472][ T5747]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20
[  159.922062][ T5747]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[  159.932019][ T5747]  ? is_bpf_text_address+0x17b/0x1a0
[  159.937341][ T5747]  ? kernel_text_address+0xa9/0xe0
[  159.942481][ T5747]  ? __kernel_text_address+0x11/0x40
[  159.947792][ T5747]  ? unwind_get_return_address+0x51/0x90
[  159.953454][ T5747]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  159.959636][ T5747]  ? arch_stack_walk+0x10b/0x170
[  159.964607][ T5747]  ? stack_trace_save+0x9d/0xe0
[  159.969485][ T5747]  ? stack_depot_save_flags+0x38/0x800
[  159.974977][ T5747]  ? kasan_save_stack+0x4d/0x60
[  159.979860][ T5747]  ? kasan_save_stack+0x3e/0x60
[  159.984766][ T5747]  ? __kasan_record_aux_stack+0xb2/0xd0
[  159.990359][ T5747]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[  159.996360][ T5747]  ? __call_rcu_common+0xcc/0x6f0
[  160.001415][ T5747]  ? call_rcu+0x14/0x20
[  160.005599][ T5747]  ? __kasan_check_write+0x18/0x20
[  160.010743][ T5747]  ? _raw_spin_trylock+0xaf/0x130
[  160.015798][ T5747]  ? __cfi__raw_spin_trylock+0x10/0x10
[  160.021294][ T5747]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  160.027405][ T5747]  ? update_cfs_group+0x260/0x260
[  160.032461][ T5747]  ? is_bpf_text_address+0x17b/0x1a0
[  160.037780][ T5747]  ? cgroup_rstat_updated+0x132/0x7f0
[  160.043184][ T5747]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[  160.048933][ T5747]  ? update_curr+0x949/0xc60
[  160.053554][ T5747]  ? arch_scale_cpu_capacity+0x1c/0xb0
[  160.059046][ T5747]  ? is_bpf_text_address+0x17b/0x1a0
[  160.064369][ T5747]  ? kernel_text_address+0xa9/0xe0
[  160.069510][ T5747]  ? unwind_get_return_address+0x51/0x90
[  160.075165][ T5747]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  160.081345][ T5747]  ? arch_stack_walk+0x10b/0x170
[  160.086316][ T5747]  ? stack_depot_save_flags+0x38/0x800
[  160.091802][ T5747]  ? kasan_save_alloc_info+0x40/0x50
[  160.097123][ T5747]  ? kasan_save_track+0x4f/0x80
[  160.102003][ T5747]  ? kasan_save_track+0x3e/0x80
[  160.106903][ T5747]  ? kasan_save_alloc_info+0x40/0x50
[  160.112214][ T5747]  ? __kasan_kmalloc+0x96/0xb0
[  160.117006][ T5747]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  160.123623][ T5747]  ? krealloc_noprof+0x8d/0x130
[  160.128499][ T5747]  ? rust_helper_krealloc+0x33/0xd0
[  160.133728][ T5747]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100
[  160.143302][ T5747]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440
[  160.153830][ T5747]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20
[  160.163146][ T5747]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[  160.171855][ T5747]  ? __se_sys_ioctl+0x132/0x1b0
[  160.176735][ T5747]  ? __x64_sys_ioctl+0x7f/0xa0
[  160.181530][ T5747]  ? do_syscall_64+0x58/0xf0
[  160.186163][ T5747]  ? __kasan_kmalloc+0x96/0xb0
[  160.190961][ T5747]  ? kasan_save_alloc_info+0x40/0x50
[  160.196278][ T5747]  ? __kasan_kmalloc+0x96/0xb0
[  160.201073][ T5747]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  160.207699][ T5747]  ? __kasan_check_write+0x18/0x20
[  160.212838][ T5747]  ? _raw_spin_lock+0x8c/0x120
[  160.217632][ T5747]  ? __cfi__raw_spin_lock+0x10/0x10
[  160.222862][ T5747]  ? __asan_memset+0x39/0x50
[  160.227481][ T5747]  ? _raw_spin_unlock+0x45/0x60
[  160.232362][ T5747]  ? rust_helper_spin_unlock+0x19/0x30
[  160.237852][ T5747]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440
[  160.248391][ T5747]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[  160.251175][ T5758] overlayfs: failed to clone upperpath
[  160.259188][ T5747]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  160.259215][ T5747]  ? common_lsm_audit+0x148c/0x1860
[  160.259254][ T5747]  ? __cfi_avc_audit_post_callback+0x10/0x10
[  160.282115][ T5747]  ? slow_avc_audit+0x18d/0x1f0
[  160.286994][ T5747]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20
[  160.296132][ T5747]  ? avc_denied+0x112/0x180
[  160.300654][ T5747]  ? avc_has_extended_perms+0x895/0xdd0
[  160.306220][ T5747]  ? avc_has_extended_perms+0x91a/0xdd0
[  160.311787][ T5747]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[  160.321355][ T5747]  ? do_vfs_ioctl+0xeda/0x1e30
[  160.326142][ T5747]  ? __futex_queue+0x19a/0x340
[  160.330927][ T5747]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  160.336581][ T5747]  ? __cfi___futex_queue+0x10/0x10
[  160.341712][ T5747]  ? futex_wait_setup+0x1bc/0x260
[  160.346756][ T5747]  ? __futex_wait+0x218/0x2a0
[  160.351474][ T5747]  ? ioctl_has_perm+0x384/0x4d0
[  160.356347][ T5747]  ? has_cap_mac_admin+0xd0/0xd0
[  160.361310][ T5747]  ? futex_wake+0x63a/0x900
[  160.365850][ T5747]  ? futex_setup_timer+0xb4/0xd0
[  160.370824][ T5747]  ? futex_wait+0x288/0x540
[  160.375364][ T5747]  ? __cfi_futex_wait+0x10/0x10
[  160.380246][ T5747]  ? selinux_file_ioctl+0x6e0/0x1360
[  160.385560][ T5747]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  160.391138][ T5747]  ? do_futex+0x309/0x500
[  160.395490][ T5747]  ? __cfi_do_futex+0x10/0x10
[  160.400193][ T5747]  ? __fget_files+0x2c5/0x340
[  160.404897][ T5747]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[  160.413431][ T5747]  ? __se_sys_ioctl+0x114/0x1b0
[  160.418311][ T5747]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[  160.427454][ T5747]  __se_sys_ioctl+0x132/0x1b0
[  160.432168][ T5747]  __x64_sys_ioctl+0x7f/0xa0
[  160.436792][ T5747]  x64_sys_call+0x1878/0x2ee0
[  160.441523][ T5747]  do_syscall_64+0x58/0xf0
[  160.445971][ T5747]  ? clear_bhb_loop+0x35/0x90
[  160.450770][ T5747]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  160.456692][ T5747] RIP: 0033:0x7f031e78e929
[  160.461125][ T5747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.480753][ T5747] RSP: 002b:00007f031f546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  160.489192][ T5747] RAX: ffffffffffffffda RBX: 00007f031e9b6080 RCX: 00007f031e78e929
[  160.497194][ T5747] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  160.505187][ T5747] RBP: 00007f031e810b39 R08: 0000000000000000 R09: 0000000000000000
[  160.513177][ T5747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.521166][ T5747] R13: 0000000000000000 R14: 00007f031e9b6080 R15: 00007ffeb97da268
[  160.529171][ T5747]  </TASK>
[  160.532203][ T5747] Modules linked in:
[  160.536528][ T5747] ---[ end trace 0000000000000000 ]---
[  160.542752][ T5747] RIP: 0010:rust_helper_BUG+0x8/0x10
[  160.548171][ T5747] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 95 18 e9 b1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 df dc a0 3d 90 90 90 90 90 90 90 90 90
[  160.573979][ T5747] RSP: 0018:ffffc900046c5a90 EFLAGS: 00010246
[  160.580097][ T5747] RAX: 0000000000000061 RBX: 1ffff920008d8b54 RCX: 068637096c5bf700
[  160.594896][ T5747] RDX: ffffc90002e87000 RSI: 000000000000557e RDI: 000000000000557f
[  160.602898][ T5747] RBP: ffffc900046c5a90 R08: ffffc900046c5787 R09: 1ffff920008d8af0
[  160.621895][ T5747] R10: dffffc0000000000 R11: fffff520008d8af1 R12: 0000000000000000
[  160.658087][ T5747] R13: dffffc0000000000 R14: ffffc900046c5ac0 R15: ffffc900046c5af0
[  160.666619][ T5747] FS:  00007f031f5466c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  160.680217][ T5747] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.693988][ T5747] CR2: 00007f9a7c181178 CR3: 000000013101a000 CR4: 00000000003526b0
[  160.702048][ T5747] DR0: 0000000000000000 DR1: 0000000000000099 DR2: 0000000000000000
[  160.714025][ T5747] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  160.722038][ T5747] Kernel panic - not syncing: Fatal exception
[  160.728472][ T5747] Kernel Offset: disabled
[  160.732804][ T5747] Rebooting in 86400 seconds..