last executing test programs:

40.231515573s ago: executing program 2 (id=321):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x321a02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async, rerun: 32)
madvise(&(0x7f0000860000/0x2000)=nil, 0x2000, 0x14) (async, rerun: 32)
r1 = gettid()
wait4(r1, 0x0, 0x20000000, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

39.319388717s ago: executing program 2 (id=341):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc, {0x1b}}, 0x14}}, 0x2000c000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff004)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r0, 0x45809000)
r5 = socket$inet6(0xa, 0x2, 0x0)
setuid(0xee01)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'ip_vti0\x00', <r6=>0x0, 0x1, 0x700, 0x7, 0x4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x5b, 0x3, 0x4, [{@remote, 0x81}, {@multicast1, 0xff}, {@broadcast, 0x6}, {@multicast1, 0x3}]}]}}}}})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r8=>0x0})
sendmsg$can_raw(r7, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', <r9=>0x0, 0x8, 0x7, 0x9, 0x6, {{0x7, 0x4, 0x0, 0x2a, 0x1c, 0x64, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@end, @end, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000500)={@dev}, &(0x7f0000000580)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', <r10=>0x0, 0x40, 0x8, 0x80, 0xbb, {{0x6, 0x4, 0x3, 0xb, 0x18, 0x68, 0x0, 0x25, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'gretap0\x00', <r12=>0x0, 0x8000, 0x8000, 0x4, 0x8, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x66, 0x0, 0xd, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x1f, 0xa6, [@private=0xa010100, @remote, @broadcast, @rand_addr=0x64010100, @broadcast, @remote, @loopback]}, @noop, @timestamp_addr={0x44, 0x3c, 0x92, 0x1, 0xf, [{@local, 0xffffffff}, {@loopback, 0x9}, {@broadcast, 0x3770}, {@local, 0x7}, {@private=0xa010102, 0x6}, {@broadcast, 0x3f4}, {@loopback, 0x82}]}, @noop, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x7, 0xa, "a46ef4e8cdaac8c1"}, {0x6, 0x8, "332ceb8b190a"}, {0x7, 0x4, "d602"}, {0x7, 0xf, "7a3aa1fdd8b95814104c503d33"}]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x120, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x97711e03712f8374}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x90)
unshare(0x28000600)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

39.198024008s ago: executing program 2 (id=343):
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0)
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40)
close(r0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket(0x1d, 0x3, 0x1)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40060904000702b95fc303090588032000060204"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0)
read$char_usb(r0, &(0x7f0000000380)=""/190, 0xbe)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000))
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"])

37.931710117s ago: executing program 1 (id=360):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000f00)={0xc45d})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x66, 0x0, &(0x7f0000000100)="9a43cb80f8f5ffcfbc3b59b59a7009dff517cc3adb5717b8d1820f5515f750e285ad64244fda4f4b779d00d288c60fc9896ea6f0c0d7912db6559c45c256d68606a6e9cf352c2e292e4b0e488f534f1ab6ea91af3e18c9ea1a0e51d95541b1ae3432c3841ba7"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x5}}, 0x0}}], 0x53, 0x0, &(0x7f0000000680)="907fff223883e96d446022f68d1476228816450ef09edcd1615cbe53a42f8cd492efeb72098fc73454454ae275012b29fdf4fd3c2f1d03aaef3b9635eb831bb3854397df0112d678e1c4a5c69cf1ddd45ab5de"})
r3 = syz_usb_connect$uac1(0x6, 0xc4, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x9, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x240, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x5, 0x10, 0x0, 0x1, 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x0, 0xff, "", "dd6500"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x8, 0xbe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xb, 0x4, 0xc1, "4f5d290b739b7f59"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x4c3, 0x1, "16"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x2, 0x54, 0x7, "bf8ef2", "6ca5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x25, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0xc, 0x8, {0x7, 0x25, 0x1, 0x81, 0xfc, 0x844}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x22, 0xb, 0x79, 0x40, 0x4}, 0x63, &(0x7f0000000280)={0x5, 0xf, 0x63, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x3, 0x3, 0x7, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x8, 0xf000, 0x0, [0xc030, 0xf, 0xff3f00, 0x30, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0xc0, 0xfff9}, @ssp_cap={0x1c, 0x10, 0xa, 0xc1, 0x4, 0x7ffffff, 0xf, 0x3, [0x0, 0xc0c0, 0xff3f3f, 0xbecf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x5, 0x4}]}, 0x4, [{0x48, &(0x7f0000000300)=@string={0x48, 0x3, "d266060c9a5cfcf1f6ea888985c03650727e6f3f794ac6b33a7fce04fbba9763f5f372ed396bf271921c867dc764a7a69d7b0e0ebc3c7ed5819af46b04ce9e6db009888921ff"}}, {0x51, &(0x7f0000000400)=@string={0x51, 0x3, "2714a933b057042cd2cc2963c827c42e7706014a013b53eacead8e746caf065321037d0da29a53ccf355f972607fdfa8a3519792a2d17f365636aaddc0cb343efb20291807f05b3c59f94b073d3313"}}, {0xbf, &(0x7f0000000480)=ANY=[@ANYBLOB="bf035f58b03c030000000000000093abbf3acf87b325cd6703d636560e480e441672add019eefc0bb42d54b2ecb7e9df98c8f31fcd574cd9762b75c9062b62400cef54a3c2f79c6b4ddb184e414c7598d1f13f4f7f18b82a2eb42d390e5f95527865fc362760be2fa184e40b9f4824b3206b3b500a5e3b5c861f3975462386c4a89032a224f747be2c9a7d87c047a3335b6fc9ec276f4e1402eb051b8af6df7d3515da687e4c7f89d451b48937bca97a5ec8f43fd93d71af637dbcae4f78c9"]}, {0x53, &(0x7f0000000540)=@string={0x53, 0x3, "77da5ca4ccc22c182de094f3c765c6648392a4ca0a3f788e3d8de0ff8f3cb816809d28f993cd8d34b4dfdaaa5cac3f8156e35070a57b1b05125897c15cefc6a681f6097f5b0b7e6741b02adb951e4de3c0"}}]})
syz_usb_control_io(r3, &(0x7f0000000940)={0x2c, &(0x7f0000000840)={0x40, 0x6, 0x92, {0x92, 0x9, "fdb2db99fb1c49de657253f6874f5e351d21667dd09cb10b99917c63136afcadf5426d0151d434a45d6a4e73ee9e2323ca84706c52af3c0ecfa918ed467551f4103e02a7e726e9296b9465c92573c6fcda4dd9dcdf83ba8065c97fa8609e08cbdbddbc2961da60374adfd04d8ea6d37d2ed9c1af05f9cf28dd6873c17e51c1d1d1cb82ac07dec0ba029e037cae1f61d6"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000005c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd7, "bf79ada43a0053ac7bf6e9ea58cce445"}, @ptm_cap={0x3}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x8, 0x9, 0x4, "56a05fbd", '\aO\n\v'}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x3, 0xa, 0x4, 0xd, 0x2, 0x2}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0x31, 0x69, "0a9c02be10b69a145a0c77fe52ab4df97afbf281b70ae59859cf958b53cc433e9bd1f006b9bb946a03c63807ee8d753e84e78c63d3ddaecc9fda3b54d29400ebd7e4d0ba8ee3e874f99b1e5c141438fdf56ef76d820612993f61c3088f7b2e8ecb3ba460fd9272c72d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "9b56"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random="4d9cc99d8235"}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "1e1a"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x56}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) (async)
syz_usb_control_io(r3, &(0x7f0000000940)={0x2c, &(0x7f0000000840)={0x40, 0x6, 0x92, {0x92, 0x9, "fdb2db99fb1c49de657253f6874f5e351d21667dd09cb10b99917c63136afcadf5426d0151d434a45d6a4e73ee9e2323ca84706c52af3c0ecfa918ed467551f4103e02a7e726e9296b9465c92573c6fcda4dd9dcdf83ba8065c97fa8609e08cbdbddbc2961da60374adfd04d8ea6d37d2ed9c1af05f9cf28dd6873c17e51c1d1d1cb82ac07dec0ba029e037cae1f61d6"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000005c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd7, "bf79ada43a0053ac7bf6e9ea58cce445"}, @ptm_cap={0x3}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x8, 0x9, 0x4, "56a05fbd", '\aO\n\v'}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x3, 0xa, 0x4, 0xd, 0x2, 0x2}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0x31, 0x69, "0a9c02be10b69a145a0c77fe52ab4df97afbf281b70ae59859cf958b53cc433e9bd1f006b9bb946a03c63807ee8d753e84e78c63d3ddaecc9fda3b54d29400ebd7e4d0ba8ee3e874f99b1e5c141438fdf56ef76d820612993f61c3088f7b2e8ecb3ba460fd9272c72d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "9b56"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random="4d9cc99d8235"}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "1e1a"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x56}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}})

36.341125821s ago: executing program 0 (id=364):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8a00, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)

36.340827581s ago: executing program 0 (id=365):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000011})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004140)={0x2020}, 0x2020)
read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
dup3(r1, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
epoll_create1(0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000011}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
dup(r4) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) (async)
read$FUSE(r6, &(0x7f0000004140)={0x2020}, 0x2020) (async)
read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) (async)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) (async)
dup3(r1, r0, 0x0) (async)

36.331689151s ago: executing program 0 (id=366):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190014000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
write(r4, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

36.254688142s ago: executing program 0 (id=367):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getdents(0xffffffffffffff9c, &(0x7f0000000a80)=""/223, 0xdf)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a00), 0xffffffffffffffff)
truncate(0x0, 0xfffffffffffffffa)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="635f4455bd7f521fe9b76062aa9654828faba17fac68993f6c3abc13f138ca9e614408000000a0647e471b300bf345c9841dba8951fe901c8ff28b80d30ed9b58de5e9ba2cbc75619dd133e14107e5f92a3a99e3f8d683cfad5a", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0x0)
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2000, 0x1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, <r5=>0x0])
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={<r6=>0x0}, &(0x7f0000000300)=0xc)
getresuid(&(0x7f0000000480)=<r7=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x20c0, &(0x7f0000000f00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grQup_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001200,default_permissions,blksize=0x0000000000000800,blksize=0x0000000000000400,\x00'])
read$FUSE(r8, &(0x7f00000093c0)={0x2020, 0x0, <r9=>0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r8, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258400001ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df83a5a2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e55395241203c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="500100000000000000000000000000000500000000000000020008000000000002000000000000001100000000000000fcffffffb0c40000ffffffffffffffff0900000000000000fb080000000000000200000000000000080000000000000008000000000000007f000000010000000000000000c0000005000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="57f0ffff0a00000000000000040000002000000000000000000000000800000000080000726f6f746d6f646505000000000000000200000000080000ffffffffffffff08ff210000000000000302000002000000060000000000000004000000000000000000000000000000ffffffffffffffff020000000000000081ffffffffffffff00080000070000000400000000c0000003000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="010000004a0000000000000006000000000000003870e9ff000000000800070002000000726f6f746d6f6465"], 0x0, 0x0, 0x0})
r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = syz_pidfd_open(r12, 0x0)
pidfd_getfd(r13, 0xffffffffffffffff, 0x0)
r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)=""/188, &(0x7f0000000180)=0xbc)
r15 = dup(r14)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @any, 0x9}, 0xa)
r16 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0)
sendmsg$netlink(r1, &(0x7f0000000ec0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000640)={0x430, 0x14, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@generic="058b5c102038b15f8829e8120c34152643b788c35ffbbf18d46957703e0abc9defa406ac9c19976cddbe07f7f44b8600bb5ead44a9d291a40fd01b2d09461a29724363a1676ebf2466ce2d7c43e5533277569feb9964d2524ed37966c708a4e90a7879ae847e391f2ca256c2e1b80c46", @nested={0x84, 0x46, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @fd=r0}, @generic="6e8587de5e17f0a3456fb9694c71e38485f1de03ebeadd8ba748c9fec35a873b45e6f53002b7bf3dd61bad2ed158916ba0c6882055ae77f6d5ec46ad8d7da74532388d354fb3bc165776a1b854ab63e3e438a5f4c47e57e285ea5e3c6f5af52fb456efc2a3d2a3110e1550b9", @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}]}, @typed={0x4, 0x7e}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r12}, @generic="9459c6bb59c2af132a060a706301f3f7b445a080edee2a02e7b658cc4914d2d4f23dc7b724013fa57969c9b1f719dfc465bf0784c742d9b892bcb1f313d068bb7bf1493d6749e6d40043d07164770f98c8b7bc8d5c360f2fb29555d0633ff2cfaf9d1714dc2db74343450380fbac6071b311736c96ed1b9071ab3d26b728d29817171162785ba25100be0c8df670f5aa80bef4c9fa920139199d595bdab3c50c0705723e97ad5f134501242dda8f4eb4225373f3d772e14d84e048eb38b00e453aacfc70220fe82c1f6703d6afa42698e677001fd036dbf6f3c9f7a43bcfdce68f13704b333f9a4ce3938420166dd9ebbef113ff0d4c578f", @generic="fe7b571aab7977c595a9bbd7498e4f6b2970faa2015b04b5b281f190570cf1c7b6a2b196df1de5b234406ec3ae6955a1b099b9195e31025dff69838a688e8b76fec61d5c974d291f0344e017421002fabbb0b0c00dc1288e63d5d427a4dcf8371cf865326e460c608f1e0146e04be09f9ceb8db23633510586d401948571c089e9d32d23b7119eaad83fe83bee0ad77345cba1334b12c59b909c978744a8c29fc4993c88cabd6b526fad82c59d38ada89115a123caec4af3b363d133923a0ba1919c60162d123a431739462c4a99f6c4cd71298e123124898817", @generic="f079ee3e1c969a579a9d373df5ece309c84b5b62440157fc3c3e8b66211f8547d9613bc9534ffa0e3b72ad2a5784ee0fe4cf5dbde2b4fd0f70f8cea81a941a14b8e9449bdec7e965a42ea8c7c19742493c4dc6694c35a3b3461b4d8e6e47f29e49d3fd7bd223385e9c85ff2e4ee31408ad3c664ded26892c1d4b8e23c921d8ae5d763f231798a8546687e3e72584e851aae6699b1deb5ce7b4e68d4d7e48032e97a3ace9b1be62a473fa08298813a70def3b728002b3f289761823721b18a1cdabbbcb8716335caf3c5b0303da836c88887834043ba9d451817af9afa6bdb178338d7e0cd108", @generic="045fd0e11b1577d73e8b9c3efdd2c93e86a7da0454d79df6d61c7bf544c1a629428702e3b9bcd8a5fc07e4af12411a168e6731d0f626fda721a736160a0e5f02af7d22148032cb49fe8f1559a2031d62ae65849d38d272f02cbb966ef1f938bb6c69f1b702c0397b"]}, 0x430}, {&(0x7f0000001900)={0x400, 0x3f, 0x10, 0x60bd28, 0x25dfdbfd, "", [@typed={0x8, 0x86, 0x0, 0x0, @uid}, @generic="d5af6f2a74bd7d713be6d8d20b8edfcdbec09ada7277a8ac129d09569d9377700f990506079c1e38", @nested={0x283, 0x49, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r16}, @typed={0x4, 0xaf}, @nested={0xee, 0x92, 0x0, 0x1, [@generic="47acc7b3959ca278287f3a6a6108d8311fa77ab9792048072c554a99ac2344449e697782c85c3e0b08647c4f22d2fe7b5ac7d24fadfebb9ed050dd99298c5a7283663a49a782fc4a5c36c99168f795167aad07133e6384c5b482faf4cc0a6b2b553653af2cf7f8f92f6bec804985b708fcb2972982e5f0fba0df9ee82ba72e2d03b175ac5a785b017ce4c1d22c719bed43fa470da21b03efb6e9c234ac0aca491682e86423e3ead415b70a07e89e8411cc8ba2f8ced51452a65685424010cbadeb4fefc44ef5c616fdba342e89beb3740f7e63778b94003d8720", @typed={0x4, 0x148}, @nested={0x4, 0xe9}, @typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0xc1, 0x8f, 0x0, 0x1, [@nested={0x4, 0xdc}, @nested={0x4, 0x44}, @generic="3f12efb1663b0cabf440fb649c86c595e4e45ac47574a5cf4bd5f6072fb2256bd28af2c4532355ef5432307d51daf8c730d36f733412c20539ff8c8310ff24305f70addb85685017a3f4edd9acfcb5ed95cf9ef620107853ca552123f8d11b5b68a580afcf523bc75f69b2fcfcc8e0891381aef4ece84a5a797e4120fbc76c1d4de83c224a2a9cd0e1371ebd7cb774a54f650fa2a5c5bd133562492b43c31968", @nested={0x4, 0x41}, @nested={0x4, 0xb8}, @generic="24a7f02e372e8c84affbd74e79"]}, @nested={0x8, 0x27, 0x0, 0x1, [@nested={0x4, 0x80}]}, @typed={0x8, 0x117, 0x0, 0x0, @uid=r10}, @typed={0x88, 0x32, 0x0, 0x0, @binary="b4a020ec0e5b2a7399464bdc221ad1915d9dd00da94ae64f48411eefac962cf1baeef6e1016e1d08c24bfdc18a2f212f3700f9e412ee7d70f0b00ddad43debf424e17946fd30472b8c2ac1a0bd9e5fb35db4ba4688a8ad94b60c6c6fa1083bc0f5fa4ced18f20ff4ae912770d1f78dba2bb88219d95badad4bc5a4fba47ec52be64a4b3f"}, @generic="86555e5e4c31d2d0e330ef5596c725178bcde974af6ed5bb5290ec2b7cc50fe8fa73ad29b41508"]}, @generic="84fbf3f960b97d58c3be6c4c4098cf445a7ef0b6b112ba3717a4e5c0d3e63ee699d9eec07fe0cf460fc6c4e0c23fe0d281e26c10a439b49482e7863b17e217bd80a47ef97f8cc23b76437a45e2a420037ef8cc77fb467326a1d76746923c17e321e74836ef68ee1887a7dc1ea79952f7a021b73698cdf4d73d28a6d19aa9956221221bb43bd0fda87684e2f30540ec231ba82342a715c586df7bff7cda8e143dee5ea3d20a34043c6c49d0a46001a2805da2241379c02d12d36e0bf67cada6046b58f2bbf330b88e5e419e84123d2c52a32dfed40c1c08272d5276e5a51925201bd59088c4f2cb837db9edb1e837bf5bd41c6aa566", @generic="faf22abc5f5697d6b2fcb0adc6f3530da3e3adcc73ec580bc91c419ac61a5743895fdda71211ca8a6e6038553e271c5d7d1fd93b74eca1e86add8c7453581b5479fe0000"]}, 0x400}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @rights={{0x20, 0x1, 0x1, [r0, r13, r15, r16]}}], 0x60, 0x4000000}, 0x20000000)
r17 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4eca03, 0x0)
ioctl$BLKRRPART(r17, 0x125f, 0x0)

36.214416363s ago: executing program 0 (id=368):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x1277, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

36.212747363s ago: executing program 0 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) (async)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
userfaultfd(0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$int_out(r2, 0x0, &(0x7f0000000000))
r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2}}]}}}]}}]}}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x0, 0x0) (async)
syz_usb_ep_write(r6, 0x81, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r8 = openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
poll(&(0x7f00000000c0)=[{r8, 0xa252}], 0x1, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

36.092825864s ago: executing program 2 (id=370):
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000180)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000018) (async)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000018)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f0, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa185186}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3000, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fdc765b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1f0}}, 0x24000001)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000600), &(0x7f0000000640)=0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x240002, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}}, 0x8008040)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='freezer.parent_freezing\x00', 0x0, 0x0)
write$selinux_access(r8, &(0x7f0000000800)={'system_u:object_r:semanage_read_lock_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x3}, 0x56) (async)
write$selinux_access(r8, &(0x7f0000000800)={'system_u:object_r:semanage_read_lock_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x3}, 0x56)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x56f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4005)
write$selinux_access(r8, &(0x7f00000009c0)={'system_u:object_r:root_t:s0', 0x20, 'unconfined', 0x20, 0x7}, 0x3c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r8)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x1, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) (async)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x1, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
write$tun(0xffffffffffffffff, &(0x7f0000000b40)={@val={0x0, 0x8035}, @void, @x25={0x3, 0x2, 0xff, "909d2049207c38b9c5ea52326bce88b7ead83e0d23f8b41f670747a313204d90c49bb95b704f88f4d1f2175d3adf5a8cb880f2d5d15d4534ab5ab4d4390e856d09ab69de360dae5c062a3ae6d13425d8b95d865ea2154bf0164341b5351b141f828d6039e2ad097c3130dd2212d2f7723c54bf1e410160368bca"}}, 0x81) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000b40)={@val={0x0, 0x8035}, @void, @x25={0x3, 0x2, 0xff, "909d2049207c38b9c5ea52326bce88b7ead83e0d23f8b41f670747a313204d90c49bb95b704f88f4d1f2175d3adf5a8cb880f2d5d15d4534ab5ab4d4390e856d09ab69de360dae5c062a3ae6d13425d8b95d865ea2154bf0164341b5351b141f828d6039e2ad097c3130dd2212d2f7723c54bf1e410160368bca"}}, 0x81)
ioctl$EVIOCGBITSW(r8, 0x80404525, &(0x7f0000000c00)=""/237)
fcntl$getownex(r7, 0x10, &(0x7f0000000f00)={0x0, <r9=>0x0})
r10 = getpgrp(0xffffffffffffffff)
r11 = getpgid(0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x2000080, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80), {0x14}, &(0x7f0000000dc0)=""/75, 0x4b, &(0x7f0000000e40)=""/171, &(0x7f0000000f40)=[r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11], 0x5, {r12}}, 0x58)
setxattr$trusted_overlay_origin(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), &(0x7f00000010c0), 0x2, 0x3)
fcntl$getownex(r0, 0x10, &(0x7f0000001100))
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001500)={0x14, &(0x7f0000001440)={0x0, 0x5, 0xa, {0xa, 0x21, "a2d1b3cd2df39f36"}}, &(0x7f0000001480)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "5bd0bed2ffff165afe279f3eebf808d3f55996f5b8fd51e85f21193a4b4f36402472b689e8aa8707c248917e36a0ced610bd0ee6b647b5683ad7002150169b0bb9304f025f692140d7"}}}, &(0x7f0000001780)={0x44, &(0x7f0000001540)={0x40, 0x17, 0x50, "a120373c0702043d79d94e2c2c943124b4eed0211e788f275f45c629ab593bf68b0408e0f731ffd9d95b3904d19a5336994e592cb3ca20f6d33d4536997f0bd0efc0f9390554d33a57d8fc597db1e2e2"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001640)={0x20, 0x81, 0x1, "dd"}, &(0x7f0000001680)={0x20, 0x82, 0x2, "71ce"}, &(0x7f00000016c0)={0x20, 0x83, 0x2, "749d"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "c0d19807"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "506ca3"}}) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001500)={0x14, &(0x7f0000001440)={0x0, 0x5, 0xa, {0xa, 0x21, "a2d1b3cd2df39f36"}}, &(0x7f0000001480)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "5bd0bed2ffff165afe279f3eebf808d3f55996f5b8fd51e85f21193a4b4f36402472b689e8aa8707c248917e36a0ced610bd0ee6b647b5683ad7002150169b0bb9304f025f692140d7"}}}, &(0x7f0000001780)={0x44, &(0x7f0000001540)={0x40, 0x17, 0x50, "a120373c0702043d79d94e2c2c943124b4eed0211e788f275f45c629ab593bf68b0408e0f731ffd9d95b3904d19a5336994e592cb3ca20f6d33d4536997f0bd0efc0f9390554d33a57d8fc597db1e2e2"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001640)={0x20, 0x81, 0x1, "dd"}, &(0x7f0000001680)={0x20, 0x82, 0x2, "71ce"}, &(0x7f00000016c0)={0x20, 0x83, 0x2, "749d"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "c0d19807"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "506ca3"}})

35.578342202s ago: executing program 2 (id=376):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x0, 0x0, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async, rerun: 64)
r4 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd=r4}, @generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176", @nested={0x64, 0x425, 0x0, 0x1, [@nested={0x5d, 0x5b, 0x0, 0x1, [@nested={0x4, 0x38}, @generic="31ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea05", @nested={0x1a, 0xe8, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid}, @generic="8cda759849b5a66f654f3e332a3d"]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (rerun: 32)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0})

34.869117992s ago: executing program 1 (id=385):
openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x88803, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000000)={0x5, 0x86}, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
getrlimit(0x9, &(0x7f00000000c0))
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140))
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x480, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x5})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5)
setrlimit(0x7, &(0x7f0000000180)={0x4, 0x28000000000000})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r6, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000104000/0x1000)=nil, 0x1000, 0x3)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
read(r8, &(0x7f0000000280)=""/4096, 0x1000)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

34.742159394s ago: executing program 1 (id=387):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x20000000000033}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x1010}], 0x0, 0x0, 0x0})

34.654614036s ago: executing program 1 (id=389):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
setresuid(0xee01, 0xee01, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x2)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x184)
syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
sync_file_range(r3, 0xdc0, 0x2, 0x3)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r5, &(0x7f00000007c0), 0x0, 0x8, 0x4002081)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r8=>r7, 0x4, 0x84, 0x9, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x10, 0x2, 0x5}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
setsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
recvmmsg(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x2, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_usb_connect(0x1, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="e936640331c34e9870a847ba4764105c03ee4345eba98af455d3e4861b57fd97bb7201abee5fd24d5ec647a7d0444cded80ec332a5bf66e65e72ddd71f2d31c121339b805e46429a7df5d4212ca1ea69d453b5393342c908f30000000094f882db24f8b473df9698195bf93e0f4e8ff3c19da7f71ec5b1", @ANYRES16=r1, @ANYRESOCT=r4, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES16, @ANYRES32=r8, @ANYRESOCT=r0], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
write(0xffffffffffffffff, &(0x7f0000000200)="5d25c4eca33c43a53d749ac82241c9ee3e4f18241174a1a76f9425201f5ed721fb77ac1d0bac777b60f4295dd9eb", 0x2e)

34.063469825s ago: executing program 3 (id=394):
r0 = getpgid(0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r0) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) (async, rerun: 32)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x6401, 0x0) (async)
futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async)
r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r4, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000000))

34.027812925s ago: executing program 3 (id=395):
mkdir(&(0x7f0000000200)='./file0\x00', 0x50)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x7}}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)

34.026480895s ago: executing program 3 (id=396):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x1277, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

34.012229985s ago: executing program 3 (id=397):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0) (async)
setresuid(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0xaece, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

33.940936846s ago: executing program 3 (id=398):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
userfaultfd(0x801)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x2, 0x1a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r5 = socket$inet6(0xa, 0x802, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x1}]})
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x40816)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
accept$inet6(r9, 0x0, 0x0)
write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000)

29.845366367s ago: executing program 1 (id=399):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03d3ff008c71ef2885634a8270e7113a"], 0xffdd)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42c", 0x12}, {&(0x7f0000000000)="b9fd7bb5f13113d3215c42bdf1", 0xd}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f0000000000)=0x100, 0x4)

29.256957656s ago: executing program 2 (id=400):
r0 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x3, r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)

27.911657416s ago: executing program 3 (id=401):
socket(0x10, 0x803, 0x0) (async, rerun: 32)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (rerun: 32)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x3]}}) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
utimensat(0xffffffffffffffff, &(0x7f000000a300)='./file1\x00', 0x0, 0x631e84ec02c57dd7)
ioctl$TCFLSH(r2, 0x540b, 0x1)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000086d0462c200000000000109022400010000602009040006030300020009210000000122080009058103200000ca39"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "61aa41a4"}, @local=@item_4={0x3, 0x2, 0x4, "b0f3b889"}]}}, 0x0}, 0x0) (async)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
futex(0x0, 0xb, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x2)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000180)=0x1c)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) (async, rerun: 64)
mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x7fffffff) (async, rerun: 64)
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000002) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@empty, @broadcast, r4}, 0xc)

24.059525223s ago: executing program 1 (id=402):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3d4f5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x324, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xce}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x54d0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff748}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6f}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9e97}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0xdb}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10000000}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3de}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x60}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4d16}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8014)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x44)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x81)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a00)={'gre0\x00', <r6=>0x0, 0x7, 0x7800, 0xd, 0x7, {{0x35, 0x4, 0x3, 0x1a, 0xd4, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xde48}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x2, 0x6, "f0e05f0c"}, {0x6, 0x9, "53f45c8812a36a"}, {0x2, 0xb, "3cb5dc82d5f33846fb"}, {0x2, 0x5, "36895a"}]}, @timestamp_addr={0x44, 0x4c, 0xa0, 0x1, 0x3, [{@multicast2, 0x287156a6}, {@loopback, 0x2}, {@multicast1, 0x9}, {@local, 0xfdf}, {@loopback}, {@local, 0x400}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010102, 0x6}, {@broadcast, 0xffffb4c9}]}, @lsrr={0x83, 0x1f, 0xd0, [@multicast1, @multicast2, @rand_addr=0x64010101, @broadcast, @empty, @multicast2, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0xe0, [@rand_addr=0x64010102, @broadcast]}, @ssrr={0x89, 0x7, 0x12, [@multicast1]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r7=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000b80)={@local, @loopback, <r8=>0x0}, &(0x7f0000000bc0)=0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c00)={'veth1_to_batadv\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000c40)={'ip_vti0\x00', <r10=>0x0, 0x80, 0x700, 0x6, 0x0, {{0xc, 0x4, 0x1, 0x39, 0x30, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1b, 0xcc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000d40)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d80)={'sit0\x00', <r12=>0x0, 0x8000, 0x7800, 0x8, 0x2, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @local, {[@ssrr={0x89, 0xb, 0x57, [@multicast2, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', <r13=>0x0, 0x20, 0x8000, 0x9, 0x0, {{0x20, 0x4, 0x1, 0x14, 0x80, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x1a, 0x0, 0x9, [0xfffffef1, 0x0]}, @rr={0x7, 0xb, 0x87, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102]}, @lsrr={0x83, 0x7, 0xd2, [@broadcast]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x0, [0xfffffff7, 0x55, 0x81]}, @noop, @timestamp={0x44, 0xc, 0x2b, 0x0, 0x5, [0x6, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x6, [{@private=0xa010100, 0x10}, {@multicast2}, {@local, 0xfffffffa}]}, @noop, @lsrr={0x83, 0x13, 0x48, [@rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000001100)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x1c0, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
r14 = syz_open_dev$loop(&(0x7f0000001140), 0x8, 0x4000)
ioctl$BLKDISCARD(r14, 0x1277, &(0x7f0000001180)=0x6)
r15 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETLED(r15, 0x4b32, 0x100)
syz_open_dev$usbfs(&(0x7f00000011c0), 0x200, 0x8400)
r16 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r16, 0x8924, &(0x7f0000001240)={'veth0_to_hsr\x00', @remote})
connect$unix(r16, &(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001440)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x8c, r0, 0x112, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2aae}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20000041)

20.379236428s ago: executing program 32 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) (async)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
userfaultfd(0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$int_out(r2, 0x0, &(0x7f0000000000))
r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2}}]}}}]}}]}}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x0, 0x0) (async)
syz_usb_ep_write(r6, 0x81, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r8 = openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
poll(&(0x7f00000000c0)=[{r8, 0xa252}], 0x1, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

10.470886004s ago: executing program 33 (id=400):
r0 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x3, r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)

0s ago: executing program 34 (id=401):
socket(0x10, 0x803, 0x0) (async, rerun: 32)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (rerun: 32)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x3]}}) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
utimensat(0xffffffffffffffff, &(0x7f000000a300)='./file1\x00', 0x0, 0x631e84ec02c57dd7)
ioctl$TCFLSH(r2, 0x540b, 0x1)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000086d0462c200000000000109022400010000602009040006030300020009210000000122080009058103200000ca39"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "61aa41a4"}, @local=@item_4={0x3, 0x2, 0x4, "b0f3b889"}]}}, 0x0}, 0x0) (async)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
futex(0x0, 0xb, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x2)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000180)=0x1c)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) (async, rerun: 64)
mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x7fffffff) (async, rerun: 64)
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000002) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@empty, @broadcast, r4}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
[   23.921860][   T36] audit: type=1400 audit(1752077209.030:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.923284][  T281] cgroup: Unknown subsys name 'net'
[   23.944704][   T36] audit: type=1400 audit(1752077209.030:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.971955][   T36] audit: type=1400 audit(1752077209.060:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.972170][  T281] cgroup: Unknown subsys name 'devices'
[   24.136395][  T281] cgroup: Unknown subsys name 'hugetlb'
[   24.142019][  T281] cgroup: Unknown subsys name 'rlimit'
[   24.318414][   T36] audit: type=1400 audit(1752077209.430:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.341695][   T36] audit: type=1400 audit(1752077209.430:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.352901][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.366667][   T36] audit: type=1400 audit(1752077209.430:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.398185][   T36] audit: type=1400 audit(1752077209.500:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.423918][   T36] audit: type=1400 audit(1752077209.500:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.459960][   T36] audit: type=1400 audit(1752077209.570:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.485561][   T36] audit: type=1400 audit(1752077209.570:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.485610][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.386433][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.393505][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.400586][  T289] bridge_slave_0: entered allmulticast mode
[   25.406862][  T289] bridge_slave_0: entered promiscuous mode
[   25.416263][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.423365][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.430494][  T288] bridge_slave_0: entered allmulticast mode
[   25.436812][  T288] bridge_slave_0: entered promiscuous mode
[   25.446045][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.453101][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.460230][  T289] bridge_slave_1: entered allmulticast mode
[   25.466640][  T289] bridge_slave_1: entered promiscuous mode
[   25.472717][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.479802][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.486939][  T291] bridge_slave_0: entered allmulticast mode
[   25.493180][  T291] bridge_slave_0: entered promiscuous mode
[   25.499399][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.506508][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.513570][  T288] bridge_slave_1: entered allmulticast mode
[   25.519917][  T288] bridge_slave_1: entered promiscuous mode
[   25.526059][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.533093][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.540205][  T290] bridge_slave_0: entered allmulticast mode
[   25.546563][  T290] bridge_slave_0: entered promiscuous mode
[   25.556331][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.563367][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.570501][  T291] bridge_slave_1: entered allmulticast mode
[   25.576821][  T291] bridge_slave_1: entered promiscuous mode
[   25.586284][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.593329][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.600445][  T290] bridge_slave_1: entered allmulticast mode
[   25.606736][  T290] bridge_slave_1: entered promiscuous mode
[   25.787998][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.795169][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.802435][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.809472][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.825551][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.832601][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.839896][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.846937][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.856782][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.863833][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.871110][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.878150][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.887403][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.894482][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.901798][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.908853][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.959717][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.967036][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.975121][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.982302][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.989861][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.997265][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.004597][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.011976][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.026612][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.033671][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.057186][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.064261][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.071771][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.078822][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.087027][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.094100][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.101623][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.108684][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.122648][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.129703][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.140085][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.147144][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.158865][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.165915][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.210899][  T290] veth0_vlan: entered promiscuous mode
[   26.227152][  T288] veth0_vlan: entered promiscuous mode
[   26.232782][  T289] veth0_vlan: entered promiscuous mode
[   26.254848][  T289] veth1_macvtap: entered promiscuous mode
[   26.262809][  T291] veth0_vlan: entered promiscuous mode
[   26.277879][  T290] veth1_macvtap: entered promiscuous mode
[   26.284298][  T288] veth1_macvtap: entered promiscuous mode
[   26.306142][  T291] veth1_macvtap: entered promiscuous mode
[   26.343310][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   26.561247][  T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.582563][  T325] SELinux: security policydb version 18 (MLS) not backwards compatible
[   26.592711][  T325] SELinux: failed to load policy
[   26.664208][  T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.815545][  T307] usb 3-1: unable to get BOS descriptor or descriptor too short
[   26.823983][  T307] usb 3-1: config 1 interface 1 has no altsetting 0
[   26.832129][  T307] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   26.841385][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.849563][  T307] usb 3-1: Product: syz
[   26.853895][  T307] usb 3-1: Manufacturer: syz
[   26.858714][  T307] usb 3-1: SerialNumber: syz
[   27.237060][  T307] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[   27.244936][  T307] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   27.262102][  T307] usb 3-1: USB disconnect, device number 2
[   27.280144][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such device
[   27.604120][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.754143][    T9] usb 4-1: Using ep0 maxpacket: 32
[   27.763039][    T9] usb 4-1: config 1 interface 0 altsetting 84 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.776118][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[   27.796336][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40
[   27.805418][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.813401][    T9] usb 4-1: Product: с
[   27.824174][    T9] usb 4-1: Manufacturer: Ж
[   27.987558][  T350] Zero length message leads to an empty skb
[   28.035987][  T352] rust_binder: Write failure EFAULT in pid:17
[   28.036810][  T331] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.051815][  T354] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure
[   28.546905][    T9] usbhid 4-1:1.0: can't add hid device: -71
[   28.555379][    T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[   28.565307][    T9] usb 4-1: USB disconnect, device number 2
[   28.603083][  T361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=361 comm=syz.3.17
[   28.619608][  T361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.619651][  T361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[   28.647536][  T365] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   28.939660][   T36] kauditd_printk_skb: 79 callbacks suppressed
[   28.939680][   T36] audit: type=1400 audit(1752077214.050:153): avc:  denied  { append } for  pid=368 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   28.984116][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.048622][  T371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   29.061988][   T36] audit: type=1400 audit(1752077214.170:154): avc:  denied  { mounton } for  pid=370 comm="syz.1.21" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   29.165481][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   29.173976][    T9] usb 4-1: config 1 interface 1 has no altsetting 0
[   29.182092][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   29.191250][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.199431][    T9] usb 4-1: Product: syz
[   29.203649][    T9] usb 4-1: Manufacturer: syz
[   29.208270][    T9] usb 4-1: SerialNumber: syz
[   29.580546][    T9] usb 4-1: found format II with max.bitrate = 2418, frame size=7
[   29.588382][    T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   29.605036][    T9] usb 4-1: USB disconnect, device number 3
[   29.618656][   T36] audit: type=1400 audit(1752077214.730:155): avc:  denied  { write } for  pid=376 comm="syz.2.22" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   29.623628][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.671646][   T36] audit: type=1400 audit(1752077214.780:156): avc:  denied  { write } for  pid=382 comm="syz.0.23" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   29.697915][  T384] rust_binder: Error while translating object.
[   29.697969][  T384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   29.704220][   T36] audit: type=1400 audit(1752077214.810:157): avc:  denied  { transfer } for  pid=382 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   29.704477][  T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:9
[   29.773629][   T36] audit: type=1400 audit(1752077214.880:158): avc:  denied  { mounton } for  pid=385 comm="syz.0.24" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   29.834591][   T36] audit: type=1400 audit(1752077214.950:159): avc:  denied  { read } for  pid=392 comm="syz.0.27" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.837661][  T394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'.
[   29.859120][   T36] audit: type=1400 audit(1752077214.950:160): avc:  denied  { open } for  pid=392 comm="syz.0.27" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.874112][   T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   29.892674][   T36] audit: type=1400 audit(1752077214.980:161): avc:  denied  { ioctl } for  pid=392 comm="syz.0.27" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.945247][   T36] audit: type=1400 audit(1752077215.060:162): avc:  denied  { bind } for  pid=399 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   30.024154][   T10] usb 3-1: device descriptor read/64, error -71
[   30.264113][   T10] usb 3-1: device descriptor read/64, error -71
[   30.474627][    T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   30.504103][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   30.629501][    T9] usb 4-1: config 7 has an invalid interface number: 217 but max is 2
[   30.638004][   T10] usb 3-1: device descriptor read/64, error -71
[   30.644311][    T9] usb 4-1: config 7 has an invalid interface number: 112 but max is 2
[   30.652563][    T9] usb 4-1: config 7 has an invalid interface number: 165 but max is 2
[   30.660801][    T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   30.670932][    T9] usb 4-1: config 7 has no interface number 0
[   30.677081][    T9] usb 4-1: config 7 has no interface number 1
[   30.683161][    T9] usb 4-1: config 7 has no interface number 2
[   30.689316][    T9] usb 4-1: config 7 interface 217 altsetting 14 endpoint 0x6 has invalid maxpacket 32, setting to 8
[   30.700123][    T9] usb 4-1: config 7 interface 217 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[   30.711092][    T9] usb 4-1: config 7 interface 217 altsetting 14 endpoint 0x2 has invalid maxpacket 16, setting to 8
[   30.722539][    T9] usb 4-1: config 7 interface 217 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[   30.733585][    T9] usb 4-1: config 7 interface 112 altsetting 244 endpoint 0x8 has invalid maxpacket 1023, setting to 8
[   30.744688][    T9] usb 4-1: config 7 interface 112 altsetting 244 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[   30.755801][    T9] usb 4-1: config 7 interface 112 altsetting 244 endpoint 0x3 has invalid maxpacket 64, setting to 8
[   30.766882][    T9] usb 4-1: config 7 interface 112 altsetting 244 has a duplicate endpoint with address 0x3, skipping
[   30.777901][    T9] usb 4-1: config 7 interface 112 altsetting 244 has a duplicate endpoint with address 0x2, skipping
[   30.789025][    T9] usb 4-1: config 7 interface 112 altsetting 244 endpoint 0xC has invalid maxpacket 512, setting to 8
[   30.800096][    T9] usb 4-1: config 7 interface 112 altsetting 244 has an invalid descriptor for endpoint zero, skipping
[   30.811508][    T9] usb 4-1: config 7 interface 112 altsetting 244 has an invalid descriptor for endpoint zero, skipping
[   30.822833][    T9] usb 4-1: config 7 interface 112 altsetting 244 endpoint 0xF has invalid maxpacket 32, setting to 8
[   30.833772][    T9] usb 4-1: config 7 interface 165 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[   30.847138][    T9] usb 4-1: config 7 interface 217 has no altsetting 0
[   30.853946][    T9] usb 4-1: config 7 interface 112 has no altsetting 0
[   30.860807][    T9] usb 4-1: config 7 interface 165 has no altsetting 0
[   30.877877][  T423] rust_binder: 423: no such ref 0
[   30.882995][  T423] rust_binder: Write failure EINVAL in pid:26
[   30.910949][  T425] capability: warning: `syz.1.39' uses 32-bit capabilities (legacy support in use)
[   30.934103][   T10] usb 3-1: device descriptor read/64, error -71
[   30.982293][  T427] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.044995][   T10] usb usb3-port1: attempt power cycle
[   31.178646][  T435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.44'.
[   31.179392][  T437] rust_binder: Error while translating object.
[   31.187568][  T437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.193780][  T437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[   31.384115][   T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   31.415022][   T10] usb 3-1: device descriptor read/8, error -71
[   31.545005][   T10] usb 3-1: device descriptor read/8, error -71
[   31.757754][  T445] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.758000][  T445] rust_binder: Write failure EINVAL in pid:33
[   31.784151][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   31.799662][  T450] binder: Bad value for 'max'
[   31.816117][   T10] usb 3-1: device descriptor read/8, error -71
[   31.939106][  T456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   31.949115][   T10] usb 3-1: device descriptor read/8, error -71
[   31.956061][  T456] rust_binder: Write failure EINVAL in pid:44
[   31.968792][  T458] netlink: 4724 bytes leftover after parsing attributes in process `syz.0.53'.
[   31.984364][  T458] rust_binder: 458: no such ref 0
[   31.989447][  T458] rust_binder: Write failure EFAULT in pid:46
[   32.073090][   T10] usb usb3-port1: unable to enumerate USB device
[   32.105257][  T463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.117290][  T463] netlink: 104 bytes leftover after parsing attributes in process `syz.1.55'.
[   32.296342][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.296418][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.297614][  T473] rust_binder: 473: no such ref 1
[   32.302996][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.309569][  T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51
[   32.314641][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.330209][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.336892][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.343383][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.349933][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.356436][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.362889][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.369355][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.375815][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.382241][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.388732][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.395530][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.401962][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.408415][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.414869][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.421297][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.427744][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.434216][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.440643][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.451907][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.458463][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.464934][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.471361][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.478004][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.484501][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.491010][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.497557][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.507944][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.514513][  T472] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.164259][  T498] pim6reg1: entered promiscuous mode
[   33.176040][  T498] pim6reg1: entered allmulticast mode
[   33.330735][    T9] usb 4-1: Dual-Role OTG device on HNP port
[   33.337749][    T9] usb 4-1: can't set HNP mode: -71
[   33.378435][  T507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   33.526341][  T531] process 'syz.0.81' launched './file1' with NULL argv: empty string added
[   33.540363][  T531] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 4096)
[   33.540390][  T531] rust_binder: Error while translating object.
[   33.551520][  T531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.557904][  T531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67
[   33.595095][  T540] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   33.628154][  T542] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   33.628213][  T542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   33.637043][  T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:71
[   33.761591][  T551] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.770328][  T553] rust_binder: Failed to allocate buffer. len:65544, is_oneway:false
[   33.771133][  T551] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   33.777588][  T553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   33.785449][  T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   33.793305][  T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:45
[   33.802846][  T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:79
[   33.825063][  T551] rust_binder: Error while translating object.
[   33.834235][  T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.840619][  T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[   33.898735][  T562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.992613][   T36] kauditd_printk_skb: 61 callbacks suppressed
[   33.992631][   T36] audit: type=1326 audit(1752077219.100:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.021837][   T36] audit: type=1326 audit(1752077219.100:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.045480][   T36] audit: type=1326 audit(1752077219.100:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.068677][   T36] audit: type=1326 audit(1752077219.100:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.091877][   T36] audit: type=1326 audit(1752077219.100:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.115961][   T36] audit: type=1326 audit(1752077219.100:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.139133][   T36] audit: type=1326 audit(1752077219.100:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.162206][   T36] audit: type=1326 audit(1752077219.100:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.200215][   T36] audit: type=1326 audit(1752077219.100:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.226268][   T36] audit: type=1326 audit(1752077219.100:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x7ffc0000
[   34.307535][  T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[   34.314121][  T375] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   34.434127][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   34.475218][  T375] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[   34.483667][  T375] usb 3-1: config 160 has no interface number 0
[   34.489972][  T375] usb 3-1: config 160 interface 200 has no altsetting 0
[   34.498432][  T375] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[   34.507599][  T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.515755][  T375] usb 3-1: Product: syz
[   34.519934][  T375] usb 3-1: Manufacturer: syz
[   34.524564][  T375] usb 3-1: SerialNumber: syz
[   34.596337][   T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   34.605493][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.613583][   T31] usb 1-1: Product: syz
[   34.617804][   T31] usb 1-1: Manufacturer: syz
[   34.622498][   T31] usb 1-1: SerialNumber: syz
[   34.657106][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.735359][  T375] usb 3-1: MIDIStreaming interface descriptor not found
[   34.744596][  T375] usb 3-1: USB disconnect, device number 7
[   34.777815][  T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.814096][    T9] usb 2-1: Using ep0 maxpacket: 16
[   34.820304][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.831249][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.841014][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   34.853822][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   34.862888][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.871657][    T9] usb 2-1: config 0 descriptor??
[   34.926416][  T593] rust_binder: Error while translating object.
[   34.926439][  T593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   34.932671][  T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41
[   35.282520][  T614] 9pnet_fd: p9_fd_create_tcp (614): problem connecting socket to 127.0.0.1
[   35.291040][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.310080][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.319287][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.327320][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.336600][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.343926][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.351302][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.358788][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.373041][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.385347][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.393086][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.407362][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.417745][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.425028][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.434148][    T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   35.447316][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4
[   35.464390][    T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   35.481818][    T9] usb 2-1: USB disconnect, device number 2
[   35.570195][  T629] fido_id[629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   36.395335][  T641] rust_binder: Error while translating object.
[   36.395380][  T641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.396987][  T644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7254 sclass=netlink_route_socket pid=644 comm=syz.2.120
[   36.401586][  T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100
[   36.540791][  T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104
[   36.654701][  T663] random: crng reseeded on system resumption
[   36.718867][  T663] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.128'.
[   36.731803][  T663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.731848][  T663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112
[   36.744257][  T665] rust_binder: Write failure EFAULT in pid:86
[   37.036830][  T667] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[   37.220549][   T45] usb 1-1: USB disconnect, device number 2
[   37.544114][   T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   37.684196][  T713] geneve1: tun_chr_ioctl cmd 1074025672
[   37.689788][  T713] geneve1: ignored: set checksum enabled
[   37.705247][   T31] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[   37.713532][   T31] usb 3-1: config 0 has no interface number 0
[   37.719881][   T31] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B
[   37.731785][   T31] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0
[   37.741890][   T31] usb 3-1: config 0 interface 200 has no altsetting 0
[   37.753288][   T31] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39
[   37.771585][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.779828][   T31] usb 3-1: Product: syz
[   37.784020][   T31] usb 3-1: Manufacturer: syz
[   37.788841][   T31] usb 3-1: SerialNumber: syz
[   37.802485][   T31] usb 3-1: config 0 descriptor??
[   37.818579][  T714] rust_binder: 714: no such ref 3
[   38.059681][   T31] usbhid 3-1:0.200: couldn't find an input interrupt endpoint
[   38.073016][   T31] usb 3-1: USB disconnect, device number 8
[   38.544161][  T375] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.704091][  T375] usb 1-1: Using ep0 maxpacket: 16
[   38.729051][  T375] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[   38.757690][  T375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.783631][  T375] usb 1-1: config 0 has no interface number 0
[   38.793705][  T742] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   38.795582][  T375] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   38.814187][  T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.828739][  T375] usb 1-1: Product: syz
[   38.832983][  T375] usb 1-1: Manufacturer: syz
[   38.837923][  T375] usb 1-1: SerialNumber: syz
[   38.875209][  T375] usb 1-1: config 0 descriptor??
[   38.907529][  T748] rust_binder: Error while translating object.
[   38.907558][  T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   38.918159][  T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141
[   38.947657][  T756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   38.956939][  T756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57
[   38.966365][  T756] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   38.975434][  T756] rust_binder: Read failure Err(EFAULT) in pid:57
[   39.009436][  T758] binder: Bad value for 'max'
[   39.066186][   T36] kauditd_printk_skb: 43 callbacks suppressed
[   39.066221][   T36] audit: type=1400 audit(1752077224.180:277): avc:  denied  { mount } for  pid=764 comm="syz.1.164" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   39.084407][  T727] =======================================================
[   39.084407][  T727] WARNING: The mand mount option has been deprecated and
[   39.084407][  T727]          and is ignored by this kernel. Remove the mand
[   39.084407][  T727]          option from the mount to silence this warning.
[   39.084407][  T727] =======================================================
[   39.094014][   T36] audit: type=1400 audit(1752077224.190:278): avc:  denied  { remount } for  pid=724 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   39.129549][  T727] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   39.156885][   T36] audit: type=1400 audit(1752077224.270:279): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   39.755891][   T36] audit: type=1400 audit(1752077224.870:280): avc:  denied  { write } for  pid=772 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   39.787733][  T777] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[   39.798839][   T36] audit: type=1400 audit(1752077224.910:281): avc:  denied  { accept } for  pid=778 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   39.835238][   T36] audit: type=1400 audit(1752077224.950:282): avc:  denied  { setopt } for  pid=781 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   40.034926][  T786] 9p: Unknown access argument 00000000000000000000U��������: -22
[   40.216758][  T798] rust_binder: Failed to allocate buffer. len:192, is_oneway:false
[   40.285612][  T802] tipc: Trying to set illegal importance in message
[   40.285640][   T36] audit: type=1400 audit(1752077225.400:283): avc:  denied  { setopt } for  pid=800 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   40.340475][   T36] audit: type=1400 audit(1752077225.450:284): avc:  denied  { sqpoll } for  pid=804 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   40.360507][  T806] rust_binder: Write failure EINVAL in pid:64
[   40.363229][   T36] audit: type=1326 audit(1752077225.480:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.1.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad0e18e929 code=0x0
[   40.452099][  T812] binder: Unknown parameter 'fscontext?}'
[   40.513806][   T36] audit: type=1400 audit(1752077225.620:286): avc:  denied  { write } for  pid=820 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   40.533344][  T821] rust_binder: Error while translating object.
[   40.533375][  T821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   40.534424][  T822] rust_binder: Error while translating object.
[   40.539646][  T821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:145
[   40.549147][  T822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   40.564234][  T822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:145
[   40.606196][  T826] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   40.709734][  T837] Dead loop on virtual device ip6_vti0, fix it urgently!
[   40.717858][  T837] IPv6: NLM_F_CREATE should be specified when creating new route
[   40.726369][  T837] rust_binder: 837: no such ref 0
[   40.731548][  T837] rust_binder: Write failure EINVAL in pid:161
[   40.735866][  T837] rust_binder: Read failure Err(EAGAIN) in pid:161
[   40.742215][  T837] rust_binder: Read failure Err(EAGAIN) in pid:161
[   40.885854][  T844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3792 ns). Using initial count to start timer.
[   40.910252][  T844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   41.244641][  T375] usb 1-1: USB disconnect, device number 3
[   41.283745][  T867] binder: Unknown parameter ''
[   41.503849][  T888] usb usb8: usbfs: process 888 (syz.0.209) did not claim interface 0 before use
[   41.612076][  T900] rust_binder: Error while translating object.
[   41.612109][  T900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.618428][  T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[   41.664175][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   41.746205][  T915] netlink: 5 bytes leftover after parsing attributes in process `syz.2.218'.
[   41.804100][  T375] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   41.826639][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   41.828656][  T924] netlink: 'syz.2.221': attribute type 46 has an invalid length.
[   41.835965][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.852441][  T925] netlink: 'syz.2.221': attribute type 46 has an invalid length.
[   41.860274][    T9] usb 4-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   41.873351][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[   41.873499][  T925] rust_binder: Error in use_page_slow: ESRCH
[   41.880003][  T925] rust_binder: use_range failure ESRCH
[   41.882247][    T9] usb 4-1: string descriptor 0 read error: -22
[   41.886284][  T925] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[   41.891587][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   41.897700][  T925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   41.905866][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.914564][  T925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:200
[   41.934557][    T9] usb 4-1: bad CDC descriptors
[   41.974105][  T375] usb 1-1: Invalid ep0 maxpacket: 32
[   42.011229][  T950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'.
[   42.106473][  T375] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   42.186511][   T10] usb 4-1: USB disconnect, device number 7
[   42.264115][  T375] usb 1-1: Invalid ep0 maxpacket: 32
[   42.269622][  T375] usb usb1-port1: attempt power cycle
[   42.354177][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   42.490847][  T977] pim6reg1: entered promiscuous mode
[   42.496246][  T977] pim6reg1: entered allmulticast mode
[   42.504123][    T9] usb 3-1: Using ep0 maxpacket: 32
[   42.510928][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   42.519348][    T9] usb 3-1: config 3 has an invalid interface number: 242 but max is 0
[   42.527577][    T9] usb 3-1: config 3 has no interface number 0
[   42.533670][    T9] usb 3-1: config 3 interface 242 has no altsetting 0
[   42.542152][    T9] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[   42.551235][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.559518][    T9] usb 3-1: Product: syz
[   42.563688][    T9] usb 3-1: Manufacturer: syz
[   42.568332][    T9] usb 3-1: SerialNumber: syz
[   42.620283][  T375] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   42.644492][  T375] usb 1-1: Invalid ep0 maxpacket: 32
[   42.774149][  T375] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[   42.793835][    T9] ums-karma 3-1:3.242: USB Mass Storage device detected
[   42.804480][  T375] usb 1-1: Invalid ep0 maxpacket: 32
[   42.809978][  T375] usb usb1-port1: unable to enumerate USB device
[   42.823866][  T999] tmpfs: Bad value for 'huge'
[   42.845122][    T9] usb 3-1: USB disconnect, device number 9
[   42.871468][ T1006] netlink: 'syz.3.245': attribute type 58 has an invalid length.
[   42.886273][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'.
[   42.895550][ T1006] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000400c630e not found
[   42.903817][ T1006] rust_binder: Write failure EINVAL in pid:96
[   43.154120][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   43.315192][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[   43.323405][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   43.332574][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.340654][    T9] usb 3-1: Product: syz
[   43.344892][    T9] usb 3-1: Manufacturer: syz
[   43.349500][    T9] usb 3-1: SerialNumber: syz
[   43.556672][ T1003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.556724][ T1003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239
[   43.568966][    T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[   43.593265][    T9] usb 3-1: USB disconnect, device number 10
[   43.600921][    T9] usblp0: removed
[   43.614421][ T1016] fuse: Unknown parameter 'roo�?oʘ^HM��etmode'
[   43.802799][ T1025] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.804019][ T1024] rust_binder: Error while translating object.
[   43.810592][ T1024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   43.816943][ T1024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221
[   43.875578][ T1032] /dev/nullb0: Can't lookup blockdev
[   44.084104][  T375] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   44.235168][  T375] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   44.244902][  T375] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   44.254593][  T375] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.268852][  T375] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   44.277935][  T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.285946][  T375] usb 2-1: Product: syz
[   44.290114][  T375] usb 2-1: Manufacturer: syz
[   44.294738][  T375] usb 2-1: SerialNumber: syz
[   44.501531][  T375] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   44.586490][ T1043] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0
[   44.586511][ T1043] rust_binder: Error while translating object.
[   44.595234][ T1043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.601424][ T1043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137
[   44.702886][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   44.702904][   T36] audit: type=1400 audit(1752077229.810:306): avc:  denied  { read write } for  pid=1029 comm="syz.1.255" name="lp0" dev="devtmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   44.732253][ T1030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.751643][ T1030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.771008][   T36] audit: type=1400 audit(1752077229.840:307): avc:  denied  { open } for  pid=1029 comm="syz.1.255" path="/dev/usb/lp0" dev="devtmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   44.801645][   T36] audit: type=1400 audit(1752077229.840:308): avc:  denied  { ioctl } for  pid=1029 comm="syz.1.255" path="/dev/usb/lp0" dev="devtmpfs" ino=465 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   44.854454][ T1063] rust_binder: Error while translating object.
[   44.854502][ T1063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   44.861295][ T1063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113
[   44.939291][   T36] audit: type=1326 audit(1752077230.050:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f738e929 code=0x0
[   44.974581][ T1070] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.040437][ T1066] 9pnet_fd: Insufficient options for proto=fd
[   45.104102][  T375] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   45.255227][  T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.265392][  T375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.275169][  T375] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   45.284250][  T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   45.292240][  T375] usb 3-1: SerialNumber: syz
[   45.300686][   T63] usb 2-1: USB disconnect, device number 3
[   45.309805][   T63] usblp0: removed
[   45.324775][   T36] audit: type=1400 audit(1752077230.440:310): avc:  denied  { read } for  pid=1092 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.344034][   T36] audit: type=1400 audit(1752077230.440:311): avc:  denied  { write } for  pid=1092 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.394119][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   45.458809][   T36] audit: type=1400 audit(1752077230.570:312): avc:  denied  { bind } for  pid=1094 comm="syz.1.279" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   45.480023][   T36] audit: type=1400 audit(1752077230.570:313): avc:  denied  { name_bind } for  pid=1094 comm="syz.1.279" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   45.502337][   T36] audit: type=1400 audit(1752077230.570:314): avc:  denied  { node_bind } for  pid=1094 comm="syz.1.279" saddr=fe80::11 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   45.502499][ T1059] netlink: 124 bytes leftover after parsing attributes in process `syz.2.266'.
[   45.536761][ T1059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   45.568442][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.578264][    T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   45.587384][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.598097][  T375] usb 3-1: USB disconnect, device number 11
[   45.606035][    T9] usb 4-1: config 0 descriptor??
[   45.724175][   T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   45.765599][   T36] audit: type=1400 audit(1752077230.880:315): avc:  denied  { create } for  pid=1097 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   45.874190][   T31] usb 2-1: Using ep0 maxpacket: 32
[   45.884814][   T31] usb 2-1: config 2 has an invalid interface number: 185 but max is 3
[   45.894657][   T31] usb 2-1: config 2 has an invalid interface number: 10 but max is 3
[   45.908529][   T31] usb 2-1: config 2 has an invalid interface number: 204 but max is 3
[   45.917014][   T31] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[   45.931191][   T31] usb 2-1: config 2 has an invalid interface number: 82 but max is 3
[   45.941014][   T31] usb 2-1: config 2 has no interface number 0
[   45.947423][   T31] usb 2-1: config 2 has no interface number 1
[   45.953735][   T31] usb 2-1: config 2 has no interface number 2
[   45.960073][   T31] usb 2-1: config 2 has no interface number 3
[   45.968523][   T31] usb 2-1: config 2 interface 185 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   45.982171][   T31] usb 2-1: config 2 interface 185 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   45.993201][   T31] usb 2-1: config 2 interface 10 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[   46.004156][   T31] usb 2-1: config 2 interface 10 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   46.015063][   T31] usb 2-1: config 2 interface 10 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   46.016629][    T9] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[   46.028270][   T31] usb 2-1: config 2 interface 204 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[   46.044439][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0xF, skipping
[   46.050374][    T9] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[   46.062966][    T9] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[   46.063379][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0x4, skipping
[   46.070494][    T9] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[   46.088778][    T9] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[   46.096955][    T9] dragonrise 0003:0079:0006.0002: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[   46.109762][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0x1, skipping
[   46.118680][    T9] dragonrise 0003:0079:0006.0002: no inputs found
[   46.126355][ T1114] rust_binder: Write failure EINVAL in pid:171
[   46.127361][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[   46.134095][    T9] dragonrise 0003:0079:0006.0002: force feedback init failed
[   46.144895][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0xE, skipping
[   46.168959][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0x1, skipping
[   46.180215][   T31] usb 2-1: config 2 interface 204 altsetting 128 has a duplicate endpoint with address 0x5, skipping
[   46.191314][   T31] usb 2-1: config 2 interface 82 altsetting 1 endpoint 0x3 has an invalid bInterval 50, changing to 9
[   46.194314][ T1116] binder: Bad value for 'defcontext'
[   46.202433][   T31] usb 2-1: config 2 interface 82 altsetting 1 has an invalid endpoint descriptor of length 2, skipping
[   46.219016][   T31] usb 2-1: config 2 interface 82 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 1
[   46.234486][   T31] usb 2-1: config 2 interface 185 has no altsetting 0
[   46.235912][    T9] usb 4-1: USB disconnect, device number 8
[   46.241459][   T31] usb 2-1: config 2 interface 204 has no altsetting 0
[   46.256473][   T31] usb 2-1: config 2 interface 82 has no altsetting 0
[   46.265307][   T31] usb 2-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=42.b2
[   46.284159][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.292170][ T1122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:173
[   46.292488][   T31] usb 2-1: Product: Е
[   46.310000][   T31] usb 2-1: Manufacturer: 賤螚缷륦퓳櫴惩啪읳н獃㔮۾␀瞀ᒕᐉﺦ옇皳㕄ᘍᢂ뜰뾿씕⮢晑୿↍ᱤ⬲켺䃴᭝᭾鍁鍛殅睓穉䏚啑⌯虦휬䟍ౠ濐韔卢腛ﶱ芎ꢀ婇淾ワ籊兡ᾈ獩덟균롈磷履膍ဏ틑醸珓柣᳛䗻籼䢉ﲾ⏘皼ꊞ꜉䓥啥菸墴ﱴϵ䦲
[   46.342886][   T31] usb 2-1: SerialNumber: 굋䡵ꮍྲྀ໹᫒ᳵ汙킽㎈㺒⿾氓䑍뻌蝜㟘ヿ澁緱贖刔儼涞蟹怈潸螱⫛絼濄ⰵꃘౣ풳싣琌쟔׭췅ꋌ掬빦珚ᑨ＆ᑇ⢙ᱛ鋄䳋曘썲⽕䞽⟓츝瑭辰᣹爹⏅蹏쫯ﬧ埆궐ᛚ儭䪏㰇넹맢ᑽ貁錞踪궮⹵ҁ᛫␚꣚遞獹쌮䚻銊ⵜꊛ퀖槺ퟶ࿕疔⬗隫ﾝ담
[   46.346719][ T1120] rust_binder: Error while translating object.
[   46.375605][ T1120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   46.382047][ T1120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:253
[   46.386686][   T31] usb 2-1: rejected 1 configuration due to insufficient available bus power
[   46.410862][   T31] usb 2-1: no configuration chosen from 1 choice
[   46.432463][ T1126] rust_binder: Error in use_page_slow: ESRCH
[   46.432485][ T1126] rust_binder: use_range failure ESRCH
[   46.438704][ T1126] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   46.444237][ T1126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   46.452316][ T1126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:177
[   46.487707][ T1132] binder: Unknown parameter 'fscontext?}'
[   46.724111][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   46.774179][   T63] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   46.885551][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   46.897819][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   46.906341][    T9] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[   46.916239][    T9] usb 3-1: config 8 interface 0 has no altsetting 0
[   46.924502][    T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   46.933577][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.943840][   T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.957859][   T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   46.962399][ T1153] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=1153 comm=syz.3.304
[   46.966855][    T9] usb 3-1: Product: syz
[   46.991031][    T9] usb 3-1: Manufacturer: syz
[   46.995700][    T9] usb 3-1: SerialNumber: syz
[   47.000352][   T63] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   47.009821][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   47.018099][   T63] usb 1-1: SerialNumber: syz
[   47.214115][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   47.225941][    T9] usb 3-1: selecting invalid altsetting 0
[   47.226261][ T1138] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 18446744073709551611)
[   47.231692][ T1138] rust_binder: Error while translating object.
[   47.237631][    T9] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12
[   47.244006][ T1138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.252192][    T9] usb 3-1: USB disconnect, device number 12
[   47.265519][ T1138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185
[   47.271880][  T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.300193][   T63] usb 1-1: 0:2 : does not exist
[   47.311277][   T63] usb 1-1: USB disconnect, device number 8
[   47.365197][   T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.375353][   T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   47.384252][   T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   47.398496][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.407593][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.415619][   T31] usb 4-1: Product: syz
[   47.419777][   T31] usb 4-1: Manufacturer: syz
[   47.424427][   T31] usb 4-1: SerialNumber: syz
[   47.632859][   T31] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[   47.640512][   T31] cdc_ncm 4-1:1.0: bind() failure
[   47.646605][   T31] usb 4-1: USB disconnect, device number 9
[   47.886178][ T1168] rust_binder: got new transaction with bad transaction stack
[   47.886199][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194
[   47.893891][ T1168] rust_binder: Write failure EFAULT in pid:194
[   47.915805][ T1170] syz.0.311 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   48.218622][ T1194] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27666 sclass=netlink_xfrm_socket pid=1194 comm=syz.3.319
[   48.480961][   T31] usb 2-1: USB disconnect, device number 4
[   48.531370][ T1209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   48.531400][ T1209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233
[   48.802121][ T1225] overlayfs: failed to resolve './file0': -2
[   48.843178][ T1229] netlink: 168 bytes leftover after parsing attributes in process `syz.1.331'.
[   49.184070][   T63] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   49.194731][ T1254] overlayfs: failed to resolve './file0': -2
[   49.315856][ T1263] overlayfs: failed to resolve './file1': -2
[   49.335430][   T63] usb 1-1: unable to get BOS descriptor or descriptor too short
[   49.345564][ T1265] 9pnet_fd: Insufficient options for proto=fd
[   49.353397][   T63] usb 1-1: not running at top speed; connect to a high speed hub
[   49.364397][   T63] usb 1-1: config 225 has an invalid interface number: 249 but max is 0
[   49.373102][   T63] usb 1-1: config 225 has no interface number 0
[   49.379599][   T63] usb 1-1: config 225 interface 249 has no altsetting 0
[   49.388210][   T63] usb 1-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00
[   49.397518][   T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.405663][   T63] usb 1-1: Product: syz
[   49.410109][   T63] usb 1-1: Manufacturer: syz
[   49.414964][   T63] usb 1-1: SerialNumber: syz
[   49.584035][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   49.652674][ T1272] fuse: Bad value for 'fd'
[   49.674003][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   49.731526][ T1275] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   49.735127][   T31] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[   49.748828][   T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   49.760369][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   49.771271][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   49.782453][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   49.795371][   T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   49.804467][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.813471][   T31] usb 2-1: config 0 descriptor??
[   49.818761][ T1266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   49.835345][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   49.843485][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   49.851925][    T9] usb 3-1: config 8 has an invalid descriptor of length 191, skipping remainder of the config
[   49.862290][    T9] usb 3-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.875251][    T9] usb 3-1: config 8 interface 0 has no altsetting 0
[   49.883435][    T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   49.892561][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.900593][    T9] usb 3-1: Product: syz
[   49.904897][    T9] usb 3-1: Manufacturer: syz
[   49.909513][    T9] usb 3-1: SerialNumber: syz
[   50.033724][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   50.040635][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   50.054692][   T31] usb 2-1: USB disconnect, device number 5
[   50.061118][ T1278] rust_binder: Error while translating object.
[   50.061150][ T1278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   50.067541][ T1278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276
[   50.144201][  T375] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   50.150821][ T1285] overlayfs: failed to resolve './file0': -2
[   50.181341][ T1270] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   50.182692][ T1287] overlayfs: failed to resolve './file1': -2
[   50.293951][  T375] usb 4-1: Using ep0 maxpacket: 16
[   50.300356][  T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.310541][  T375] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[   50.322561][  T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.324800][ T1295] SELinux: security_context_str_to_sid (sytem_u�Gй�:��aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa) failed with errno=-22
[   50.349116][  T375] usb 4-1: config 0 descriptor??
[   50.383895][ T1300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'.
[   50.393807][ T1300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   50.393834][ T1300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:298
[   50.421632][ T1302] bridge0: port 3(veth0_to_bridge) entered blocking state
[   50.438126][ T1302] bridge0: port 3(veth0_to_bridge) entered disabled state
[   50.445341][ T1302] veth0_to_bridge: entered allmulticast mode
[   50.451773][ T1302] veth0_to_bridge: entered promiscuous mode
[   50.457778][ T1302] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   50.470118][ T1302] bridge0: port 3(veth0_to_bridge) entered blocking state
[   50.477280][ T1302] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   50.481031][ T1303] overlay: ./file0 is not a directory
[   50.495300][ T1302] 9pnet_fd: Insufficient options for proto=fd
[   50.581319][ T1305] overlayfs: failed to resolve './file0': -2
[   50.758916][  T375] wacom 0003:056A:032C.0003: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0
[   52.015543][   T63] usb-storage 1-1:225.249: USB Mass Storage device detected
[   52.024622][   T63] usb-storage 1-1:225.249: Quirks match for vid 0781 pid 0001: 1
[   52.068551][   T63] usb 1-1: USB disconnect, device number 9
[   52.086582][ T1317] tipc: Started in network mode
[   52.091509][ T1317] tipc: Node identity 967b7ca183b3, cluster identity 4711
[   52.098903][ T1317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.106680][ T1317] tipc: Disabling bearer <eth:syzkaller0>
[   52.299621][ T1333] overlayfs: failed to resolve './file1': -2
[   52.397328][    T9] usb 3-1: selecting invalid altsetting 0
[   52.409135][    T9] usb 3-1: USB disconnect, device number 13
[   52.563660][   T63] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   52.677101][  T375] usb 4-1: USB disconnect, device number 10
[   52.693616][ T1344] incfs: Options parsing error. -22
[   52.693895][   T63] usb 1-1: device descriptor read/64, error -71
[   52.698879][ T1344] incfs: mount failed -22
[   52.769462][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   52.769479][   T36] audit: type=1400 audit(1752077493.884:326): avc:  denied  { create } for  pid=1350 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   52.794178][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.806846][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.818956][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.830987][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.843083][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.855088][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.867190][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.879192][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.891259][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.903267][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   52.952557][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[   52.985602][   T36] audit: type=1400 audit(1752077494.104:327): avc:  denied  { setopt } for  pid=1352 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   53.026813][ T1359] overlayfs: failed to resolve './file1': -2
[   53.050190][ T1361] overlayfs: failed to resolve './file1': -2
[   53.223582][  T375] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   53.257360][   T63] usb 1-1: device descriptor read/64, error -71
[   53.363649][  T375] usb 3-1: device descriptor read/64, error -71
[   53.633514][  T375] usb 3-1: device descriptor read/64, error -71
[   53.675540][   T63] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.743484][ T1381] overlayfs: failed to resolve './file1': -2
[   53.817335][ T1383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311
[   53.848267][ T1385] overlayfs: failed to resolve './file1': -2
[   53.875065][   T63] usb 1-1: device descriptor read/64, error -71
[   53.903507][  T375] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[   54.043478][  T375] usb 3-1: device descriptor read/64, error -71
[   54.156717][   T63] usb 1-1: device descriptor read/64, error -71
[   54.233451][   T31] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   54.276864][   T63] usb usb1-port1: attempt power cycle
[   54.293439][  T375] usb 3-1: device descriptor read/64, error -71
[   54.373430][   T31] usb 2-1: device descriptor read/64, error -71
[   54.403551][  T375] usb usb3-port1: attempt power cycle
[   54.522920][ T1406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   54.633377][   T31] usb 2-1: device descriptor read/64, error -71
[   54.633377][   T63] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   54.687247][   T63] usb 1-1: device descriptor read/8, error -71
[   54.890099][   T63] usb 1-1: device descriptor read/8, error -71
[   54.966806][  T375] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[   55.046859][   T31] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[   55.185671][   T63] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   55.223037][  T375] usb 3-1: device descriptor read/8, error -71
[   55.264437][   T63] usb 1-1: device descriptor read/8, error -71
[   55.397649][   T31] usb 2-1: device descriptor read/64, error -71
[   55.490552][   T63] usb 1-1: device descriptor read/8, error -71
[   55.673690][   T63] usb usb1-port1: unable to enumerate USB device
[   55.881077][  T375] usb 3-1: device descriptor read/8, error -71
[   56.186711][   T31] usb 2-1: device descriptor read/64, error -71
[   56.266302][  T375] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[   56.904768][   T31] usb usb2-port1: attempt power cycle
[   57.534352][  T375] usb 3-1: device descriptor read/8, error -71
[   57.803023][    C1] net_ratelimit: 73096 callbacks suppressed
[   57.803044][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.803198][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.809155][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   57.821031][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.833034][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.846813][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.856937][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   57.868795][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.880754][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.893042][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   58.673849][  T375] usb 3-1: device descriptor read/8, error -71
[   59.258186][  T375] usb usb3-port1: unable to enumerate USB device
[   62.812363][    C1] net_ratelimit: 93019 callbacks suppressed
[   62.812396][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.812666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.818524][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   62.830400][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.842410][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.854632][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.866291][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   62.878149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.890132][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.902381][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   63.520522][ T1004] sched: DL replenish lagged too much
[   67.821776][    C0] net_ratelimit: 90971 callbacks suppressed
[   67.821799][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.821855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.827809][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.839863][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   67.852024][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.863636][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.875612][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.887647][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   67.899785][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.911403][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.831166][    C1] net_ratelimit: 90687 callbacks suppressed
[   72.831190][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   72.831407][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.837222][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.849213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.861249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   72.873328][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.884977][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.896951][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.908980][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   72.921080][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.840559][    C1] net_ratelimit: 90169 callbacks suppressed
[   77.840581][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.840656][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.846630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   77.858543][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.870497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.882737][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.894411][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   77.906258][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.918224][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.930489][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.849945][    C0] net_ratelimit: 92121 callbacks suppressed
[   82.849971][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.850001][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   82.856196][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.868223][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.880242][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.892183][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   82.904105][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.916042][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.928007][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.940005][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   87.859321][    C0] net_ratelimit: 90018 callbacks suppressed
[   87.859343][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.859375][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   87.865585][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.877268][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   87.889336][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.901214][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   87.913368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.925053][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   87.937003][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.949067][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.868776][    C1] net_ratelimit: 84848 callbacks suppressed
[   92.868799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.868859][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.874841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.886977][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.898669][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   92.910576][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.922420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   92.934634][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.946373][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.958349][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   94.311503][   T36] audit: type=1400 audit(1752077535.369:328): avc:  denied  { append } for  pid=1417 comm="syz.1.402" name="001" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   95.511691][   T36] audit: type=1400 audit(1752077536.460:329): avc:  denied  { mounton } for  pid=1419 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   97.878139][    C1] net_ratelimit: 85800 callbacks suppressed
[   97.878161][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.878379][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.884182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.896125][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.908003][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   97.920173][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.931885][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[   97.943880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.955815][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.968133][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   98.099188][   T36] audit: type=1400 audit(1752077539.210:330): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1913]" dev="pipefs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  102.887571][    C1] net_ratelimit: 88871 callbacks suppressed
[  102.887592][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  102.887640][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.893667][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.905696][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.917583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.929697][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.941452][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  102.953321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.965278][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  102.977529][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.896932][    C1] net_ratelimit: 88147 callbacks suppressed
[  107.896955][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  107.897117][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.903002][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  107.914978][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.926999][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.939230][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.950868][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.962782][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.974690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:1e:05:05:e3:f4, vlan:0)
[  107.986775][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)