last executing test programs:

33.310457217s ago: executing program 0 (id=2531):
prctl$PR_MCE_KILL_GET(0x22)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x1103ff, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10140, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/103, 0x67})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10b880, 0x0)
pidfd_send_signal(r2, 0x2, &(0x7f0000000080)={0x22, 0x1, 0xfffffffe}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"})

31.680419761s ago: executing program 0 (id=2567):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r2, 0x111, 0x81, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmmsg$inet6(r3, &(0x7f0000001540)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000140)="c99734d89fc7c12818f11ab8dce6c00ac2a008a66bc1b9adcf8ac9a4e8e31b51392583c7635c1135553ba98af90208e3", 0x30}, {&(0x7f0000000180)="db4da3266ab5180df9a459ae1ec0c9df0caa80715bf16bacad2a42ff42872a3a5c85f49fdf5b5d60e4314fcca935f7068d3114f5abe4eb5c00cd48899ab323ba0392c68f656ac383dcf925310038c94acad26216c7d77437cfbfa8920c26eb1e714e5a7373078e9fb533907976992a41f4d836f3a4540c7667295dc51133228a68915496ae6d7d6cf7d5609d65b06bcbcde91b123ae0a22954bf307fb66a03353f035fa0e44b3c7454be0bb3aaa787015bd32fb77c83926eca1d8e7088605ac21a", 0xc1}, {&(0x7f0000000280)="9bfb1fe8d001db061f17ab6956f4ba73a26d492cf9a101c12771ebd01f8c3ed6805887acffee64fff67f2b51532b13325bb66ae3bcf2a1c2d3fdc81852a5dbeab82081c1e90a13a3cf66a2394c23fc923bc052d95490287de9440292ec02d16d5c91db0c0ff9a375434414cdfbd19a7968f33b77ca10178ca5c5ad3a7ea384b36e73824df85cf5c060324369e31efd9d4d63f39357931ab415afe426a6d45ab8d4b1025050e928758ab8f11dca777524ccff7ea32e652009340c1bb8062eba52e4f69c90b9e540ac7ff123c4fdb006b15ac6d75e972dbb595551a3419e2e89a3a922f4dbfcdaf30ad513ece170b7f617e364a06217843a9e545920dd5a06045e1ccb468698d43ecc3ba9433318272d0e925cbf8dd8bd5dc32683e2b643a49da82dde6382fa4ec14dda4a55644b0115627f2b21d1b7c69f8571f142a2f1de9cfb983e9d11bfe2ffdc0a8041aedb39a02a3baa9d8c7ed245a555db0743d4117877791510a77fed7558478079db31b3c3fa864dac94e8f5baad37e34cbb39bc8a4749f3bde05fad2c68c5ca48759edab4b909a91c0d46fb65d88516f41eb7864468526670ed38b0423874de8ef0d02746b5aa405eaf7a93e86bfdb4f34ea3be165480296063d57d31ca3e2c12a8ea1a236537d0539d5d016fda60a2ab2657c3406b1b1d49b457bc5ebc921e9b6e130045507a1e5ac39ba56dff31c1325d2fcb2a691f72035695a7feb1377f9b14b691faa9b32941adaff69950005e33abc56dbedb7c0fc9b763385bc373914eaf9f5eb7d889d007b8422acd77b7de7f9568aba2f9aebc9f758fc27a4a2df9f29d752095197e2bad682e4e53883c64425c10f1723b255b926d8d59d965bc01455e378e841ae5c2410a4881af9dc9325198676f8a44530efaab824df5b02d63359fe64defe5feb3d679d2016fff658ee39b1b79c46cda8b6b0517599e343f274f4041b3197f29a53fc57d612e2b7d76717bf3a295a247864d6da91e082caf1281ee1f3e387e47bca02a74ec0ad68fec66904c6fcd91d8ba1d4cf952c1cf0ca30b8f4555608ecf0eb1a1477170746b774542426eb919027c6faaadc41af7b723defcd4a5f0f6699e1532bbb6b132bd5237a14371e4df9f50b9fa93efa318412422315ccc1e19a1536d60e51f92b01417d3edde280161fa7dab03933535a38aa3c0f04c5ec2865d4e1fb6faca61cea34dd74ca47a7fb2e4c4b1463c6d1b8e3180985b833d000498e5e96b2aeb1dffe89eb78803d536b2f849453c580ace8ae71f979d9a7cd20a6f74dfb17222d366a16f05277d834887249bc5965cd2dd7980a73cbfd4bba400177717ead85dfff410476b2451b92b93953a4cbfb3f3b975acf651a32fb79c1beff31a356263cc400ffbcdbaaba9858171049cffd8a054d0a1d861046b0028d73bf5c764475e2b47e601c2c3158abdb3f440fcea5289aae553fa68156a88246459602ce93e952f17acab7182bbebf97020c902ebb0ec81f05ed0fb22bc66d61caff3ed17fc02ca03baed4b79f49d383937eb07c51c44db24cfb085e7ee23797c80554047a800356664bc01f0bb76c8e1f861a4b55ef87c984d3f628ede9e2333db2572603cd5bd1ced652b5dc842187c14619c4ca386ae9191364e57e7bbadbf82000187662682866967b400483d7580c60eea6f74ec6d0160940d7b47139dc7b3d203f3e5af5a19dec3034db047f7c95baae5a444b1c2bbf555a5a2b2d6d41155d6449541629083a7fd8fb813b9fbef29e99f9d835814faa4459bb4079a8f8435487e6f0147a0ba5e84737c7e2f6d0362a7fbdfbee6936b6f364103772f09e75934057a4b80b4275bc4755bb7002b6beaa6cdd50747c2df292d9990c0f36a412cc0f476d7bac311dcc56148918af8afd6cc3fe769bed1d7a7c67c90ce552b0748e88c4e378db8479c14f3c755a73c7bf9efffed0bc3f8ed8943b9d595ab6d31800e94606c0f2b3aeb85e1a5ffc27dc38395200550dfedfe400f968829e75bbad082c1826b3636c2a865232c80e91ca73c2e0494bd9cca0c2a2957015e0ac3d3cfe6c5e53ad5bb114f38e1b2f6c7c6818c64183f60003e8c99761f878bb14c90af4415108f62b1aa59acdda877e888cd5a9a129ca00fed77a23f9a2a35e5c46a64099b11c057bfb66aaa6c19385022b41ffadfda42dec121629b4348382230847b7992d33dbddaa3b2da5a93bca2c29e21a6f4b86d05f5611dad67a412541b1a5f04dc3039d487d1dbf7e8443a4675dc46c9c0cc172c8b65e93ecacc48ba6134a59e3086469505b8d8698a921a8c09204744d3ded8e1720b42042a5d50790c96dc25d93e833bdaa498fac575c18f1c8dfb82f9454dedff8a0ae7a89d0cd6de2cb671ac1c081ae3a8ec8b898a25622092a5d748dec6475b06732d4c124ff9659dfc7d75ad95f2022ec92b19137827ecbc34749b23ddb66d0950b1c6bf5119faa1a7ffc555151d1d2bf2c5d4e7c9a42d60f14b90b9963ef342e1a804c46324a80acd5c2279c3229556de573fe267aa668a794f780ffe2d581f4a7726b42dd517d58623edc4899df89fe565e9f48f30ec8b2f601ed785ff78d0f9577c0c6991b41775653b351bfd889d5ead667a5e0d444504fea260894dce2c1777abf0dfc9caaa24c438c113b8e7e9e95dba48fcb6bdc4dca07eef6dda0074ee1a6d01c1247362544dbf1f5f8d09cecfb75fe15e7be4f63da9fae085451b04d2318b86682bd0494eeff8d10010fedc4f6b2f39280585b5f9f55816dad9f18b6f681c58e05169697b31267f6c7e8ef71b66f5a1ba8c755e8dfc6a80708de08c718301aebee6596ccac9d4073309f0588e3157c582cfdc7e36c7051535021c5d3a884efecf255efee3b3cdfcefcd019ba705d484ad80cce438d1f0df158d2ebf7f36589eed2a7e36713e34b3e5b93ea7572b2a1c7bf357a3399f624ec5c729911504ed74a5dbc09bcf4470ae3936aad27cd600f4f5f25e0eb28802db4408742bdcf9d79b602278a94ea01062b8480338d68390e441027deaa4039f7ba0d5d949852da5f36b2c3a383d6e73bbac477db34e49ad2aa483c3940848062c2454ee277b375c7236799644fb19da33b40d17f6fbba76c5ccdd0717120fbc10fd8b75e81a1a3877f48a392a542a7c9eabe092caf5f9fb36e4e972b1ae4f10ff61de89d0fb45c4451ac6235184663beebb4b31788737f8c23edb7355eec40e21f53393fb3f37cf649b61fc93efe2e40d3018ab09e9c4137460efb703d62b9294434ad474c8f417247e131dc962ae7e86d118bcf8eb9949d1c5dae7b3aa0d62116952c28f591eeb7b357694fea2fff4776ce2f21b57eaebb719d33cb1e760fd07ec2c798c7a819b64199dfd2b6ad402c5fdda5e53821cdb3e46c7adf2f8c7af0e9010684eb0fc38bdb958d7040d91c829189874bfaf6f21352358b869995c45f9bb2417770bcb5617bb589b38f9447e2129acf24cd4e1b2bb807bbf9a439d7a638183392e6da7ab558f97872bdc4bd1cfc8e5755f46d563342db24e16cbd219e978ac5481e462fbbc5a584bc7ff6d6e6f8c6bac59885a2722c1ffbc60fb7f46c033d74f03aa12bd60ed0e24c245e7950e32f410e3676f70f86a2116f58948f8bfe622a41a72051cf3c5c9593335fcabfe12d141efdabe95d1b0f372abc6cd2eef13b2a42e7bec4708b71f47b27c7f15961b5aab51c1b1e46d4a12f4cbc6a714297a89402da4a5e8badc77d11f65b45dedd5eec821914e0549e4e68235fd5bb318532c9ade89dbbac969c4fd1e302c7a95c7cfb8bf7ada18b3b110fc11a370e08df142298ac39ce4c610e3f388ae0a0a7f2f65f7944d0bbf4c0919664ec1fc20c2299ed7cf45ab7c12ddf8240d3b53ff32ac84bb0fb2fe8cec570c812c2f7bc671a5a22efa8cecc8cf6168eb8c843e8ec631f65fa3ca918c9f401eec5410059992c47a922891e5cd5d9c5743b779d6b2fbcd4bcd4bbe21d88a3ef42637d201f79399a8dd2afe9fe66582a34c6b2006e7a49f79ec99146d3b01dc387b078245fc0ddc9ca23c349e04b097d345f61101bbea3a452a2c6573ae85e32b7435768aa10acaae55eb8890167fce46a6e4aeaab54542269229f1b81a48aa947ba74bf749a037a9629115a972835c02afe5e37ce185300f258577d3ac80a35077a82b933ee4e88a5e12de65564e2a460f9f1097e84c6fe35e8174af53fd994c95dae8ac12f7aba9f17115e86fd8e90645d123c3c21e9c88f25aeb21eac2d98aeb1cd5eb62904314d36b0beabc45452f108ebef7a4df091961dd69ad21eb2719d284e8ca3749ea496d6a6e20a947f8dc57e6988e26c33fb6c7660943a04dd95bf28754f33a347e067a3bf36a766721c6200282a3d1bf780e0724ff61d41417d0b9173d39ef5f50f4fad0fb0f2a965928ff7a74f0b5887889f62a975bc1c5b05433417557c1efc18949d53e23d49b9408edb91d0c99d3ffda92bc5af98880a1e53c2f2ca7699b68e740052e0eabe01203c8b1a4f6f55b7279983d4faa7b2377cead76b2126bf437d53da071bfdb649feb02f327412a593f94db1fc4c2d3a0611e11d54725c162d6af1102275c6a30756a6cfa8f4599e7e574ca83c01b3154be6c3c422cd7dc154a36677c36a6eb5386d7a91b494f802a5ffcd34d46249e6d564241b4ff9e85952133a4247a4d7432ce1aa1818ff24967aee1ddbb762e6cb3605f2a18e3b850506117860d1286567d46fd692dda5426e6b93a162c397f57ce74a3f3507d49157661a7099310c730357d025c3e56cbff2156b097c46287ae6ab4467c0f800d8379030ab1880f65b95d1cf40bad1728538f3b8fd508f617ae1390bb3fc0ba149f337bdc04905c415e0a24ee505c35134c0915558054726a0f88188d0a4af7a004d2f814b6ccdc535b12f7bcc4be776efda53a6201a3142045be8f1420797ec84bf408947f64b0da42a1e70703c07ffc6b048869d903ba41a514c5f012b7f2d8e6d0904705df2c329e8e576e5120be0e5c0c2570bcde4fe3268fa4fe7fd5af873468b4be0eb1b29c72c8b365e2524be7ebf4797fb519d3ce4b0e7e64f58a2da1e9f510a053f3a4e60756b9a6304ddca5d6edd95471712efd48300831193e183ce469fa8ca52217f6c49dfe8532b14822281e90c384734132b3574f508745098e15ea6ac41b06e50bcfa7460b2d149ea7d0c230ca71baccb0b292b80f7b60a1515cd295b5cac8726d7ed0dab1bdc2638cd41842830004f2305676dbde068e9625739cfd0f267c649d0169b117087f3bac297c5bee3f4e289d180b672afd3a16395dbe2e833740c6e8bcdac77dce3e85189c4acf9a51da5d385ae38724373068e998d3ebc96e07126621b7188da1b6aee734584a2885548aa756165c05e50333290294e162102d9e2a47c67aa6f1a616dae173fc90ded274853dd3e7c53a29780d49c1a48b81dc763dffc079eb5f84d0c688cf69da23130ed63ac6c3f6e85d24b8bb212441d0a7181950cf07b24d628e98664465cdd9ec46b6631bdf4039314fcdb8495234e7ffc1b6648272f0d1163752f6c3cc4780913452be2f06712411cdeff832d9b6d78441222df88f213c55b5c737150cabe20447ca3cf373cd013b0c790236bf4b1711cc2266d478381c5d5a9646ca4d95d488031307b6b02d27888cbe262c870c774fb3e1fa350073d815626ac9984e048b2e5775fc4c95063d8952254b1827d42bae1cbc437ed2d8816d43b4f3ad286c1ee17222ef3a4423d89856b2b92c6d00f561a8e5ba4dd321c45d7130ce3df7e205244ee3e9d6da9b1f70", 0x1000}], 0x3, &(0x7f00000012c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x89, 0x6, 0x1, 0xa, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@pad1, @enc_lim, @jumbo={0xc2, 0x4, 0xfffffffd}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xc2}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x29, 0xc, 0x0, 0xf4, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1, @mcast1]}}}, @hopopts={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x33}}, @rthdr={{0x98, 0x29, 0x39, {0x3a, 0x10, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @empty, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x2, 0x26, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts={{0x48, 0x29, 0x36, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x6f, 0x7, [0x4, 0x2, 0x100000000, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x278}}], 0x1, 0x4008084)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0)

31.679713631s ago: executing program 0 (id=2568):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
syz_io_uring_setup(0x476c, &(0x7f00000002c0)={0x0, 0x9f8b, 0x0, 0x1, 0xc0, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000240))
dup2(r2, r1)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)
openat$procfs(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x339)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

28.688906645s ago: executing program 0 (id=2649):
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x1010000, 0x100000000})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={<r1=>0x0, 0x8, 0x1, [0x0, 0x9, 0x562, 0x7f, 0x3], [0x4, 0xa65, 0x24f, 0x2, 0x1, 0x4, 0x6, 0x794, 0x5, 0x2, 0x8000000000000000, 0x3, 0x5052, 0x57, 0xfffffffffffffffd, 0x1, 0x4, 0x8, 0xffffffff7fffffff, 0xb670, 0x6, 0x3ff, 0xffffffffffffffff, 0x1, 0xca, 0x7, 0xd15c, 0x8, 0xce, 0x3, 0x8, 0x401, 0x3, 0xd6a7, 0x7f, 0x5, 0x7, 0x8, 0x5, 0x5f, 0x18000, 0x5, 0x7fff, 0x9, 0x4, 0x5, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0, 0x1000, 0x7, 0x2aa, 0x100000001, 0x100000000, 0x100000000, 0x4, 0x7, 0x2, 0x0, 0x2b6, 0x81, 0x7, 0x34af4000000000, 0x9, 0x6, 0x2, 0x0, 0x19b800000000000, 0x100000000, 0x0, 0x1000, 0x7, 0x5, 0x9, 0x300000, 0x800, 0x8, 0x10001, 0xbcb, 0x7c, 0x8, 0x4, 0x5, 0x7, 0xffffffffffffff1b, 0x1, 0x1, 0x2, 0x1, 0xffffffffffff269d, 0x8, 0x9, 0x7, 0x1000000000000, 0x7, 0x100000000, 0xffffffffffffffff, 0x0, 0xc45, 0x1, 0x9, 0xe2, 0x7, 0x80, 0x9e9f, 0xbc0b, 0x1, 0x716b, 0x1, 0x10, 0x8, 0x1, 0x4c, 0x27, 0x5, 0x80000000, 0x3, 0x3, 0x40, 0x0, 0x6]})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r1, 0x4, 0x8})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x9, 0x0, 0x4, 0x6}, 0x4b, [0x6, 0xffff, 0x1, 0x80000000, 0x5, 0x596e198c, 0x8, 0x1, 0x0, 0x3, 0x7, 0xe, 0x2, 0x85, 0xf02, 0x7, 0xffffff9b, 0x8, 0x6, 0x3ff, 0x3, 0xa3, 0x8000, 0xfffffffd, 0x0, 0x200, 0xa00f, 0x4, 0x6, 0x6, 0xc00000, 0xbd8c, 0x4, 0xb44, 0xffffffff, 0x3, 0x9, 0x6461, 0x0, 0x5, 0xd73, 0x4, 0x0, 0x2, 0x1, 0xfffffff9, 0x100, 0x9, 0xffff0000, 0xddaa, 0x2, 0x400, 0x6, 0x5, 0xc0, 0xebb, 0x0, 0x46c00000, 0x400, 0x5, 0x8495, 0x7, 0x9], [0x80000000, 0xff, 0x7, 0x5f, 0x5, 0x5, 0x2, 0x2, 0xfffffff7, 0xc, 0x37, 0x4, 0x5, 0x3ff, 0xffffff25, 0x6, 0xfb, 0xf, 0xf, 0xff15, 0x6, 0x7, 0x0, 0x3, 0x9, 0xdd0, 0xcbcb, 0x9, 0x64, 0x100, 0x4, 0x6, 0x3, 0x5, 0x0, 0x1, 0x7a5c, 0x5, 0x5, 0x7ff, 0x6, 0xa3a, 0x2, 0x5, 0x9, 0x2, 0x8, 0x2, 0x6, 0x0, 0x4, 0x834, 0xd96c, 0x40, 0x40, 0xcee, 0x7, 0x3, 0x401, 0x6, 0x8, 0xfffffffc, 0x401, 0x1], [0x9, 0x7, 0xe7c1, 0x5, 0x5, 0x5, 0x2, 0x6ef6, 0xff, 0x200000, 0x7, 0x8, 0xc, 0x2, 0x6, 0xfffffffe, 0x6fe8, 0x6, 0x2f45, 0x2, 0x7ac8, 0x7, 0x0, 0x7fffffff, 0x8, 0xf, 0x2, 0x40, 0x2, 0x5, 0x3, 0x3, 0x4, 0xd, 0x6, 0xe, 0x8, 0x8, 0xfff, 0x7, 0x9, 0x7, 0x7, 0x5, 0xfffffbcd, 0x4, 0x0, 0xc, 0x3, 0x3, 0x6f, 0x0, 0xb, 0x2, 0x9, 0x8996, 0x7, 0xf, 0x1, 0x1, 0x8000000, 0xdb5e, 0x7, 0x8], [0x86, 0x8001, 0x40, 0xe, 0x0, 0x6, 0x6, 0x4, 0x5, 0x1, 0x3, 0x1, 0x8, 0x8, 0x4, 0x749, 0x875, 0x9, 0x4, 0x6, 0x7, 0xf, 0xfff, 0x10001, 0x0, 0x7, 0xc9a, 0x0, 0x803, 0x7, 0xff, 0x2, 0x0, 0x4, 0x10, 0x5, 0x2, 0x5, 0xfffffff8, 0x6, 0xe9c1, 0x0, 0x5, 0x81, 0x5, 0x8, 0x1, 0x7ff, 0x6, 0x7, 0x94c3, 0x80000001, 0xffff, 0x0, 0x5, 0x2, 0x153e, 0x9, 0x7fffffff, 0x0, 0x1, 0x4, 0x7f, 0x7]}, 0x45c)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20040004)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') (async)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1})

28.643393739s ago: executing program 0 (id=2650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"})

28.374754715s ago: executing program 0 (id=2653):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x7, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast}, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000006c0), 0x0, 0x2400c840)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)
recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xc8b}], 0x1, 0x120, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x34, &(0x7f0000000080)={0x1, 0x6}, 0x8)
io_setup(0xf0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='exfat\x00', 0x8080, &(0x7f00000001c0)='discard')
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$xdp(0x2c, 0x3, 0x0)
open$dir(&(0x7f0000000000)='./bus\x00', 0x400, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1028a21, 0x3)
bind$bt_hci(r4, 0x0, 0x0)
removexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00')
syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00')
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r6, 0x43403d0e, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

28.329605738s ago: executing program 32 (id=2653):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mreqn(r1, 0x0, 0x7, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast}, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000006c0), 0x0, 0x2400c840)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)
recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xc8b}], 0x1, 0x120, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x34, &(0x7f0000000080)={0x1, 0x6}, 0x8)
io_setup(0xf0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='exfat\x00', 0x8080, &(0x7f00000001c0)='discard')
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$xdp(0x2c, 0x3, 0x0)
open$dir(&(0x7f0000000000)='./bus\x00', 0x400, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1028a21, 0x3)
bind$bt_hci(r4, 0x0, 0x0)
removexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00')
syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00')
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r6, 0x43403d0e, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

3.230855964s ago: executing program 3 (id=3186):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0)
bind$inet(r2, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ubifs\x00', 0x2b02c8b, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ee}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd6}, @CTA_EXPECT_MASTER={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x55ddce86673d6fc3}}]}, @CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0xfffffffffffffe80, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x164}}, 0x4044040)

2.726963432s ago: executing program 3 (id=3190):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b0000000014001462726f0e40fe00"/42], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'wg2\x00'}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc045}, 0x4080) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket(0x1e, 0x4, 0x0) (async)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r5, 0x540b, 0x1)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x3, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101201, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r10, 0x8010aebb, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)

1.787694121s ago: executing program 3 (id=3205):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0xd, 0x4)
sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xeb6ade7891a331c4, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xeb6ade7891a331c4, 0x0)
readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) (async)
readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x1, 0x4)

1.779065932s ago: executing program 3 (id=3206):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G'])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req={0xfffffff3, 0x7, 0x4, 0x1}, 0x10)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0xf, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
pipe(&(0x7f0000000040))
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000381000000000000800008000000", @ANYRES32], 0x18}], 0x1}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2986, 0x80000004000000, 0xc], 0x80a0000, 0x2010d6})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88)
preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x71)
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1.713621538s ago: executing program 3 (id=3209):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x96)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
write(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x71ee18750e7abfcf, 0x0)
close(r3)
r4 = open(0x0, 0x70e, 0x0)
read(r4, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffe7)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x96) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) (async)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0}) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async)
write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x71ee18750e7abfcf, 0x0) (async)
close(r3) (async)
open(0x0, 0x70e, 0x0) (async)
read(r4, 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffe7) (async)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) (async)

1.611004218s ago: executing program 3 (id=3210):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a7866726d30000000"], 0x28}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x1fc, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff4a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80a0f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2952}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffffffffffcf, 0x3, 0x47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100005}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x11}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20058005}, 0x20000000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
writev(r2, &(0x7f00000020c0)=[{&(0x7f0000000cc0)="15bf9bd0cea21d905ea9be5f8113ed69a9648cd138d02974039a6f05954e5ae5be494105f444bed20e50eea1d72b2ff58f7ca8110a25cb766c14fea2bb5ddde1dcf8c865c7281ab7", 0x48}, {&(0x7f0000000d40)="628a3dd8f74fb125ac1f4a38d06fe32555480660c32c2b113c9d6ece195a2be5d379814c9861b1f1be36ece8e32f022a0d825d0ea1ebfc97b713c05ac1f84ec4d649fe1f11cd9ef83bacecfab9b4988cd1c04e3371dbdc6dd3fe938647a2c7a394b8039cfc819b08df512b2c3cae288463bce11e8ecde57ea81e1199452acc47cffdfb97bb685174a53e9f137a6326e31b2557376b1200cd734867811279b0685e2525d99a23", 0xa6}, {&(0x7f0000000e00)="29d2c55308fd4a3c9518a4383e1068a4320380f1bcae161583ee2cc0d44d86611a08a2e1b7cec705733f6385e74f5512f1f80cbde3c34041f638bbbf322d1b171258add6842120443abc5ec498c56e4e428c280a53b06d080e01cfa8eb3cbd269dbd764abe027107dd72fe9ddb60d8099b100c5399ad88d34dc1347c1c6a295f8a0910188494be7ac37aee38f2ee16cc257309feba24167729", 0x99}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="bd0ba38f3d959d698aa01ab168dc3c7cc120eff6180771ea7e91668420be6674cc2a7b46a25b46f3d9db42b0950b0a4aa452db070c6926094c206473a13dd47e0aa561ca1e784d7d069250de9fb977494298d371abb4ef7c6a19f1058e84291fc53f84d315e74b9f1903cf169eb1ae33e9149a34f66632f50cdc88a81bf4f2aa01e8f72cdccea6549159342260a92b9b4723f903b4119e44573e0d63f0209f2d601c15ab9567f2", 0xa7}, {&(0x7f0000001f80)="b04b324c778c2b80042f7f18fe2460f71dc02668eb79224804053122a1ed5e18b6229e59b1ab289610ed2e5afda1f0a6ce58e40caa1151f26fbe9733db52f1b8b3f1e6269320050a8dc417a2107389fcf273237d48947c7c9f31", 0x5a}, {&(0x7f0000002000)="e548c1f50fea16f54d8dc2469a3068dcc6a478feb3e8907d25d7fa5a6ad586044c8d61e05dd4e3f6321a01db480adb31e6724c98a2b756ad6905b47cc3231e02afc9aca6a7ee81f817af7f0b0716591f4eded3d26216e98deb97011e842bec4b31a24651bc4e6df2df3bd6bffbdd9ed399cdc70a4b5f04df48b2bae3b3111d57a94260dceb6ade5df3f7d585a74322b954b25f3c5130b0dadb", 0x99}], 0x7)
r5 = dup3(r4, r1, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x6}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
r6 = syz_clone(0x800, &(0x7f0000000000)="a4c4d1b73839d33fea0bf4cf13d62f231988", 0x12, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="a3683e1e6759a3269e31a73d134a71af4cab")
ptrace$peekuser(0x3, r6, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x3, 0x7, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x64, 0x0, 0xec, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x17, 0x9a, [@multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x9, "f2b63c737ce8e6"}, {0x0, 0x3, '>'}, {0x2, 0xa, "e5e31de5f9251d75"}]}, @timestamp={0x44, 0x8, 0x29, 0x0, 0xf, [0x80000000]}, @cipso={0x86, 0x26, 0x3, [{0x1, 0x7, "7dec6c8986"}, {0x1, 0x9, "ffc4266f1d4614"}, {0x2, 0x10, "20c03c946fc0a6d1f0a36c644c6e"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0xfb, 0xc, 0x5f7f, 0xb, @remote, @local, 0x7, 0x7, 0xc06, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000880)={'wg2\x00'})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x2a)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002140)={'vxcan1\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000002180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x13, r10})
sendmmsg$inet6(r9, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="9fd49c72cdfcdd0058e4905dbc8395d693a7b22419", 0x15}, {&(0x7f0000000240)="ecda8fb871a9a60db4fc852ff5410a85e4ab23f58da765e11f633bcfb06aec566135472b6d3b35cb3975e0a6ccea86297d061203012907d94e426aeb1c8b765e8d61d44287", 0x45}, {&(0x7f00000003c0)="dc79426305908a6e7d1dfae16dda45893b311392d3e28163a641ce08569caf25f505c23f15e06fe3996135224a27b3c70cc569fba7227813ccc9b277c118ee55ab9d729903", 0x45}, {&(0x7f0000000580)="fd8fa48e7afbd5f66abaf4ecc030d783d12ebb100c69f2bb7d6ce2be381cbb8467649c8da719f34f201e5dec7305e95fc4ad2b7235ca26b32c3823c286f9c01231441525cdcc532e11a057ceaea5ac33f0c597ec9b78841129f0d3ceab", 0x5d}, {&(0x7f0000000300)="ceae64652dbcfafeb54475d62c478fafa12c8f2068571db4caa76924d7a5597e2f1bd7339c9f0c9ba6a2597cfe", 0x2d}], 0x5, &(0x7f0000000b40)=ANY=[], 0x80}}], 0x2, 0xc8040)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6)

859.190049ms ago: executing program 4 (id=3221):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000003000), 0x201, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x10000) (async, rerun: 64)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x2) (async, rerun: 64)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001040)={0x0, 0x0, 0x7fffffffffffffff}) (async)
read$FUSE(r3, &(0x7f0000001100)={0x2020}, 0x2020) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000001000)=0x3)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

857.482009ms ago: executing program 4 (id=3222):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0xf)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040), &(0x7f0000000080)) (async)
ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000140)={&(0x7f00000000c0)=""/112, 0x70}) (async)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
getgroups(0x1, &(0x7f00000001c0)=[<r2=>0xffffffffffffffff])
fchown(r1, 0xee01, r2) (async)
r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x1)
r4 = open_tree(r3, &(0x7f0000000240)='./file0\x00', 0x0)
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000280)) (async)
inotify_init1(0x80800)
inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x82000000)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x18c, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c009fdd}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8}, 0x20000001)
timerfd_gettime(r3, &(0x7f00000005c0))
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000640)={r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, 0xc) (async)
read$FUSE(r3, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
getgroups(0x3, &(0x7f00000026c0)=[r2, r7, r2]) (async)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002700)={{{@in6=@local, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e24, 0x5, 0xa, 0xa0, 0x80, 0xff, r6, 0xee01}, {0x8, 0x8, 0x9, 0x8000000000000001, 0xfffffffffffffffc, 0x1, 0x7ff, 0xbca8}, {0x1, 0x6, 0x77e, 0x3}, 0x6, 0x6e6bb0, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d5, 0xff}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x5, 0x7, 0x0, 0x8}}, 0xe8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002800)={'geneve0\x00'}) (async)
r8 = userfaultfd(0x80001) (async)
r9 = openat(0xffffffffffffffff, &(0x7f0000002840)='./file0\x00', 0x80, 0x44) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000028c0), r4)
sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000002b40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002900)={0x1cc, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x51d7ccc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1bd3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf09}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab5b}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e61}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x66b2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeb}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x48000}, 0x44800) (async)
ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x18) (async)
write$tun(r4, &(0x7f0000002b80)={@void, @void, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x2, 0x20, 0xc0, 0x68, 0x0, 0x8, 0x1, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x7, 0x1a, [@broadcast]}, @ssrr={0x89, 0x1f, 0xd8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010101, @broadcast, @empty, @loopback, @broadcast]}, @noop]}}, @dest_unreach={0x3, 0xa, 0x0, 0x0, 0x0, 0x5, {0x1f, 0x4, 0x3, 0xb, 0x4, 0x66, 0x800, 0x5, 0x33, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x44, 0x29, 0x1, 0x9, [{@empty, 0x6}, {@empty, 0x5a}, {@local, 0x10001}, {@multicast2, 0xfffffbe4}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x101}, {@local, 0x3fcb}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x8, [{@multicast1, 0x8e65}, {@private=0xa010102, 0x1}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010102, 0x6}]}]}}}}}}}}, 0xd2) (async)
ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000002c80)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000002cc0)={0x10200, 0x5, 0x10000, 0x1000, &(0x7f0000ffb000/0x1000)=nil})

848.35415ms ago: executing program 4 (id=3223):
keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x11, 0x7, 0x0, &(0x7f0000000200))
r3 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)=ANY=[])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0xffff1000, 0x10b000})
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000100000000feffffffffffffff0400000000000000000000000000000000000000000000391178ac00000000007f00000000000000990c00eeffffffffffffff0000001000dd0200000000000000000000000000000001000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x8010}, 0x40044)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r6, 0x407, 0x10001)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc020000000000c104c855e10a9a6636e069bd147ce7000000000000000001004fe6f9d425ad6b62f980143b56744627ff47022db87f44df3d5f28b7ae264893c3a476784b6a48bb48fb8396e993e3183f6dd9a0442a44e0a06488fc46ad06330e958e2ccdb600"/148, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff0000000050001100ac1414aa00000000000000000000000020010000000000000000000000000000000000000000000000000000000000017f0000010000000000000000000000003c0000000600000008000200"], 0xa0}}, 0x0)
ptrace(0x4207, r7)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xb, 0x3, 0x0, '\x00', 0x140000000000000})
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x28802, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_SET_CPUID2(r14, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="6df4ff9a19058c1d"])
write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r9, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5801000000000000f9ffffffffffffff02000000000000000200000000000000ffff0000000000002f12000000000000000001000000000006000000000000002e6f000000000000cc050000000000000d000000000000000700000000000000001000000000000008000000a40500000600000000a0000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="00000000000001000000000001000000000000005e0000000000000007000000060000006e6f7569643332000500000000000000000000000000000003000000000000000500000000000000070000000900000001000000000000000800000000000000010000800000000001c0ff0100000000001000000000000091000000000000000400000060030000030000000010000006000000", @ANYRESHEX=r0, @ANYRES32=r12, @ANYBLOB="090000000400000000000000020000000000000009d75d28211ab3ce1fce000000000000308fd9846ec853b5006a71666d743d76"], 0x0, 0x0, 0x0})
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0xe1b490f0b1185e0, &(0x7f0000000540)={[{@none}, {@subsystem='net_prio'}, {@clone_children}, {@noprefix}], [{@fowner_gt={'fowner>', r11}}, {@fowner_gt={'fowner>', 0xee00}}, {@pcr={'pcr', 0x3d, 0x2c}}, {@dont_hash}]})

801.952564ms ago: executing program 4 (id=3224):
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, '^'}}, 0x22)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x1, 0x1, 0x5, 0x0, '&$.-:'}}, 0x2e)
r1 = socket(0x1a, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x0, @dev}}) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42000, 0x2)
r3 = open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x4900) (async)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x2, 0x80, 0x2, 0x7, 0x0, 0x1}, @mpls={[{0x5}, {0x9}, {0x6}, {0x7}, {}], @llc={@snap={0xab, 0xab, "98ce", "5287f8", 0x886c, "bacac1ed2263f4946df7656d2e371db5c5ace04bd66c078e5d4ccf3d2ceb38e396e06b0fe20f5d7dd71eecd4885344852b39357b2cefd169c01a10762bbaab05c4e966900c644771cbc6d40900a2f116c838b1d971bc49ef6d8a1daef457fa88c4d7f47ddcdf97836e82078eafa0d93492e3bbbae86f9794380fdba32e75dad7b5b42854bdfcb25259ad60a190be7ed193700ff25849c09287bc12d324b86e7ba45e30ee46c98284b6c88fe3449f4454fbb51daf016331bf4b089f359f0a426df01e3ab9db99adc5bb2a8c8feaf5c5da6d4e42145fee85406868d761051ac76f8bf67bf3d352b8cafbf40a4f9562"}}}}, 0x115) (async)
read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_GETXATTR(r3, &(0x7f0000002300)={0x18, 0xfffffffffffffffe, r4, {0x86}}, 0x18)
setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000002340)={0x47, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x108) (async)
writev(r2, &(0x7f0000002600)=[{&(0x7f0000002480)="489c5e6a6456a0842efcfaaf6f12e14144266bf3ad78f9c4bcb4d733ad260dc2df91e2bf8033cc376455ab5e44be43dc28fca7543364190591526f8d709295", 0x3f}, {&(0x7f00000024c0)="7d9f78ef5a914a7c1fca21498bf725801e3dd221d07b66bfade61b31ebeaa3ba428b9a584f96c5b80c2817a39cf098e4557bcfc38e0f345fdab7779c53d481046d0da09135d94a32363bbc7f52cc044839653bd2573f5e8f07d57351ed2ef3fda01c74f8a80c8f6a650ad70f56e5df99e0f7dcf861d34dd5b58cfa212a351c3f52c6658c2754248baa28a26e06ac23677e62f7d6009a6535b25e75d978b7afefb1789bd62a87bdbe94830987cd0d22fbc6f1ff119b8263569d19561b1595d75cc48968f15d59113bee", 0xc9}, {&(0x7f00000025c0)="7a1a2e0367205787b995189cf45f1c9e49fff70ad34b3f84e500531a01a670da1245a676714ecf62432ab5", 0x2b}], 0x3)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000002640)={'batadv_slave_0\x00'})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000026c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r5, 0xa00, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) (async)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000027c0)={{r0}, "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"}) (async)
r6 = accept4$inet6(r3, &(0x7f00000037c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000003800)=0x1c, 0x800)
getpeername$inet6(r6, &(0x7f0000003840)={0xa, 0x0, 0x0, @private1}, &(0x7f0000003880)=0x1c) (async)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000038c0))
mount$binder(0x0, &(0x7f0000003900)='./file0\x00', &(0x7f0000003940), 0x40021, &(0x7f0000003980)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}], [{@obj_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) (async)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000003a00)={@any, 0x1, 0x3000, 0x1ff, 0xee6c, 0x400, "85f4bc5095b133c58f46164dc1b94a86332a5e4073d79a4ecd62f88e0a5448dcf4275e5b3b6d566be09adcdd94bbd4ffb90c50287614f560ac978affa44ec4c2c4ae15ffde0ae25d3a2930fc5842ece2ee839665d5ea8e5381d2f1f971fcca527090ca746997aad3591ef81bcc8ea58d46a0ba166f8c7a9ab93c7a2270a31f59"}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000003ac0)={0x46cf57e7ba63476b, 0x7, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003b40), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xcd93}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000003c80)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, 0x20, 0x0, 0x0, 0x0, 0xac31, &(0x7f0000003c40)='team_slave_0\x00', 0x5, 0x1, 0x6}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x5a, {0x9, 0x21, 0x6, 0x28, 0x1, {0x22, 0xb5e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000004040)={0xa, &(0x7f0000003d40)={0xa, 0x6, 0x200, 0xfd, 0xf, 0x4, 0xff, 0x9}, 0x52, &(0x7f0000003d80)={0x5, 0xf, 0x52, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x7, 0xff0f, 0x48, [0xc000, 0x30, 0xff0000, 0xf, 0xff00f0, 0xff1f8f]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5, 0xf, 0x1, [0xffc030, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0xa6, 0x5, 0x400}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0x2, 0xf6, 0x800, 0x47}]}, 0x5, [{0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000003e40)=@lang_id={0x4, 0x3, 0x406}}, {0x9f, &(0x7f0000003e80)=@string={0x9f, 0x3, "f84ff50da80aab4bb1d128c3a045d9d23563f4f0e6ce1cdec80d015ba5983032b6aa4a045ae5f3c2e0f35383e9e8976ef6c7dd8caad3ed616d510ae69d5330d4bc4d7f5ed894c891b39efc1e4ceaf3056e36087a1fbf1672c9ea684b579995276f6a0b213f2ec9a861ded363b1b404b8eefc1ba424a6c2aef5fe2ddb5da47d6b64512614edd1449b4bd80821abac2a8211b55f52a580b43696e8e85ca6"}}, {0x5c, &(0x7f0000003f40)=@string={0x5c, 0x3, "d454cbf79296f07765ed50a28f6478d9957638177d926d1fa90e8e2bcc555e332927ed714d329d39d1add81d221f68118e79a1409f72d2bf81581b072f493278336c50ecfca96b9f66e51865fc5fbf6d1e816733999cc5e79c5f"}}, {0x5b, &(0x7f0000003fc0)=@string={0x5b, 0x3, "cb32b33cefd53e440696fd8485af98496a19f774e7710715c28dd36eeae86433cfcaa21a25592f754b0e6bbd0c169ab5f892eb64fdf35326f4ef32207d23bfe3b9181a707dfc79124dd526338e7ee03e72785e9111677a29a4"}}]}) (async)
ioctl$TCFLSH(r3, 0x540b, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000040c0)='./file0\x00', 0x40000, 0x10) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f0000004100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x7, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x383, 0x8001, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x2}}}}}}}]}}, &(0x7f0000004280)={0xa, &(0x7f0000004180)={0xa, 0x6, 0x110, 0xfc, 0xd2, 0x5, 0x8, 0xe0}, 0x4a, &(0x7f00000041c0)={0x5, 0xf, 0x4a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x7, 0xbf5b}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xb, 0xa, 0x10, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x731c, 0xff00, 0x9, [0x3f00, 0xff0000, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "2f0ac9e962c6a8aade0016cd6dd76a05"}]}, 0x1, [{0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x804}}]})

723.526682ms ago: executing program 4 (id=3225):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
setuid(0xee00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000002c0)})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
r3 = accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0xea60}, 0x10)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e2, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
getpgrp(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x80000000003})

722.220602ms ago: executing program 4 (id=3226):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
gettid()
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00') (async)
chdir(&(0x7f0000000140)='./file0\x00')
socket(0x5, 0x800000003, 0x8)
socket(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00003cb000/0x1000)=nil, 0x1000}}) (async)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00003cb000/0x1000)=nil, 0x1000}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'tunl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x2, r5, 0x1, 0x62}, 0x14)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="8a93", @ANYRESHEX=r6, @ANYBLOB=',\x00'])

472.927685ms ago: executing program 1 (id=3233):
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f0000000000)='./file0\x00', 0x88000, 0x1f)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000040), 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0xffffff87})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000500)={0xe, 0x4, 0x2})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02806be202000b07010114006800008023b5c78109739078ac1414aa0a0101008953719b698d5116478bd5a18d4580814cda07a9be37dab8e32fe3235932b1d21b44e23d9a99c2139d9533cbc75d17ec748b13018687cace87d3dbed243061664d79984002a931a5c0f2b6e7b40141c37fd47b46f6dadee08c762ca900330cbba665fe90520a6d9e9217d2db60d164a19a78715477ed6e3300293af8a55e4d79b70ef40ce19e11cf19beae982fa0ff2e5dc5a33f72b4537620ba1bffa0bdeb0434bc6b09f531fb0519d3a79f65"], 0x34)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

295.453202ms ago: executing program 1 (id=3234):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fadvise64(r1, 0x1fe, 0x7ffc, 0x3)

293.905102ms ago: executing program 1 (id=3235):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"})
r1 = signalfd4(r0, &(0x7f0000000380)={[0xffffffff]}, 0x8, 0x80000)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000740))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x24000091)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/213, 0x0, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/60, 0x0, 0x1, 0x22}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000300)}}, @request_death={0x400c630e, 0x1}], 0x4c, 0x0, &(0x7f00000008c0)="4b30174b4463bb0da806840ce92288c3a901000000bb88f9681daaf870436e821da0bd6350d9811510"})

262.407025ms ago: executing program 1 (id=3236):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

235.023268ms ago: executing program 1 (id=3237):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000054f000/0x2000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x4, 0xe4})
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext'])

159.538065ms ago: executing program 1 (id=3238):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=""/4096, 0x1000}, 0xfffffffb}, {{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000007b40)=""/129, 0x81}, {&(0x7f0000000dc0)=""/48, 0x30}], 0x2}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/127, 0x7f}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/99, 0x63}, 0xfffffeff}], 0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r1, &(0x7f0000000400)="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", 0x1f000)

95.037771ms ago: executing program 2 (id=3239):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x190)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x4006, 0x101}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x50, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xfffff701, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0xfffffffd, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xffffffff, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x11000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x6, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800005, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x10000, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xe3, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x11fffd, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x96, 0xffffffff, 0x80000000, 0x3, 0x4, 0xc8, 0x1, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa23, 0x9, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) (async)
open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x158, r2, 0xcf6564fa431db1b5, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4b4c923d}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x4}}}}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0xffff58e9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x528}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x162}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802)
socket$tipc(0x1e, 0x2, 0x0) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$setpipe(r4, 0x407, 0x7) (async)
fcntl$setpipe(r4, 0x407, 0x7)
readv(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r5, 0x125f, 0x0)

73.936963ms ago: executing program 2 (id=3240):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x112})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x71ee18750e7abfcf, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe7)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x161142, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f00000000c0)='async\x00', 0x0, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0)
write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9", 0x678)

2.42238ms ago: executing program 2 (id=3241):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x80000000005})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x5})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448cc, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x6}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})

1.83861ms ago: executing program 2 (id=3242):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x41501)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000005c0)={0x1f, 0x1, 0x5}, 0x6)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x40, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x8000, 0x44000)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a)
ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$LOOP_SET_FD(r5, 0x4c00, r6)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5f8e0af0733be126, 0x14})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x410400, 0x40)
utimensat(r8, 0x0, 0x0, 0x100)
close_range(r0, 0xffffffffffffffff, 0x2)

415.38µs ago: executing program 2 (id=3243):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1000011c)

0s ago: executing program 2 (id=3244):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3)
r1 = gettid()
preadv(r0, &(0x7f0000003e00)=[{&(0x7f0000002b00)=""/100, 0x64}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/238, 0xee}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/79, 0x4f}], 0x5, 0x8, 0x4)
sched_setattr(r1, &(0x7f0000000100)={0x38}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000200)="8e6be983eb851b7c71d12a93306b12d1ca0e5f6f8a2d5cb770fc0097039adb45aaf1fbf7a22ada2ff1105bca44b7e53fa0d5bf0e9664689bdff844d5845a965c8a1baae962dfd3c601175751c983f869ec936889e0af11e19d185ce008fcffb554fe6df6e5136c0552341e6af91c844a95d60a36b7e83e418be87b2a8259bfec940666462884a8593984092a1adc1c9a5d10e5494799d17accb8b061476ff504bb9a9cce98a1ed4c02ac9bb8ed9b932214ce88f1178c73c63dbfd836e67f98153f98ee617da0e4487b58", 0xca}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="3e5fe497d32f21c29d96d76d5ec2f8b81864ed7bc7e15b7d5b71fe5af80ecbf50beb65b04838e53063c47cde06d72ed13c055169bdc5872078addd0b64d95f88eba78325aa1d4855a3c9f2ac4e0131dd03abb570609e5763b2380e55f69654f55d81ec106a8112fdce8fa5330d055d09ce1343b087162804d24ab87e0f822140b9c00d2b8697cf466e2d8fa75be22a3bfc172dc8e0da9c7dfb21a4c0d6c53d324b26d58c62d06feee6f857617541e5f0", 0xb0}, {&(0x7f00000023c0)="48561b1d122f973b515844ce0d978a62d48c7e286332fa73762797748657c705caa45f850b1230cc5c72e2ef27879a8153fc84cc5d7bf5faf1756cdb3717126bd33ca83c8086ce1a6527b30395baac646e8eaf081363a1eb6d6caaa0c2b1aa9b8e68a8de9c9dd27c893e84ecb8ee0a9ffeea954c24225b4b162c0ad796034dd216a49e144523a1b6e4257953d2ff544e4ed90a8f52349233832b7b9f5b2e265951cec222a7d3cd1ad2dd0dd6619785799fe1449d1c6c25b7a5221f211244b3013222830941fc836c2296268b40a285ff82c0e20c0447bf0293d100bfc311aacb90ed80c2df149210d5", 0xe9}, {&(0x7f00000024c0)="e864af4ad621b12227cfcc27387849402de9bb04db7d8da1f8f560299094ae7474d2f1b51a3b8ed294f237a5a32d61c9fcc7e7967b7133cc41c82b3d6fba4c7984c7794f065efebb235b48d9697c717ac7d74ea15a0e776ac930e558e4b73c8a4299d094189dd9f043be2e3fcc0eadd56b5873832fe1c1098f77a28b698217dfee799625fe52dc10e4430238a9fd1ca44f3d", 0x92}], 0x6, &(0x7f0000002600)=[{0x50, 0x114, 0x4, "10892f5e9483c8880e6a6ba6f92b5be3c972947a10198b6afa9811647845f98d2bdebb13bd2d81ef84c03dab3b7895d6c5eec6840041803dc2f98d6b7f"}, {0x80, 0x116, 0x3, "07b46d05786173f9c4f8c845f4eebd47480385b125ca676d3089ab6a94cf75ae35d666a8073f5fd6ad6c9693191faa747914d55fde211dcecc3f9daed6cc6e5c908a70879b943696f1b8438816a23c316393a4deaab5b4264ea182bcd5131d12407a3a6f58d39851e48775"}, {0xc0, 0x6, 0x82, "2fbaa3c5eeacda042a7e6550c28747cd269d2c4be78319eb33bbeb20dafa809811dcbb6df5ba4810ae09253b8aea18b200f69e36b57f60c95ed8e82315105faa8ced442ce9bef7f6dda307278c7dd9c2c45374289c9b31d12b05099439850b21df5f79831ef8e89fc8937e5d3afdd2e4f0994fdd8856a226d5608c2292b93579fc828fb4f86583ebd6cd61e454d981acba8b84197acfc009e8804dd70fbc5d86ec4c97f71d9442c8c7d79a3818e5a8f6"}, {0xe8, 0x3a, 0x9, "ddaa34c3d91d6cac0f031b0cb801ef129580fa1783443cf0de8351b009eff165d187f4f4bd2b5d22315ac98898621f3d67db63e13e86b5e611b22c8866009ed51f8fcc802e4f27e4ccec25e6cb63e003224b846c3881f96fe78d81f2885791cc765bb0eb18db7c9b11ff3c9d9d5479064fde577f9daefadad883548c36b9447a4aee66c759d3fe7a7b66af0485bfc71afc436bee7adc1c06b41b7a8b18066d476d370de56291ff4f950ef930b4cfaa1c48c7c3785219ceb4cad1f6a227c961d123f5ffc56654fccf87c973ad55f502e645"}, {0x68, 0x111, 0x3, "f2be5a958164e3cda131fae9cb15b4770f528992f7eab97d08e8b96ab5be2b712eadcd32c26fab9c902ba1830eeb48cc8ff1688dbd911a556f3b6ff3329ad5881c4e393eb10c23eb7ac73832511ddc2cb6fa74f7a5d2d7ff"}, {0x38, 0x114, 0x9, "c219002e49abb73e927c47fcfe1436753bc8960cdf04fd947a6005459040dcf4d982"}, {0xf8, 0x101, 0xf8, "e71c3dfef64522afcd34de9915dfdacfb80caa2e880c33c4fc9b5d955967aa48fabfb5b9473a5fabb886f0185bf13466ba43d14243749ea996bfcca3c8558f4384d3972fbf54b3882e2c9b7d92121ce78a963c22c1441163f68a22bf8c3eb3d6d3860caddf1877664b9a053d48d477b3cdea0a5adf8475ef1fdacebb8b50e99cfd9da8f161a664f64e5ef4b14fa9e07e8e9b8b233e892ac818e339dd235acd7661b11fa9a96f741c3bd2eb749e6eb5c7c919e023d48ae938f182e7933b0b0724069f9660fc6d2682c4b66a97acedbfe3f4457de1945cdc5403874e080b91800cb7455adb"}, {0x48, 0x11, 0x400, "e6131f6f8b70294cb10c97966dbe4680527275d399adeac6f72cbc5f466c3e534ab9a331f3b47080d1ff8fa821ae41f90c20e70e0fc6"}, {0x58, 0x117, 0x4, "1e1a4e823a758a878f857215fe2655156adc8f56af7bf598197e4d4d9650ac210ffa2e481bd8302f23402bd81b306795eeda7493a25ff20b3ece0d764cc2f8f8501e74737539eb76"}, {0x10, 0x6, 0x6a4}], 0x4c0}}], 0x1, 0x20040890)
recvfrom$inet6(r2, &(0x7f0000000000)=""/108, 0x6c, 0x100, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)

kernel console output (not intermixed with test programs):

pc: Started in network mode
[  217.036853][ T6610] tipc: Node identity 4, cluster identity 4711
[  217.051287][ T6610] tipc: Node number set to 4
[  217.057849][ T6563] veth0_vlan: entered promiscuous mode
[  217.081703][ T6563] veth1_macvtap: entered promiscuous mode
[  217.125274][ T6615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  217.125305][ T6615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:2
[  217.322577][ T6623] overlayfs: maximum fs stacking depth exceeded
[  217.391845][   T73] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  217.476256][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'.
[  217.542226][   T73] usb 4-1: Using ep0 maxpacket: 8
[  217.548494][   T73] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.559706][   T73] usb 4-1: config 0 interface 0 has no altsetting 0
[  217.566394][   T73] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  217.575717][   T73] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.584492][   T73] usb 4-1: config 0 descriptor??
[  217.793053][   T73] uclogic 0003:5543:0004.0018: unknown main item tag 0x0
[  217.801508][   T73] uclogic 0003:5543:0004.0018: item fetching failed at offset 4/7
[  217.810466][   T73] uclogic 0003:5543:0004.0018: parse failed
[  217.816787][   T73] uclogic 0003:5543:0004.0018: probe with driver uclogic failed with error -22
[  217.831058][   T73] usb 4-1: USB disconnect, device number 13
[  217.846646][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'.
[  217.902604][  T481] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  217.981429][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:959
[  218.006650][ T6665] /dev/rnullb0: Can't open blockdev
[  218.042848][ T6667] rust_binder: Write failure EFAULT in pid:965
[  218.052822][  T481] usb 2-1: Using ep0 maxpacket: 32
[  218.070216][  T481] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  218.078844][  T481] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  218.087711][  T481] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  218.097070][  T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.108326][  T481] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  218.118169][  T481] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  218.132119][  T481] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  218.141634][  T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.142931][   T46] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  218.151309][  T481] usb 2-1: config 0 descriptor??
[  218.181958][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'.
[  218.191607][ T6676] rust_binder: Error while translating object.
[  218.191661][ T6676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  218.198065][ T6676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:21
[  218.251587][ T6678] tipc: Started in network mode
[  218.265839][ T6678] tipc: Node identity 4, cluster identity 4711
[  218.272262][ T6678] tipc: Node number set to 4
[  218.303214][   T73] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[  218.310899][   T46] usb 3-1: device descriptor read/64, error -71
[  218.364738][  T481] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  218.378235][  T481] usb 2-1: USB disconnect, device number 55
[  218.387300][  T481] usblp0: removed
[  218.465003][   T73] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.475403][   T73] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  218.486419][   T73] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  218.496479][   T73] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.509323][   T73] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  218.518438][   T73] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.534155][   T73] usb 1-1: config 0 descriptor??
[  218.542076][   T73] usb 1-1: MIDIStreaming interface descriptor not found
[  218.554405][   T46] usb 3-1: device descriptor read/64, error -71
[  218.674003][   T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  218.742124][  T481] usb 1-1: USB disconnect, device number 65
[  218.794125][   T46] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  218.803898][   T73] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  218.824948][   T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.837318][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  218.846437][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.854498][   T31] usb 4-1: Product: syz
[  218.858736][   T31] usb 4-1: Manufacturer: syz
[  218.863315][   T31] usb 4-1: SerialNumber: syz
[  218.924068][   T46] usb 3-1: device descriptor read/64, error -71
[  218.955343][   T73] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  218.963817][   T73] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  218.972458][   T73] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  218.982146][   T73] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.991889][   T73] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  219.002720][   T73] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  219.015727][   T73] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  219.024793][   T73] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.033509][   T73] usb 2-1: config 0 descriptor??
[  219.039067][ T6634] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  219.164404][   T46] usb 3-1: device descriptor read/64, error -71
[  219.250003][   T73] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  219.264964][   T73] usb 2-1: USB disconnect, device number 56
[  219.275121][   T46] usb usb3-port1: attempt power cycle
[  219.277258][ T6688] netlink: 'syz.0.1989': attribute type 3 has an invalid length.
[  219.280842][   T73] usblp0: removed
[  219.288426][ T6688] netlink: 944 bytes leftover after parsing attributes in process `syz.0.1989'.
[  219.355347][ T6688] fuse: Unknown parameter 'g��Q_id
00000000000000000000'
[  219.364286][ T6688] overlay: ./file0 is not a directory
[  219.370650][ T6688] rust_binder: Got transaction with invalid offset.
[  219.370684][ T6688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  219.377588][ T6688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:969
[  219.451599][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'.
[  219.470509][ T6694] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  219.625010][   T46] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  219.646049][   T46] usb 3-1: device descriptor read/8, error -71
[  219.783449][   T46] usb 3-1: device descriptor read/8, error -71
[  219.789838][   T73] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  219.879133][   T31] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  219.879192][  T481] hid (null): bogus close delimiter
[  219.885805][   T31] cdc_ncm 4-1:1.0: dwNtbInMaxSize=2045 is too small. Using 2048
[  219.891099][  T481] hid (null): report_id 60010 is invalid
[  219.898777][   T31] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  219.904825][  T481] hid (null): unknown global tag 0xe
[  219.916910][  T481] hid-generic 0800:07FF:020C.0019: unknown main item tag 0xd
[  219.924374][  T481] hid-generic 0800:07FF:020C.0019: bogus close delimiter
[  219.931595][  T481] hid-generic 0800:07FF:020C.0019: item 0 0 2 10 parsing failed
[  219.939717][  T481] hid-generic 0800:07FF:020C.0019: probe with driver hid-generic failed with error -22
[  219.956492][   T73] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.966716][   T73] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  219.977822][   T73] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  219.991863][   T73] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  220.000977][   T73] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  220.009012][   T73] usb 1-1: SerialNumber: syz
[  220.035578][   T46] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  220.056639][   T46] usb 3-1: device descriptor read/8, error -71
[  220.087063][ T6685] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  220.090527][   T31] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  220.111624][   T31] usb 4-1: USB disconnect, device number 14
[  220.118410][   T31] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  220.187843][   T46] usb 3-1: device descriptor read/8, error -71
[  220.287678][   T65] usb 1-1: USB disconnect, device number 66
[  220.297046][   T46] usb usb3-port1: unable to enumerate USB device
[  220.660677][   T36] kauditd_printk_skb: 28 callbacks suppressed
[  220.660696][   T36] audit: type=1400 audit(1762853333.398:1271): avc:  denied  { execute } for  pid=6738 comm="syz.1.1999" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:passwd_exec_t:s0"
[  220.683471][ T6742] fuse: Bad value for 'user_id'
[  220.699851][ T6742] fuse: Bad value for 'user_id'
[  220.730350][ T6746] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  220.740316][ T6746] rust_binder: Write failure EINVAL in pid:35
[  220.744403][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'.
[  220.816232][   T36] audit: type=1400 audit(1762853333.548:1272): avc:  denied  { create } for  pid=6758 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  220.848287][ T6762] rust_binder: 41: no such ref 1
[  220.853331][ T6762] rust_binder: 41: no such ref 0
[  220.931725][ T6650] tipc: Subscription rejected, illegal request
[  220.953184][   T36] audit: type=1400 audit(1762853333.688:1273): avc:  denied  { remove_name } for  pid=6774 comm="syz.3.2012" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  220.994068][   T36] audit: type=1400 audit(1762853333.688:1274): avc:  denied  { unlink } for  pid=6774 comm="syz.3.2012" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  221.034526][   T36] audit: type=1400 audit(1762853333.688:1275): avc:  denied  { remount } for  pid=6779 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  221.078875][ T6790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=20480 (40960 ns) > initial count (32768 ns). Using initial count to start timer.
[  221.124170][ T6798] /dev/md0: Can't lookup blockdev
[  221.125335][ T6776] kvm: pic: non byte write
[  221.240790][   T36] audit: type=1400 audit(1762853333.978:1276): avc:  denied  { create } for  pid=6810 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  221.397271][   T65] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  221.518419][  T210] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  221.558572][   T65] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  221.567051][   T65] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  221.577563][   T65] usb 3-1: config 220 has no interface number 2
[  221.584231][   T65] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  221.597617][   T65] usb 3-1: config 220 interface 0 has no altsetting 0
[  221.604500][   T65] usb 3-1: config 220 interface 76 has no altsetting 0
[  221.611565][   T65] usb 3-1: config 220 interface 1 has no altsetting 0
[  221.620571][   T65] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  221.629830][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.637928][   T65] usb 3-1: Product: syz
[  221.642250][   T65] usb 3-1: Manufacturer: syz
[  221.646903][   T65] usb 3-1: SerialNumber: syz
[  221.679274][  T210] usb 1-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config
[  221.689680][  T210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.709075][  T210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  221.718249][  T210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.726280][  T210] usb 1-1: Product: syz
[  221.737350][ T6826] tipc: Started in network mode
[  221.737623][  T210] usb 1-1: Manufacturer: syz
[  221.746862][  T210] usb 1-1: SerialNumber: syz
[  221.748801][ T6826] tipc: Node identity 4, cluster identity 4711
[  221.758223][ T6826] tipc: Node number set to 4
[  221.856448][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.870903][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.900743][   T65] usb 3-1: selecting invalid altsetting 0
[  221.907407][   T65] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  221.913978][   T65] usb 3-1: No valid video chain found.
[  221.921929][   T65] usb 3-1: USB disconnect, device number 11
[  221.970477][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.979589][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.991361][  T210] usb 1-1: 0:2 : does not exist
[  221.997983][  T210] usb 1-1: USB disconnect, device number 67
[  222.006151][ T6500] udevd[6500]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  222.128113][   T46] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  222.278287][   T46] usb 2-1: Using ep0 maxpacket: 16
[  222.284673][   T46] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024
[  222.296023][   T46] usb 2-1: config 0 interface 0 has no altsetting 0
[  222.302676][   T46] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  222.311746][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.320442][   T46] usb 2-1: config 0 descriptor??
[  222.517910][ T6833] rust_binder: Got transaction with invalid offset.
[  222.517955][ T6833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  222.524700][ T6833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177
[  222.639807][   T36] audit: type=1400 audit(1762853335.376:1277): avc:  denied  { create } for  pid=6850 comm="syz.2.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  222.676961][ T6855] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  222.686516][ T6855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1001
[  222.710663][ T6650] tipc: Left network mode
[  222.908966][  T210] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  222.919045][   T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  222.939009][   T65] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  222.947446][   T46] usbhid 2-1:0.0: can't add hid device: -71
[  222.953814][   T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  222.962544][   T46] usb 2-1: USB disconnect, device number 57
[  223.059163][  T210] usb 3-1: Using ep0 maxpacket: 32
[  223.065680][  T210] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  223.070392][   T31] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  223.077517][  T210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  223.088545][   T31] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  223.099726][  T210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  223.110099][   T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  223.119808][  T210] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  223.128784][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.137882][  T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.150554][   T31] usb 4-1: invalid MIDI out EP 0
[  223.159681][  T210] usb 3-1: config 0 descriptor??
[  223.159801][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.172172][  T210] hub 3-1:0.0: USB hub found
[  223.175843][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.193141][   T65] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  223.202350][   T65] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  223.209071][ T6505] udevd[6505]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  223.210835][   T31] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  223.235527][   T65] usb 1-1: Manufacturer: syz
[  223.240941][   T65] usb 1-1: config 0 descriptor??
[  223.373921][  T210] hub 3-1:0.0: config failed, hub has too many ports! (err -19)
[  223.579003][ T6858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  223.580096][  T210] usbhid 3-1:0.0: can't add hid device: -71
[  223.592608][  T210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  223.620903][  T210] usb 3-1: USB disconnect, device number 12
[  223.819914][   T31] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  223.849637][   T65] usbhid 1-1:0.0: can't add hid device: -32
[  223.855639][   T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  223.970051][   T31] usb 2-1: Using ep0 maxpacket: 8
[  223.976757][   T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  223.986714][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  224.001038][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  224.010138][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.018121][   T31] usb 2-1: Product: syz
[  224.022309][   T31] usb 2-1: Manufacturer: 왇픬㎄승᝔쬰ꎶ즵὜䲖〜胑粓庎ﶓꊬ櫵剡艞ꬺ蒎뛸废㷽呠执电軇뒠먉휰ጬ஄ᆀꐑ砘Ꮯ켃㾁찓˵
[  224.038329][   T31] usb 2-1: SerialNumber: syz
[  224.044193][ T6867] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  224.253150][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.262284][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.054393][ T6877] netlink: 'syz.2.2046': attribute type 6 has an invalid length.
[  225.064790][ T6878] netlink: 'syz.2.2046': attribute type 4 has an invalid length.
[  225.072688][ T6878] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2046'.
[  225.331402][  T210] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  225.481500][  T210] usb 3-1: Using ep0 maxpacket: 8
[  225.487758][  T210] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  225.497040][  T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.505977][  T210] usb 3-1: config 0 descriptor??
[  225.603704][   T73] usb 4-1: USB disconnect, device number 15
[  225.716307][   T65] usb 1-1: USB disconnect, device number 68
[  225.765912][ T3239] Bluetooth: hci0: Frame reassembly failed (-84)
[  225.919260][  T210] lenovo 0003:17EF:60EE.001A: hidraw0: USB HID v1.01 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0
[  226.062052][   T65] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  226.223651][   T65] usb 1-1: unable to get BOS descriptor or descriptor too short
[  226.231911][   T65] usb 1-1: not running at top speed; connect to a high speed hub
[  226.241147][   T65] usb 1-1: string descriptor 0 read error: -22
[  226.247617][   T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  226.257036][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.468400][ T6890] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  226.469513][   T65] cdc_ncm 1-1:1.0: bind() failure
[  226.490070][   T65] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  226.490169][    T9] usb 3-1: USB disconnect, device number 13
[  226.497280][   T65] cdc_ncm 1-1:1.1: bind() failure
[  226.513689][   T65] usb 1-1: USB disconnect, device number 69
[  226.538159][   T31] usb 2-1: USB disconnect, device number 58
[  226.557832][ T6897] netlink: 'syz.1.2052': attribute type 16 has an invalid length.
[  226.565907][ T6897] netlink: 'syz.1.2052': attribute type 2 has an invalid length.
[  226.573736][ T6897] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.2052'.
[  226.745590][ T6904] fuse: Bad value for 'fd'
[  226.851929][ T6912] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2056'.
[  226.879449][ T6915] rust_binder: Write failure EFAULT in pid:220
[  227.109646][ T6936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  227.115978][ T6936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:236
[  227.218657][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'.
[  227.252914][ T6940] rust_binder: Write failure EFAULT in pid:240
[  227.293100][    T9] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  227.433197][    T9] usb 1-1: device descriptor read/64, error -71
[  227.503354][  T210] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  227.654529][  T210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.664522][  T210] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  227.673695][  T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.682031][    T9] usb 1-1: device descriptor read/64, error -71
[  227.688632][  T210] usb 3-1: config 0 descriptor??
[  227.783522][ T4675] Bluetooth: hci0: command 0x1003 tx timeout
[  227.783522][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  227.923659][    T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  228.053836][    T9] usb 1-1: device descriptor read/64, error -71
[  228.096651][  T210] hid-picolcd 0003:04D8:C002.001B: item fetching failed at offset 5/7
[  228.105138][  T210] hid-picolcd 0003:04D8:C002.001B: device report parse failed
[  228.112653][  T210] hid-picolcd 0003:04D8:C002.001B: probe with driver hid-picolcd failed with error -22
[  228.293883][    T9] usb 1-1: device descriptor read/64, error -71
[  228.347121][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.347150][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.347164][ T6949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  228.353689][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.353708][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.353724][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.360303][ T6949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:99
[  228.370222][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.398756][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.405438][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.411962][    T9] usb usb1-port1: attempt power cycle
[  228.412051][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.424286][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.430760][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.431416][   T10] usb 3-1: USB disconnect, device number 14
[  228.437655][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.449786][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.456279][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.462747][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.469212][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.475688][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.482117][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.488593][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.495060][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.501498][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.508012][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.514537][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.520986][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.527496][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.533919][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.540377][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.546861][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.553290][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.559847][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.566321][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.572757][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.579220][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.585802][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.592306][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.599009][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.605572][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.612184][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.618712][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.625178][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.631728][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.638254][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.644876][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.651338][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.657851][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.664520][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.671029][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.677882][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.684526][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.690964][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.697637][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.704402][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.710868][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.717338][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.723814][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.730330][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.737166][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.743587][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.750106][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.754293][    T9] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  228.756589][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.770646][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.775604][    T9] usb 1-1: device descriptor read/8, error -71
[  228.777120][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.789724][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.796213][ T6948] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  228.905622][    T9] usb 1-1: device descriptor read/8, error -71
[  228.986948][ T6952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6952 comm=syz.3.2072
[  228.992331][   T36] audit: type=1400 audit(1762853341.720:1278): avc:  denied  { map } for  pid=6959 comm="syz.2.2075" path="pipe:[33849]" dev="pipefs" ino=33849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  229.033119][ T6965] rust_binder: 255: no such ref 1
[  229.057369][ T6967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  229.057393][ T6967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:257
[  229.069262][ T6967] 8021q: VLANs not supported on syzkaller1
[  229.086050][ T6967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257
[  229.154509][    T9] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  229.185545][    T9] usb 1-1: device descriptor read/8, error -71
[  229.315651][    T9] usb 1-1: device descriptor read/8, error -71
[  229.344669][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  229.424831][    T9] usb usb1-port1: unable to enumerate USB device
[  229.494768][   T10] usb 3-1: Using ep0 maxpacket: 16
[  229.501066][   T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.511976][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  229.518614][   T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  229.527677][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.536337][   T10] usb 3-1: config 0 descriptor??
[  229.746412][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  229.752437][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  229.753552][ T6979] overlay: Unknown parameter 'euid'
[  229.761344][   T10] usb 3-1: USB disconnect, device number 15
[  229.824879][   T36] audit: type=1400 audit(1762853342.550:1279): avc:  denied  { mount } for  pid=6977 comm="syz.3.2081" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  229.912595][   T36] audit: type=1400 audit(1762853342.640:1280): avc:  denied  { unmount } for  pid=6563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  229.932626][    T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  229.950086][ T6981] binder: Bad value for 'defcontext'
[  230.086363][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  230.097392][    T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  230.107109][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.124386][    T9] usb 2-1: config 0 descriptor??
[  230.130021][ T6976] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  230.189445][ T6991] SELinux: security_context_str_to_sid () failed with errno=-22
[  230.263786][   T36] audit: type=1326 audit(1762853342.989:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.2.2089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43e738f6c9 code=0x0
[  230.367448][   T36] audit: type=1326 audit(1762853343.099:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.2.2089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43e738f6c9 code=0x0
[  230.422182][ T7004] TCP: TCP_TX_DELAY enabled
[  230.521566][ T7016] loop2: detected capacity change from 0 to 8388607
[  230.560250][ T7018] rust_binder: Write failure EFAULT in pid:1039
[  230.709850][ T7024] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[  230.725829][   T36] audit: type=1400 audit(1762853343.459:1283): avc:  denied  { relabelto } for  pid=7023 comm="syz.0.2097" name="338" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  230.753424][   T36] audit: type=1400 audit(1762853343.459:1284): avc:  denied  { associate } for  pid=7023 comm="syz.0.2097" name="338" dev="tmpfs" ino=1839 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0"
[  230.753445][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  230.753518][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  230.790908][   T36] audit: type=1400 audit(1762853343.519:1285): avc:  denied  { write } for  pid=803 comm="syz-executor" name="338" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  230.794779][   T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  230.838296][   T36] audit: type=1400 audit(1762853343.519:1286): avc:  denied  { remove_name } for  pid=803 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  230.850981][    T9] usb 2-1: USB disconnect, device number 59
[  230.871642][   T36] audit: type=1400 audit(1762853343.549:1287): avc:  denied  { rmdir } for  pid=803 comm="syz-executor" name="338" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  230.952360][ T7027] rust_binder: 1047: no such ref 1
[  231.007104][   T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  231.016264][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.024844][   T10] usb 4-1: config 0 descriptor??
[  231.940498][ T3251] Bluetooth: hci0: Frame reassembly failed (-84)
[  231.946984][ T7052] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  231.991937][ T7055] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  232.282770][ T7072] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0
[  232.299104][ T3201] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1
[  232.306577][ T3201] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1
[  233.407333][   T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  233.558621][   T65] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  233.569680][   T65] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  233.580356][   T65] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  233.589448][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.602908][   T65] usb 3-1: invalid MIDI out EP 0
[  233.614194][ T6505] udevd[6505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  233.633354][   T65] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  233.850778][   T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  233.860926][   T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  233.871985][   T10] asix 4-1:0.0: probe with driver asix failed with error -71
[  233.885389][   T10] usb 4-1: USB disconnect, device number 16
[  233.947498][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  233.947526][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  234.011643][ T7091] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.012162][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  234.012181][   T36] audit: type=1400 audit(1762853346.737:1289): avc:  denied  { bind } for  pid=7090 comm="syz.0.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  234.015779][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'.
[  234.054256][ T7091] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  234.054379][ T7091] rust_binder: 1072: no such ref 0
[  234.067677][ T7091] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  234.074793][ T7091] rust_binder: 1072: no such ref 2
[  234.080011][ T7091] rust_binder: Failed to allocate buffer. len:1120, is_oneway:false
[  234.347738][ T4675] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  234.348266][ T3583] Bluetooth: hci1: command 0x1003 tx timeout
[  234.437810][   T31] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  234.473311][   T36] audit: type=1400 audit(1762853347.197:1290): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  234.510894][   T36] audit: type=1400 audit(1762853347.237:1291): avc:  denied  { create } for  pid=7116 comm="syz.1.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  234.550565][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.559519][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.610152][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.620543][   T31] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  234.633926][   T31] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  234.647203][   T31] usb 1-1: config 1 interface 1 has no altsetting 0
[  234.655760][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.665254][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.673633][   T31] usb 1-1: Product: syz
[  234.678130][   T31] usb 1-1: Manufacturer: syz
[  234.682841][   T31] usb 1-1: SerialNumber: syz
[  234.787917][   T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  234.923292][   T31] usb 1-1: USB disconnect, device number 74
[  234.937978][   T10] usb 2-1: device descriptor read/64, error -71
[  235.178109][   T10] usb 2-1: device descriptor read/64, error -71
[  235.422898][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  235.496296][ T7136] x_tables: duplicate entry at hook 1
[  235.568322][   T10] usb 2-1: device descriptor read/64, error -71
[  235.808443][   T10] usb 2-1: device descriptor read/64, error -71
[  235.818441][   T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  235.918563][   T10] usb usb2-port1: attempt power cycle
[  235.952185][ T7140] rust_binder: 1086: no such ref 0
[  235.968471][   T46] usb 4-1: Using ep0 maxpacket: 32
[  235.974826][   T46] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  235.983415][   T46] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  235.992117][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  236.001222][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  236.011006][   T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  236.020748][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  236.033820][   T46] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  236.043136][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.051819][   T46] usb 4-1: config 0 descriptor??
[  236.143954][   T36] audit: type=1400 audit(1762853348.866:1292): avc:  denied  { mounton } for  pid=7151 comm="syz.0.2141" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  236.176258][   T31] usb 3-1: USB disconnect, device number 16
[  236.202472][ T7157] rust_binder: Error while translating object.
[  236.202514][ T7157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  236.210455][ T7157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:296
[  236.252346][ T7162] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  236.259007][   T46] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  236.273887][   T46] usb 4-1: USB disconnect, device number 17
[  236.282065][   T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  236.286984][   T46] usblp0: removed
[  236.294681][ T7161] rust_binder: 1103: no such ref 2
[  236.301984][ T7161] rust_binder: 1103: no such ref 0
[  236.307251][ T7161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1103
[  236.307768][ T7163] rust_binder: inc_ref_done called when no active inc_refs
[  236.325026][   T10] usb 2-1: device descriptor read/8, error -71
[  236.330589][ T7161] rust_binder: Error in use_page_slow: ESRCH
[  236.338572][ T7161] rust_binder: use_range failure ESRCH
[  236.344661][ T7161] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  236.351397][ T7161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  236.359710][ T7161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1103
[  236.386434][   T36] audit: type=1400 audit(1762853349.106:1293): avc:  denied  { accept } for  pid=7165 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  236.469720][   T10] usb 2-1: device descriptor read/8, error -71
[  236.497643][ T7176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1111
[  236.532975][   T36] audit: type=1400 audit(1762853349.256:1294): avc:  denied  { read } for  pid=7181 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  236.535633][ T7182] fuse: Bad value for 'fd'
[  236.542641][   T36] audit: type=1400 audit(1762853349.256:1295): avc:  denied  { remount } for  pid=7181 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  236.586672][   T36] audit: type=1400 audit(1762853349.256:1296): avc:  denied  { mounton } for  pid=7181 comm="syz.0.2151" path="/363/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  236.609544][   T36] audit: type=1326 audit(1762853349.286:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.0.2151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28c658f6c9 code=0x0
[  236.656872][ T7184] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true
[  236.668503][ T7186] can: request_module (can-proto-0) failed.
[  236.748859][   T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  236.769869][   T10] usb 2-1: device descriptor read/8, error -71
[  236.808888][   T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  236.899886][   T10] usb 2-1: device descriptor read/8, error -71
[  236.918925][   T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  236.958931][   T46] usb 4-1: Using ep0 maxpacket: 32
[  236.965184][   T46] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  236.973725][   T46] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  236.982368][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  236.991919][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  237.001749][   T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  237.011464][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  237.019083][   T10] usb usb2-port1: unable to enumerate USB device
[  237.024481][   T46] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  237.040019][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.048677][   T46] usb 4-1: config 0 descriptor??
[  237.068952][   T31] usb 3-1: Using ep0 maxpacket: 16
[  237.075211][   T31] usb 3-1: config 0 has no interfaces?
[  237.081496][   T31] usb 3-1: config 0 has no interfaces?
[  237.087761][   T31] usb 3-1: config 0 has no interfaces?
[  237.097280][   T31] usb 3-1: string descriptor 0 read error: -71
[  237.103651][   T31] usb 3-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba
[  237.113092][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.122190][   T31] usb 3-1: config 0 descriptor??
[  237.127403][   T31] usb 3-1: can't set config #0, error -71
[  237.134273][   T31] usb 3-1: USB disconnect, device number 17
[  237.255423][   T46] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  237.404993][   T36] audit: type=1400 audit(1762853350.126:1298): avc:  denied  { unmount } for  pid=803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  237.429578][ T3251] Bluetooth: hci0: Frame reassembly failed (-84)
[  237.436036][ T7188] Bluetooth: hci0: Frame reassembly failed (-84)
[  237.610526][   T10] usb 4-1: USB disconnect, device number 18
[  237.625948][   T10] usblp0: removed
[  237.707856][ T7199] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  237.950161][   T46] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  237.969365][   T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  238.099541][   T65] usb 3-1: device descriptor read/64, error -71
[  238.109476][   T46] usb 2-1: Using ep0 maxpacket: 32
[  238.115642][   T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  238.123857][   T46] usb 2-1: config 0 has no interface number 0
[  238.129997][   T46] usb 2-1: config 0 interface 184 has no altsetting 0
[  238.138204][   T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  238.147320][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.155358][   T46] usb 2-1: Product: syz
[  238.159552][   T46] usb 2-1: Manufacturer: syz
[  238.164171][   T46] usb 2-1: SerialNumber: syz
[  238.169514][   T46] usb 2-1: config 0 descriptor??
[  238.175354][   T46] smsc75xx v1.0.0
[  238.339517][   T65] usb 3-1: device descriptor read/64, error -71
[  238.342856][ T7207] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  238.345903][ T7207] rust_binder: Error while translating object.
[  238.358154][ T7207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  238.364461][ T7207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138
[  238.486440][ T3251] Bluetooth: hci1: Frame reassembly failed (-84)
[  238.502115][ T3251] Bluetooth: hci1: Frame reassembly failed (-84)
[  238.579601][   T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  238.709742][   T65] usb 3-1: device descriptor read/64, error -71
[  238.719694][   T31] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  238.777957][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  238.789077][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  238.871042][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  238.882143][   T31] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  238.891332][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.900461][   T31] usb 4-1: config 0 descriptor??
[  238.905752][ T7214] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  238.959759][   T65] usb 3-1: device descriptor read/64, error -71
[  239.069889][   T65] usb usb3-port1: attempt power cycle
[  239.316395][   T31] betop 0003:8380:1850.001C: item fetching failed at offset 3/5
[  239.324310][   T31] betop 0003:8380:1850.001C: parse failed
[  239.330122][   T31] betop 0003:8380:1850.001C: probe with driver betop failed with error -22
[  239.409991][   T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  239.430934][   T65] usb 3-1: device descriptor read/8, error -71
[  239.469958][ T4675] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  239.469968][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  239.516996][ T6650] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0
[  239.524513][ T7214] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0
[  239.531207][ T6650] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0
[  239.531797][  T422] usb 4-1: USB disconnect, device number 19
[  239.561168][   T65] usb 3-1: device descriptor read/8, error -71
[  239.800055][   T65] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  239.821310][   T65] usb 3-1: device descriptor read/8, error -71
[  239.951372][   T65] usb 3-1: device descriptor read/8, error -71
[  240.060390][   T65] usb usb3-port1: unable to enumerate USB device
[  240.510381][ T3583] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  240.510549][ T4675] Bluetooth: hci1: command 0x1003 tx timeout
[  240.811344][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71
[  240.822632][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71
[  240.833576][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  240.843091][   T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  240.852836][   T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  240.862293][   T46] usb 2-1: USB disconnect, device number 64
[  240.988103][ T7237] loop9: detected capacity change from 0 to 7
[  240.994841][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.004035][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.012145][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.021320][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.029263][ T7237]  loop9: unable to read partition table
[  241.035558][ T7237] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  241.057415][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.066639][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.080200][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.089407][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.097485][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.107223][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.115852][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.128878][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.138084][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.146458][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.155640][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  241.321112][ T7261] rust_binder: 338: no such ref 0
[  241.326388][ T7261] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  241.333574][ T7261] rust_binder: 338: no such ref 2
[  241.338829][ T7261] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  241.414073][ T7272] overlay: Bad value for 'redirect_dir'
[  241.428266][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  241.428284][   T36] audit: type=1400 audit(1762853354.144:1300): avc:  denied  { getattr } for  pid=7271 comm="syz.3.2181" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  241.476976][ T7276] incfs: Can't find or create .index dir in ./cgroup
[  241.484288][ T7276] incfs: mount failed -22
[  241.527484][ T7282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2184'.
[  241.548979][ T7288] bridge0: port 3(syz_tun) entered blocking state
[  241.555585][ T7288] bridge0: port 3(syz_tun) entered disabled state
[  241.562445][ T7288] syz_tun: entered allmulticast mode
[  241.568356][ T7288] syz_tun: entered promiscuous mode
[  241.574074][ T7288] bridge0: port 3(syz_tun) entered blocking state
[  241.580528][ T7288] bridge0: port 3(syz_tun) entered forwarding state
[  241.607106][ T7292] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  241.618138][ T7292] rust_binder: Write failure EFAULT in pid:1139
[  241.701577][   T36] audit: type=1400 audit(1762853354.424:1301): avc:  denied  { create } for  pid=7296 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  241.750789][   T65] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  241.844558][ T7304] rust_binder: got new transaction with bad transaction stack
[  241.844585][ T7304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179
[  241.900808][   T65] usb 2-1: Using ep0 maxpacket: 32
[  241.916684][   T65] usb 2-1: unable to get BOS descriptor or descriptor too short
[  241.925099][   T65] usb 2-1: config 14 has an invalid interface number: 248 but max is 0
[  241.933407][   T65] usb 2-1: config 14 has no interface number 0
[  241.939587][   T65] usb 2-1: config 14 interface 248 has no altsetting 0
[  241.948075][   T65] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd
[  241.957180][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.965230][   T65] usb 2-1: Product: syz
[  241.969468][   T65] usb 2-1: Manufacturer: syz
[  241.970852][    T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  241.974091][   T65] usb 2-1: SerialNumber: syz
[  242.134586][ T7308] netlink: 'syz.2.2194': attribute type 19 has an invalid length.
[  242.142651][ T7308] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2194'.
[  242.153154][    T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  242.162276][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.171459][    T9] usb 1-1: config 0 descriptor??
[  242.196213][   T65] ftdi_sio 2-1:14.248: FTDI USB Serial Device converter detected
[  242.205031][   T65] ftdi_sio ttyUSB0: unknown device type: 0x22cd
[  242.212859][   T65] usb 2-1: USB disconnect, device number 65
[  242.219269][   T65] ftdi_sio 2-1:14.248: device disconnected
[  242.378862][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'.
[  242.388348][ T7301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1147
[  242.389063][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.407066][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.616332][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.624962][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.637240][    T9] usb 1-1: string descriptor 0 read error: -71
[  242.649875][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  242.655989][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  242.665105][    T9] usb 1-1: USB disconnect, device number 75
[  243.146624][ T7338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  243.146671][ T7338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[  243.246780][   T36] audit: type=1400 audit(1762853355.963:1302): avc:  denied  { remount } for  pid=7348 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  243.308558][ T7353] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  243.389178][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  243.408523][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2209'.
[  243.418216][ T7357] rust_binder: Write failure EFAULT in pid:1159
[  243.901356][    T9] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  244.052739][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  244.064748][    T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  244.095525][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.107290][    T9] usb 1-1: config 0 descriptor??
[  244.114351][ T7371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  244.125125][ T7387] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000040001 not found
[  244.133425][ T7387] rust_binder: Write failure EINVAL in pid:205
[  244.540981][    T9] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  244.734635][   T65] usb 1-1: USB disconnect, device number 76
[  244.941727][   T31] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  244.988586][ T7443] rust_binder: Error while translating object.
[  244.988634][ T7443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  244.994983][ T7443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:372
[  245.071696][   T31] usb 2-1: device descriptor read/64, error -71
[  245.138692][   T36] audit: type=1400 audit(1762853357.853:1303): avc:  denied  { mount } for  pid=7451 comm="syz.3.2244" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  245.204414][ T7455] 9pnet: Could not find request transport: fdl�no=0x0000000000000003
[  245.224834][ T7457] fuse: Bad value for 'fd'
[  245.321805][   T31] usb 2-1: device descriptor read/64, error -71
[  245.385872][ T7463] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  245.516850][ T7469] rust_binder: 1182: no such ref 6
[  245.522110][ T7469] rust_binder: 1182: no such ref 3
[  245.527234][ T7469] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  245.561875][   T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  245.584076][ T7480] loop2: detected capacity change from 0 to 8388607
[  245.608801][ T7483] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  245.616267][ T7483] rust_binder: Write failure EINVAL in pid:1196
[  245.669688][ T7490] binder: Unknown parameter 'fscontext?}'
[  245.681849][   T36] audit: type=1400 audit(1762853358.393:1304): avc:  denied  { write } for  pid=7489 comm="syz.0.2256" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  245.705136][   T31] usb 2-1: device descriptor read/64, error -71
[  245.802654][ T7495] rust_binder: Write failure EFAULT in pid:1208
[  245.941929][   T31] usb 2-1: device descriptor read/64, error -71
[  246.062092][   T31] usb usb2-port1: attempt power cycle
[  246.081928][  T481] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  246.233214][  T481] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.244871][  T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.255877][  T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.265693][  T481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  246.278909][  T481] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  246.288339][  T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.296763][ T7509] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2261'.
[  246.298246][  T481] usb 1-1: config 0 descriptor??
[  246.402084][   T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  246.423208][   T31] usb 2-1: device descriptor read/8, error -71
[  246.553247][   T31] usb 2-1: device descriptor read/8, error -71
[  246.713939][  T481] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  246.723360][  T481] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  246.802129][   T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  246.823133][   T31] usb 2-1: device descriptor read/8, error -71
[  246.953181][   T31] usb 2-1: device descriptor read/8, error -71
[  246.973393][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.981932][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.990746][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.999752][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.012848][  T481] usb 1-1: USB disconnect, device number 77
[  247.062579][   T31] usb usb2-port1: unable to enumerate USB device
[  247.402290][  T481] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  247.553296][  T481] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  247.562436][  T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.571026][  T481] usb 1-1: config 0 descriptor??
[  247.728697][ T7533] cgroup: subsys name conflicts with all
[  247.728783][ T3251] Bluetooth: hci0: Frame reassembly failed (-84)
[  248.072445][  T422] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  248.185820][  T481] usb 1-1: Cannot set autoneg
[  248.190930][  T481] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  248.202090][ T7567] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[  248.208071][  T481] usb 1-1: USB disconnect, device number 78
[  248.210814][ T7567] rust_binder: Write failure EINVAL in pid:1223
[  248.233526][  T422] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.251031][  T422] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  248.262196][  T422] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.275334][  T422] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  248.289478][  T422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.300678][  T422] usb 2-1: config 0 descriptor??
[  248.307233][ T7533] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  248.331937][ T7576] rust_binder: inc_ref_done called when no active inc_refs
[  248.601097][   T36] audit: type=1400 audit(1762853361.312:1305): avc:  denied  { getopt } for  pid=7586 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  248.605913][ T7587] tmpfs: Invalid uid '0x00000000ffffffff'
[  248.662526][  T481] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  248.720026][  T422] gt683r_led 0003:1770:FF00.001F: hidraw0: USB HID v0.08 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0
[  248.785400][ T7598] netlink: 'syz.3.2290': attribute type 27 has an invalid length.
[  248.812531][  T481] usb 1-1: Using ep0 maxpacket: 16
[  248.819128][  T481] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.829706][  T481] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.840856][  T481] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  248.846722][   T36] audit: type=1400 audit(1762853361.562:1306): avc:  denied  { mount } for  pid=7602 comm="syz.3.2292" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  248.878221][  T481] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.888013][  T481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.897282][  T481] usb 1-1: Product: 㻐砀绨髐屁篣ᘪ硑땁禬⒞ۻ쬲粜㖘傗龀딜ﰐ㤼ꃒᵈ矄飊ᨶ滈㒄칝ⷮۂ竬㏦͕愙빅㟉蜛踋㊕뺷비㪀⽺駦頲ㅵ஀뜇ᾮΩ⠪肮鑴ũ븡싱䟸瓻ẛꪇኄ筙葩븁鳁䃸コ첡ⳡ䰓訫읉≽好峗࿱闧鍇濇ѻ깰塆鬕瓜溼Ϻ克깢뫁焁쇬雲梗비伵⭗ȱ孟恝䒠轂珧裧
[  248.931871][  T481] usb 1-1: Manufacturer: ס一琍၍큟Ԟ좃㖶硙赃ⅇ怱禙捘㮫삲类ꇰ舐톉路㽴殙ꝰ㒫囇觯볏蕮ꥰƤⶃ鋦捖ᦱ饍惤鱤ऽ衺绉샕堢㡖䚋﷑Ẻ䓑⊊휀㶧䭸訔Ᏹᵇ⅛껹뼃Ƥ濡然瓦훇⁶猸
[  248.958741][ T7578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  249.194783][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  249.203844][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  249.370971][  T481] usb 1-1: 0:2 : does not exist
[  249.379356][  T481] usb 1-1: USB disconnect, device number 79
[  249.492675][   T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  249.643818][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  249.654726][   T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  249.665863][   T65] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  249.675044][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.683100][   T65] usb 3-1: Product: syz
[  249.687314][   T65] usb 3-1: Manufacturer: syz
[  249.691916][   T65] usb 3-1: SerialNumber: syz
[  249.697180][   T65] usb 3-1: config 0 descriptor??
[  249.703192][   T65] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90
[  249.792844][ T4675] Bluetooth: hci0: command 0x1003 tx timeout
[  249.792989][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  249.900896][ T7652] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  249.913124][ T7652] SELinux: failed to load policy
[  249.918444][  T422] usb 3-1: USB disconnect, device number 22
[  249.940577][ T7659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  249.940613][ T7659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1237
[  249.967542][ T7663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2309'.
[  250.582894][  T481] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  250.727403][   T10] usb 2-1: USB disconnect, device number 70
[  250.735261][  T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.746453][  T210] gt683r_led 0003:1770:FF00.001F: failed to send set report request: -19
[  250.755458][  T210] gt683r_led 0003:1770:FF00.001F: failed to send set report request: -19
[  250.764417][  T481] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[  250.773743][  T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.785173][  T481] usb 1-1: config 0 descriptor??
[  250.986308][ T7705] overlayfs: failed to clone upperpath
[  251.006632][   T36] audit: type=1400 audit(1762853363.722:1307): avc:  denied  { relabelfrom } for  pid=7706 comm="syz.3.2323" name="" dev="pipefs" ino=39096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  251.041337][ T7711] 9pnet_fd: Insufficient options for proto=fd
[  251.120985][ T7723] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2329'.
[  251.171186][   T36] audit: type=1326 audit(1762853363.882:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.176189][ T7733] /dev/rnullb0: Can't open blockdev
[  251.211786][  T481] usbhid 1-1:0.0: can't add hid device: -71
[  251.218447][  T481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  251.231610][   T36] audit: type=1326 audit(1762853363.882:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.256576][  T481] usb 1-1: USB disconnect, device number 80
[  251.263684][   T36] audit: type=1326 audit(1762853363.882:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.300009][   T36] audit: type=1326 audit(1762853363.882:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.329877][   T36] audit: type=1326 audit(1762853363.922:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.333737][ T7737] rust_binder: Error while translating object.
[  251.353774][   T36] audit: type=1326 audit(1762853363.922:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.373075][ T7737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  251.386368][   T36] audit: type=1326 audit(1762853363.922:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x7ffc0000
[  251.393798][ T7737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:409
[  251.693096][  T422] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  251.753131][  T481] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  251.838369][ T7762] rust_binder: Write failure EFAULT in pid:1271
[  251.853125][  T422] usb 3-1: Using ep0 maxpacket: 32
[  251.874151][  T422] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  251.882729][  T422] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  251.891612][  T422] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  251.900826][  T422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  251.910680][  T422] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  251.920589][  T422] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  251.923629][  T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  251.933925][  T422] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  251.953889][  T422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.961468][  T481] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  251.966998][  T422] usb 3-1: config 0 descriptor??
[  251.971662][  T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.993371][  T481] usb 2-1: config 0 descriptor??
[  251.998662][ T7747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  252.178384][  T422] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  252.200353][  T422] usb 3-1: USB disconnect, device number 23
[  252.207939][  T422] usblp0: removed
[  252.347377][ T7787] rust_binder: Error while translating object.
[  252.347433][ T7787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  252.353883][ T7787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1284
[  252.364066][ T7789] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.415925][  T481] hid-generic 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  252.464025][ T7807] rust_binder: Write failure EINVAL in pid:1303
[  252.477363][ T7809] rust_binder: Error while translating object.
[  252.483732][ T7809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  252.489908][ T7809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1305
[  252.537413][ T7816] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.618012][   T65] usb 2-1: USB disconnect, device number 71
[  252.643241][  T210] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  252.711635][ T7833] syzkaller0: entered allmulticast mode
[  252.744774][ T7833] syzkaller0 (unregistering): left allmulticast mode
[  252.783275][  T422] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  252.803271][  T210] usb 3-1: Using ep0 maxpacket: 32
[  252.809631][  T210] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  252.822910][  T210] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  252.833564][  T210] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  252.842567][  T210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  252.854802][  T210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  252.866606][  T210] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  252.880786][  T210] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  252.890096][  T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.903577][  T210] usb 3-1: config 0 descriptor??
[  252.935974][  T422] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  252.945221][  T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.953308][  T422] usb 1-1: Product: syz
[  252.957671][  T422] usb 1-1: Manufacturer: syz
[  252.962296][  T422] usb 1-1: SerialNumber: syz
[  252.982056][ T7839] fuse: Bad value for 'fd'
[  253.114146][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.122746][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.134441][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.142965][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.153449][  T210] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  253.170304][    C0] usblp0: nonzero read bulk status received: -71
[  253.176918][  T210] usb 3-1: USB disconnect, device number 24
[  253.390378][ T7742] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  253.404427][ T7742] rust_binder: Write failure EINVAL in pid:411
[  253.404592][ T7741] usblp0: removed
[  253.417877][ T7859] can0: slcan on ptm0.
[  253.464359][ T7859] can0 (unregistered): slcan off ptm0.
[  254.114627][ T7903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7903 comm=syz.1.2380
[  254.213517][  T210] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  254.364582][  T210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  254.375586][  T210] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  254.384693][  T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.393464][  T210] usb 3-1: config 0 descriptor??
[  254.398712][ T7894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  254.413528][  T481] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  254.543546][  T481] usb 2-1: device descriptor read/64, error -71
[  254.783554][  T481] usb 2-1: device descriptor read/64, error -71
[  254.809485][  T210] hid-generic 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  255.007582][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.016260][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.023598][  T481] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  255.031262][  T422] usb 3-1: USB disconnect, device number 25
[  255.067081][ T7915] overlayfs: failed to resolve './file0': -2
[  255.076072][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'.
[  255.163701][  T481] usb 2-1: device descriptor read/64, error -71
[  255.403624][  T481] usb 2-1: device descriptor read/64, error -71
[  255.445395][ T7943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  255.445422][ T7943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:455
[  255.468073][ T7945] binder: Unknown parameter 'fscontext?}'
[  255.513773][  T481] usb usb2-port1: attempt power cycle
[  255.543169][   T10] usb 1-1: USB disconnect, device number 81
[  255.559651][ T3239] bridge_slave_1: left allmulticast mode
[  255.571563][ T3239] bridge_slave_1: left promiscuous mode
[  255.586996][ T3239] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.594834][ T3239] bridge_slave_0: left allmulticast mode
[  255.600611][ T3239] bridge_slave_0: left promiscuous mode
[  255.606781][ T3239] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.643286][ T6650] Bluetooth: hci0: Frame reassembly failed (-84)
[  255.671517][ T7955] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  255.706953][ T3239] tipc: Left network mode
[  255.713101][ T3239] veth1_macvtap: left promiscuous mode
[  255.853726][  T481] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  255.874718][  T481] usb 2-1: device descriptor read/8, error -71
[  256.004786][  T481] usb 2-1: device descriptor read/8, error -71
[  256.163737][  T422] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  256.243800][  T481] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  256.264789][  T481] usb 2-1: device descriptor read/8, error -71
[  256.313745][  T422] usb 3-1: Using ep0 maxpacket: 32
[  256.319952][  T422] usb 3-1: config index 0 descriptor too short (expected 155, got 27)
[  256.328332][  T422] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  256.336557][  T422] usb 3-1: config 0 has no interface number 0
[  256.342644][  T422] usb 3-1: config 0 interface 196 altsetting 227 endpoint 0x82 has invalid wMaxPacketSize 0
[  256.352734][  T422] usb 3-1: config 0 interface 196 has no altsetting 0
[  256.361173][  T422] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=d2.7f
[  256.370264][  T422] usb 3-1: New USB device strings: Mfr=185, Product=212, SerialNumber=3
[  256.378675][  T422] usb 3-1: Product: syz
[  256.382846][  T422] usb 3-1: Manufacturer: syz
[  256.387472][  T422] usb 3-1: SerialNumber: syz
[  256.392768][  T422] usb 3-1: config 0 descriptor??
[  256.404818][  T481] usb 2-1: device descriptor read/8, error -71
[  256.513852][  T481] usb usb2-port1: unable to enumerate USB device
[  256.602325][  T422] ipheth 3-1:0.196: Unable to find alternate settings interface
[  256.612511][  T422] usb 3-1: USB disconnect, device number 26
[  257.127612][ T3239] Bluetooth: hci1: Frame reassembly failed (-84)
[  257.196094][ T8011] fuse: Unknown parameter '�g��'!d�������0x0000000000000004'
[  257.713952][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  257.715222][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  257.778165][ T8035] __vm_enough_memory: pid: 8035, comm: syz.0.2424, bytes: 18014402804453376 not enough memory for the allocation
[  257.805944][ T8037] syz.0.2425: attempt to access beyond end of device
[  257.805944][ T8037] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  257.818884][ T8037] FAT-fs (loop0): unable to read boot sector
[  257.936948][ T8039] overlayfs: overlapping lowerdir path
[  257.952471][   T36] kauditd_printk_skb: 1164 callbacks suppressed
[  257.952490][   T36] audit: type=1400 audit(1762853370.661:2479): avc:  denied  { unmount } for  pid=803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  258.043663][ T8042] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  258.092285][ T8048] rust_binder: Read failure Err(EAGAIN) in pid:1330
[  258.370785][ T8080] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.389454][ T8082] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  258.394402][ T8082] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  258.468917][ T8097] overlayfs: failed to clone upperpath
[  258.754516][  T481] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  258.905102][  T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  258.916329][  T481] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  258.925415][  T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.934039][  T481] usb 1-1: config 0 descriptor??
[  258.939366][ T8101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  259.154111][ T3583] Bluetooth: hci1: command 0x1003 tx timeout
[  259.154259][ T4675] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  259.349842][ T8127] 9pnet_fd: Insufficient options for proto=fd
[  259.396086][  T481] usbhid 1-1:0.0: can't add hid device: -71
[  259.402113][  T481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  259.415822][  T481] usb 1-1: USB disconnect, device number 82
[  259.620440][   T36] audit: type=1400 audit(1762853372.331:2480): avc:  denied  { create } for  pid=8147 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  259.676062][ T8154] netlink: 'syz.3.2466': attribute type 11 has an invalid length.
[  259.714166][   T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  259.807533][ T8161] overlayfs: disabling nfs_export due to verity=on
[  259.814226][ T8161] overlayfs: failed to clone upperpath
[  259.864148][   T10] usb 2-1: Using ep0 maxpacket: 32
[  259.870685][   T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  259.879091][   T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  259.887760][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  259.896934][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  259.913676][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  259.923743][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  259.938709][   T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  259.948913][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.958494][   T10] usb 2-1: config 0 descriptor??
[  260.016090][ T8166] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  260.023382][ T8166] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  260.030820][ T8166] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  260.040265][ T8166] rust_binder: pid 8166 performed invalid decrement on ref
[  260.080143][ T8172] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  260.165527][   T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  260.184151][   T10] usb 2-1: USB disconnect, device number 76
[  260.190844][   T10] usblp0: removed
[  260.249859][ T8179] tmpfs: Bad value for 'huge'
[  260.604283][   T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  260.774219][   T10] usb 2-1: Using ep0 maxpacket: 32
[  260.780664][   T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  260.789159][   T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  260.797951][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  260.807250][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  260.818445][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  260.831893][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  260.845217][   T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  260.854436][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.869503][   T10] usb 2-1: config 0 descriptor??
[  261.076314][   T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  261.164265][  T422] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  261.325501][  T422] usb 1-1: Using ep0 maxpacket: 16
[  261.332661][  T422] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.342719][ T8214] incfs: Backing dir is not set, filesystem can't be mounted.
[  261.343199][  T422] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  261.350358][ T8214] incfs: mount failed -2
[  261.361328][  T422] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.372748][  T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.380782][  T422] usb 1-1: Product: syz
[  261.385115][  T422] usb 1-1: Manufacturer: syz
[  261.389723][  T422] usb 1-1: SerialNumber: syz
[  261.430204][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.438812][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.597392][ T8208] netlink: 'syz.0.2485': attribute type 16 has an invalid length.
[  261.605598][ T8208] netlink: 'syz.0.2485': attribute type 25 has an invalid length.
[  261.613675][ T8208] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.2485'.
[  261.619942][ T8218] 9pnet_fd: Insufficient options for proto=fd
[  261.632085][  T422] usb 1-1: 0:2 : does not exist
[  261.644696][  T422] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  261.651325][  T481] usb 2-1: USB disconnect, device number 77
[  261.660939][  T481] usblp0: removed
[  261.669134][  T422] usb 1-1: USB disconnect, device number 83
[  261.687219][ T6500] udevd[6500]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  261.785107][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2490'.
[  261.917378][ T8236] overlayfs: failed to clone upperpath
[  262.048996][   T36] audit: type=1400 audit(1762853374.770:2481): avc:  denied  { accept } for  pid=8256 comm="syz.2.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  262.153019][   T36] audit: type=1400 audit(1762853374.870:2482): avc:  denied  { mounton } for  pid=8266 comm="syz.0.2504" path="/442/file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  262.422652][ T8290] SELinux:  Context system_u:object_r:boot_t:s0 is not valid (left unmapped).
[  262.432957][   T36] audit: type=1400 audit(1762853375.150:2483): avc:  denied  { relabelto } for  pid=8289 comm="syz.2.2511" name="rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  262.460000][   T36] audit: type=1400 audit(1762853375.180:2484): avc:  denied  { associate } for  pid=8289 comm="syz.2.2511" name="rnullb0" dev="tmpfs" ino=861 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0"
[  262.464436][  T481] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  262.563288][ T8304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8304 comm=syz.2.2518
[  262.644440][  T481] usb 2-1: device descriptor read/64, error -71
[  262.649411][ T8315] netlink: 'syz.2.2522': attribute type 3 has an invalid length.
[  262.884434][  T481] usb 2-1: device descriptor read/64, error -71
[  263.002507][ T8317] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  263.002624][ T8317] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  263.022827][ T8319] rust_binder: 1364: no such ref 1
[  263.124452][  T481] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  263.150614][ T8340] overlayfs: failed to clone upperpath
[  263.187608][ T8350] overlayfs: failed to clone lowerpath
[  263.264491][  T481] usb 2-1: device descriptor read/64, error -71
[  263.347475][ T8365] batadv_slave_1: entered promiscuous mode
[  263.359085][ T8365] batadv_slave_1: left promiscuous mode
[  263.370065][   T36] audit: type=1400 audit(1762853376.090:2485): avc:  denied  { read write } for  pid=8368 comm="syz.2.2542" name="rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  263.396481][   T36] audit: type=1400 audit(1762853376.090:2486): avc:  denied  { open } for  pid=8368 comm="syz.2.2542" path="/dev/rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  263.422626][  T422] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  263.430296][   T36] audit: type=1400 audit(1762853376.090:2487): avc:  denied  { map } for  pid=8368 comm="syz.2.2542" path="/dev/rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  263.456717][   T36] audit: type=1400 audit(1762853376.090:2488): avc:  denied  { execute } for  pid=8368 comm="syz.2.2542" path="/dev/rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  263.544562][  T481] usb 2-1: device descriptor read/64, error -71
[  263.605605][  T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  263.616699][  T422] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  263.625782][  T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.634617][  T422] usb 1-1: config 0 descriptor??
[  263.639892][ T8338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  263.654582][  T481] usb usb2-port1: attempt power cycle
[  263.994776][  T481] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  264.025659][  T481] usb 2-1: device descriptor read/8, error -71
[  264.054140][  T422] hid-generic 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  264.155605][  T481] usb 2-1: device descriptor read/8, error -71
[  264.250166][  T210] usb 1-1: USB disconnect, device number 84
[  264.394606][  T481] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  264.415641][  T481] usb 2-1: device descriptor read/8, error -71
[  264.545607][  T481] usb 2-1: device descriptor read/8, error -71
[  264.654682][  T481] usb usb2-port1: unable to enumerate USB device
[  265.512049][   T36] audit: type=1400 audit(1762853378.230:2489): avc:  denied  { append } for  pid=8486 comm="syz.2.2584" name="rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  265.537995][   T36] audit: type=1400 audit(1762853378.230:2490): avc:  denied  { ioctl } for  pid=8486 comm="syz.2.2584" path="/dev/rnullb0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  265.624663][  T422] usb 2-1: new low-speed USB device number 82 using dummy_hcd
[  265.776033][  T422] usb 2-1: unable to get BOS descriptor or descriptor too short
[  265.791497][  T422] usb 2-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config
[  265.808034][  T422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[  265.819518][  T422] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.835034][  T422] usb 2-1: string descriptor 0 read error: -22
[  265.841531][  T422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  265.854007][  T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.864429][ T8453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  266.074042][ T8453] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  266.080238][ T8455] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  266.092085][  T481] usb 2-1: USB disconnect, device number 82
[  266.626306][   T36] audit: type=1400 audit(1762853379.350:2491): avc:  denied  { lock } for  pid=8575 comm="syz.1.2616" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  266.770950][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'.
[  266.783229][ T8582] vcan0 (unregistering): left allmulticast mode
[  266.821441][ T8592] overlayfs: failed to clone upperpath
[  266.895604][ T8605] netlink: 'syz.1.2626': attribute type 6 has an invalid length.
[  266.947321][   T36] audit: type=1400 audit(1762853379.670:2492): avc:  denied  { append } for  pid=8611 comm="syz.1.2630" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  267.264749][  T481] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  267.415772][  T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.426715][  T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.436618][  T481] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  267.449545][  T481] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  267.458607][  T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.467925][  T481] usb 2-1: config 0 descriptor??
[  267.500484][ T8623] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2634'.
[  267.509740][ T8624] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2634'.
[  267.527789][ T8623] netlink: 'syz.3.2634': attribute type 11 has an invalid length.
[  267.604292][ T8642] netlink: 'syz.3.2641': attribute type 4 has an invalid length.
[  267.729624][ T8663] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2647'.
[  267.799260][ T8672] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  267.813479][ T8672] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  267.829387][ T8670] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  268.001949][ T7177] bridge0: port 3(syz_tun) entered disabled state
[  268.015500][ T7177] syz_tun (unregistering): left allmulticast mode
[  268.022048][ T7177] syz_tun (unregistering): left promiscuous mode
[  268.028442][ T7177] bridge0: port 3(syz_tun) entered disabled state
[  268.182619][ T8683] IPv6: NLM_F_CREATE should be specified when creating new route
[  268.276974][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.284185][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.285355][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.291355][ T8684] bridge_slave_0: entered allmulticast mode
[  268.299926][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.316618][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.318317][ T8684] bridge_slave_0: entered promiscuous mode
[  268.325229][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.342576][  T481] usbhid 2-1:0.0: can't add hid device: -71
[  268.349062][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.349279][  T481] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  268.361272][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.370429][  T481] usb 2-1: USB disconnect, device number 83
[  268.371674][ T8684] bridge_slave_1: entered allmulticast mode
[  268.383353][ T8684] bridge_slave_1: entered promiscuous mode
[  268.438700][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.445815][ T8684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.453137][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.460207][ T8684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.481840][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.489217][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.499670][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.506780][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.516620][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.523703][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.550459][ T8684] veth0_vlan: entered promiscuous mode
[  268.562102][ T8684] veth1_macvtap: entered promiscuous mode
[  268.582857][   T36] audit: type=1400 audit(1762853381.300:2493): avc:  denied  { mounton } for  pid=8684 comm="syz-executor" path="/root/syzkaller.KBEELT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  268.840276][ T8720] fuse: Unknown parameter '1C'
[  268.884878][  T422] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  269.044896][  T422] usb 5-1: Using ep0 maxpacket: 32
[  269.056268][  T422] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  269.065138][  T422] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  269.076876][  T422] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  269.086091][  T422] usb 5-1: config 1 has no interface number 1
[  269.092206][  T422] usb 5-1: config 1 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  269.105551][  T422] usb 5-1: config 1 interface 2 has no altsetting 0
[  269.113820][  T422] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  269.123174][  T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.131505][  T422] usb 5-1: Product: о
[  269.135907][  T422] usb 5-1: Manufacturer: Я
[  269.140433][  T422] usb 5-1: SerialNumber: 㾹缼撧얏ຳ苨䮴썅㢒
[  269.204887][   T31] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  269.354870][   T31] usb 2-1: Using ep0 maxpacket: 32
[  269.362213][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.373363][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.383466][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  269.396926][   T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  269.406216][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.416490][   T31] usb 2-1: config 0 descriptor??
[  269.428062][   T31] usbhid 2-1:0.0: can't add hid device: -22
[  269.434104][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  269.561341][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.570759][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.579877][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.588838][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.601418][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.610106][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.618969][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.628203][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.628259][   T10] usb 2-1: USB disconnect, device number 84
[  269.637111][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.650919][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.669312][  T422] usbhid 5-1:1.2: couldn't find an input interrupt endpoint
[  269.679875][  T422] usb 5-1: USB disconnect, device number 2
[  269.689664][ T6500] udevd[6500]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  269.690240][ T8779] 9pnet_fd: Insufficient options for proto=fd
[  269.806889][ T8791] rust_binder: 20: no such ref 0
[  269.811890][ T8791] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  269.819212][ T8791] rust_binder: 20: no such ref 2
[  269.824207][ T8791] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  270.111502][ T8801] overlayfs: failed to clone upperpath
[  270.161747][   T36] audit: type=1400 audit(1762853382.880:2494): avc:  denied  { ioctl } for  pid=8806 comm="syz.1.2693" path="socket:[41936]" dev="sockfs" ino=41936 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  270.165501][ T8807] binder: Bad value for 'max'
[  270.233914][ T3251] Bluetooth: hci0: Frame reassembly failed (-84)
[  270.246959][ T8815] veth0_virt_wifi: mtu less than device minimum
[  270.413557][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2703'.
[  270.508001][ T8844] rust_binder: Error while translating object.
[  270.508033][ T8844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  270.514256][ T8844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28
[  270.539097][   T36] audit: type=1400 audit(1762853383.260:2495): avc:  denied  { ioctl } for  pid=8845 comm="syz.4.2706" path="socket:[42033]" dev="sockfs" ino=42033 ioctlcmd=0x4b48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  270.844931][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  270.994914][   T10] usb 5-1: Using ep0 maxpacket: 32
[  271.001122][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  271.009517][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  271.018185][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  271.027187][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  271.036890][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  271.046608][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  271.059596][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  271.068658][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.077356][   T10] usb 5-1: config 0 descriptor??
[  271.284119][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  271.298192][   T10] usb 5-1: USB disconnect, device number 3
[  271.306431][   T10] usblp0: removed
[  271.324680][ T8875] netlink: 'syz.3.2716': attribute type 16 has an invalid length.
[  271.332691][ T8875] netlink: 'syz.3.2716': attribute type 3 has an invalid length.
[  271.340462][ T8875] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2716'.
[  271.604958][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  271.754967][   T10] usb 5-1: Using ep0 maxpacket: 32
[  271.761407][   T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  271.769934][   T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  271.778716][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  271.787793][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  271.797632][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  271.807538][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  271.820900][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  271.830319][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.839269][   T10] usb 5-1: config 0 descriptor??
[  272.049552][   T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  272.275221][ T3583] Bluetooth: hci0: command 0x1003 tx timeout
[  272.281305][ T4675] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  272.512865][   T36] audit: type=1326 audit(1762853385.230:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.2731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f130f18f6c9 code=0x0
[  272.567113][ T8922] overlayfs: failed to clone upperpath
[  272.573081][ T8921] overlayfs: failed to clone upperpath
[  272.610389][ T8935] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2736'.
[  272.776308][ T8965] 9pnet_fd: Insufficient options for proto=fd
[  272.813200][ T8972] 9pnet_fd: Insufficient options for proto=fd
[  273.212819][ T8986] fuse: Bad value for 'fd'
[  273.242055][ T8990] tmpfs: Unknown parameter 'usrquota_inode_hardlimit'
[  273.587788][ T9019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1030 sclass=netlink_route_socket pid=9019 comm=syz.1.2768
[  273.612883][   T31] usb 5-1: USB disconnect, device number 4
[  273.614620][ T9022] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  273.630924][   T31] usblp0: removed
[  273.681114][ T9030] binder: Bad value for 'stats'
[  274.146008][ T9064] overlayfs: missing 'workdir'
[  274.152121][   T36] audit: type=1400 audit(1762853386.870:2497): avc:  denied  { map } for  pid=9063 comm="syz.3.2783" path="socket:[43287]" dev="sockfs" ino=43287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  274.258246][ T9064] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2783'.
[  274.321790][ T9081] netlink: 'syz.2.2790': attribute type 1 has an invalid length.
[  274.329628][ T9087] tipc: New replicast peer: 255.255.255.255
[  274.338176][ T9087] tipc: Enabled bearer <udp:syz2>, priority 10
[  274.430488][ T9089] cgroup: fork rejected by pids controller in /syz2
[  274.531556][ T9137] 9pnet_fd: Insufficient options for proto=fd
[  274.610603][ T9147] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  274.631964][ T9147] SELinux: failed to load policy
[  274.945130][  T422] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  275.075110][  T422] usb 2-1: device descriptor read/64, error -71
[  275.252786][ T9210] 9pnet_fd: Insufficient options for proto=fd
[  275.273113][ T9214] fuse: Unknown parameter ''
[  275.309721][ T9227] 8021q: VLANs not supported on gre0
[  275.316502][ T9227] overlayfs: failed to clone upperpath
[  275.325249][  T422] usb 2-1: device descriptor read/64, error -71
[  275.366041][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9231 comm=syz.2.2817
[  275.575118][  T422] usb 2-1: new full-speed USB device number 87 using dummy_hcd
[  275.585243][   T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  275.705124][  T422] usb 2-1: device descriptor read/64, error -71
[  275.736279][   T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  275.747816][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  275.758706][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  275.768468][   T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  275.781393][   T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  275.790461][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.799667][   T46] usb 5-1: config 0 descriptor??
[  275.945155][  T422] usb 2-1: device descriptor read/64, error -71
[  276.057253][  T422] usb usb2-port1: attempt power cycle
[  276.208245][   T46] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[  276.216091][   T46] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving
[  276.230208][   T46] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  276.355647][   T36] audit: type=1326 audit(1762853389.079:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43e738f6c9 code=0x0
[  276.397189][ T9272] fuse: Unknown parameter 'Ȍ'
[  276.405152][  T422] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  276.437073][  T422] usb 2-1: device descriptor read/8, error -71
[  276.475767][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'.
[  276.566267][  T422] usb 2-1: device descriptor read/8, error -71
[  276.805154][  T422] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[  276.826222][  T422] usb 2-1: device descriptor read/8, error -71
[  276.956273][  T422] usb 2-1: device descriptor read/8, error -71
[  277.006518][ T9280] rust_binder: Error while translating object.
[  277.006570][ T9280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  277.012772][ T9280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:60
[  277.066743][ T9285] loop7: detected capacity change from 0 to 16383
[  277.066809][  T422] usb usb2-port1: unable to enumerate USB device
[  277.210101][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.218725][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.228397][   T36] audit: type=1400 audit(1762853389.949:2499): avc:  denied  { mount } for  pid=9289 comm="syz.4.2839" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  277.275160][   T36] audit: type=1326 audit(1762853389.949:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.4.2839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02b8f6c9 code=0xffff0000
[  277.334069][ T9298] netlink: 'syz.2.2843': attribute type 28 has an invalid length.
[  277.346013][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2843'.
[  277.507649][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'.
[  277.543329][ T9318] tipc: Can't bind to reserved service type 1
[  277.656425][  T422] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  278.287612][   T36] audit: type=1400 audit(1762853391.009:2501): avc:  denied  { listen } for  pid=9373 comm="syz.3.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  278.343104][ T9376] overlayfs: conflicting options: nfs_export=on,index=off
[  279.064145][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'.
[  279.131755][ T9427] rust_binder: Write failure EFAULT in pid:87
[  279.346818][ T9444] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  279.554463][ T9461] netlink: 'syz.4.2895': attribute type 16 has an invalid length.
[  279.567845][ T9461] netlink: 'syz.4.2895': attribute type 25 has an invalid length.
[  279.581353][ T9461] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.2895'.
[  279.691458][ T9479] 9pnet_fd: Insufficient options for proto=fd
[  279.734782][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2902'.
[  279.776972][ T9482] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[  279.792089][ T9482] rust_binder: Write failure EINVAL in pid:118
[  279.875540][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2911'.
[  279.893200][ T3201] Bluetooth: hci0: Frame reassembly failed (-84)
[  279.930903][   T36] audit: type=1400 audit(1762853392.649:2502): avc:  denied  { watch watch_reads } for  pid=9510 comm="syz.3.2912" path="/330/file0" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  280.552743][ T9538] netlink: 'syz.4.2922': attribute type 3 has an invalid length.
[  280.600330][ T9540] fuse: Bad value for 'user_id'
[  280.605276][ T9540] fuse: Bad value for 'user_id'
[  281.070035][ T9576] overlayfs: failed to clone lowerpath
[  281.082783][ T9576] overlayfs: failed to clone lowerpath
[  281.331972][ T9592] x_tables: unsorted entry at hook 1
[  281.485668][ T9594] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  281.486159][ T9594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137
[  281.493095][ T9595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137
[  281.509162][ T9594] Bluetooth: hci1: Frame reassembly failed (-84)
[  281.532285][ T9594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  281.532319][ T9594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137
[  281.532783][ T3201] Bluetooth: hci1: Frame reassembly failed (-84)
[  281.771455][ T9630] 9pnet_fd: Insufficient options for proto=fd
[  281.846943][ T9640] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2962'.
[  281.856293][ T9640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2962'.
[  281.955362][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  281.955464][ T4675] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  282.090788][ T9656] overlayfs: failed to resolve './bus': -2
[  282.492385][ T9666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2971'.
[  282.885346][  T422] usb 5-1: device descriptor read/64, error -110
[  283.145354][  T422] usb 5-1: device descriptor read/64, error -32
[  283.250850][ T9703] fuse: Bad value for 'fd'
[  283.385343][  T422] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  283.515358][  T422] usb 5-1: device descriptor read/64, error -32
[  283.555363][ T4675] Bluetooth: hci1: command 0x1003 tx timeout
[  283.555722][ T3583] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  283.643124][ T9741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2994'.
[  283.739294][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2997'.
[  283.755462][  T422] usb 5-1: device descriptor read/64, error -32
[  283.955417][  T422] raw-gadget.1 gadget.4: failed to queue resume event
[  284.059727][  T422] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  284.095505][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.102887][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.110313][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.118205][  T422] usb 5-1: device descriptor read/8, error -32
[  284.199616][   T36] audit: type=1326 audit(1762853396.919:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.3.3003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x0
[  284.245584][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.253033][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.260312][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.267501][  T422] usb 5-1: device descriptor read/8, error -32
[  284.349117][ T9778] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  284.369117][   T36] audit: type=1400 audit(1762853397.089:2504): avc:  denied  { listen } for  pid=9777 comm="syz.1.3004" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  284.375375][  T422] raw-gadget.1 gadget.4: failed to queue suspend event
[  284.409139][  T422] raw-gadget.1 gadget.4: failed to queue reset event
[  284.476006][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3006'.
[  284.486773][  T422] raw-gadget.1 gadget.4: failed to queue resume event
[  284.497271][ T9782] fuse: Unknown parameter '000000000000000000280x00000000000000060000000000000000000000300000000000000000000'
[  284.527687][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.537614][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.565360][  T422] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  284.595510][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.602860][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.610389][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.617707][  T422] usb 5-1: device descriptor read/8, error -32
[  284.629286][ T9811] x_tables: unsorted entry at hook 2
[  284.630079][ T9812] netlink: 'syz.1.3012': attribute type 27 has an invalid length.
[  284.642582][ T9812] lo: entered promiscuous mode
[  284.647726][ T9812] lo: entered allmulticast mode
[  284.673269][ T9812] tunl0: entered promiscuous mode
[  284.678688][ T9812] tunl0: entered allmulticast mode
[  284.684859][ T9812] gre0: entered promiscuous mode
[  284.693218][ T9812] gre0: entered allmulticast mode
[  284.705108][ T9812] gretap0: entered promiscuous mode
[  284.710714][ T9812] gretap0: entered allmulticast mode
[  284.717372][ T9812] erspan0: entered promiscuous mode
[  284.722654][ T9812] erspan0: entered allmulticast mode
[  284.728807][ T9812] ip_vti0: entered promiscuous mode
[  284.734105][ T9812] ip_vti0: entered allmulticast mode
[  284.740079][ T9812] ip6_vti0: entered promiscuous mode
[  284.745629][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.746109][ T9812] ip6_vti0: entered allmulticast mode
[  284.753164][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.758924][ T9812] sit0: entered promiscuous mode
[  284.766734][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.772481][ T9812] sit0: entered allmulticast mode
[  284.777482][  T422] usb 5-1: device descriptor read/8, error -32
[  284.783327][ T9812] ip6tnl0: entered promiscuous mode
[  284.793936][ T9812] ip6tnl0: entered allmulticast mode
[  284.800316][ T9812] ip6gre0: entered promiscuous mode
[  284.805963][ T9812] ip6gre0: entered allmulticast mode
[  284.811883][ T9812] ip6gretap0: entered promiscuous mode
[  284.817510][ T9812] ip6gretap0: entered allmulticast mode
[  284.828120][ T9812] bridge0: entered promiscuous mode
[  284.835584][ T9812] bridge0: entered allmulticast mode
[  284.841635][ T9812] dummy0: entered promiscuous mode
[  284.847033][ T9812] dummy0: entered allmulticast mode
[  284.852934][ T9812] veth0: entered promiscuous mode
[  284.858260][ T9812] veth0: entered allmulticast mode
[  284.863952][ T9812] veth1: entered promiscuous mode
[  284.869295][ T9812] veth1: entered allmulticast mode
[  284.875047][ T9812] wg0: entered promiscuous mode
[  284.880130][ T9812] wg0: entered allmulticast mode
[  284.885756][ T9812] wg1: entered promiscuous mode
[  284.890685][ T9812] wg1: entered allmulticast mode
[  284.895763][  T422] raw-gadget.1 gadget.4: failed to queue suspend event
[  284.902856][   T46] usb 5-1: USB disconnect, device number 5
[  284.910281][ T9812] wg2: entered promiscuous mode
[  284.915269][ T9812] wg2: entered allmulticast mode
[  284.921684][ T9812] veth0_to_bridge: entered promiscuous mode
[  284.924266][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  284.927744][ T9812] veth0_to_bridge: entered allmulticast mode
[  284.941685][ T9812] veth1_to_bridge: entered promiscuous mode
[  284.947843][ T9812] veth1_to_bridge: entered allmulticast mode
[  284.954453][ T9812] bridge_slave_1: entered promiscuous mode
[  284.960715][ T9812] bridge_slave_1: entered allmulticast mode
[  284.967779][ T9812] veth0_to_bond: entered promiscuous mode
[  284.973693][ T9812] veth0_to_bond: entered allmulticast mode
[  284.980562][ T9812] bond_slave_0: entered promiscuous mode
[  284.986311][ T9812] bond_slave_0: entered allmulticast mode
[  284.992688][ T9812] veth1_to_bond: entered promiscuous mode
[  285.000833][ T9812] veth1_to_bond: entered allmulticast mode
[  285.007598][ T9812] 
@0�: entered promiscuous mode
[  285.012627][ T9812] 
@0�: entered allmulticast mode
[  285.015586][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  285.018623][ T9812] veth0_to_team: entered promiscuous mode
[  285.042577][ T9812] veth0_to_team: entered allmulticast mode
[  285.050677][ T9812] team_slave_0: entered promiscuous mode
[  285.056420][ T9812] team_slave_0: entered allmulticast mode
[  285.062795][ T9812] veth1_to_team: entered promiscuous mode
[  285.068712][ T9812] veth1_to_team: entered allmulticast mode
[  285.075136][ T9812] team_slave_1: entered promiscuous mode
[  285.080255][ T9841] netlink: 'syz.2.3022': attribute type 2 has an invalid length.
[  285.081106][ T9812] team_slave_1: entered allmulticast mode
[  285.088922][   T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  285.097035][ T9812] veth0_to_batadv: entered promiscuous mode
[  285.102321][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.108199][ T9812] veth0_to_batadv: entered allmulticast mode
[  285.115757][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.121732][ T9812] batadv_slave_0: entered promiscuous mode
[  285.128281][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.134216][ T9812] batadv_slave_0: entered allmulticast mode
[  285.141108][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  285.147944][ T9812] veth1_to_batadv: entered promiscuous mode
[  285.159949][ T9812] veth1_to_batadv: entered allmulticast mode
[  285.166829][ T9812] batadv_slave_1: entered promiscuous mode
[  285.172902][ T9812] batadv_slave_1: entered allmulticast mode
[  285.179281][   T36] audit: type=1400 audit(1762853397.889:2505): avc:  denied  { accept } for  pid=9845 comm="syz.2.3023" path="socket:[44671]" dev="sockfs" ino=44671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  285.193100][ T9812] xfrm0: entered promiscuous mode
[  285.207938][ T9812] xfrm0: entered allmulticast mode
[  285.213485][ T9812] veth0_to_hsr: entered promiscuous mode
[  285.215412][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  285.219635][ T9812] veth0_to_hsr: entered allmulticast mode
[  285.232354][ T9812] hsr_slave_0: entered promiscuous mode
[  285.238148][ T9812] hsr_slave_0: entered allmulticast mode
[  285.244379][ T9812] veth1_to_hsr: entered promiscuous mode
[  285.251230][ T9812] veth1_to_hsr: entered allmulticast mode
[  285.258176][ T9812] hsr_slave_1: entered promiscuous mode
[  285.263742][ T9812] hsr_slave_1: entered allmulticast mode
[  285.270045][ T9812] veth1_virt_wifi: entered promiscuous mode
[  285.276164][ T9812] veth1_virt_wifi: entered allmulticast mode
[  285.282660][ T9812] veth0_virt_wifi: entered promiscuous mode
[  285.288809][ T9812] veth0_virt_wifi: entered allmulticast mode
[  285.295265][ T9812] veth1_vlan: entered promiscuous mode
[  285.300911][ T9812] veth1_vlan: entered allmulticast mode
[  285.300989][   T46] usb 5-1: device descriptor read/64, error -32
[  285.307759][ T9812] veth0_vlan: entered allmulticast mode
[  285.319183][ T9812] vlan0: entered promiscuous mode
[  285.324318][ T9812] vlan0: entered allmulticast mode
[  285.329893][ T9812] vlan1: entered promiscuous mode
[  285.335026][ T9812] vlan1: entered allmulticast mode
[  285.340771][ T9812] veth1_macvtap: entered allmulticast mode
[  285.347222][ T9812] veth0_macvtap: entered promiscuous mode
[  285.353053][ T9812] veth0_macvtap: entered allmulticast mode
[  285.359359][ T9812] macsec0: entered promiscuous mode
[  285.364674][ T9812] macsec0: entered allmulticast mode
[  285.370604][ T9812] sit1: entered promiscuous mode
[  285.375594][ T9812] sit1: entered allmulticast mode
[  285.381300][ T9812] syztnl1: entered promiscuous mode
[  285.386849][ T9812] syztnl1: entered allmulticast mode
[  285.392666][ T9812] ): entered promiscuous mode
[  285.397545][ T9812] ): entered allmulticast mode
[  285.402976][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[  285.418512][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.440179][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.465561][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.472963][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  285.484116][   T36] audit: type=1400 audit(1762853398.199:2506): avc:  denied  { accept } for  pid=9858 comm="syz.2.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  285.525176][ T9864] SELinux: security_context_str_to_sid () failed with errno=-22
[  285.542636][ T9866] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.3029'.
[  285.554196][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.555402][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  285.565078][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.583294][ T9868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9868 comm=syz.4.3030
[  285.612606][ T9871] netlink: 'syz.1.3031': attribute type 16 has an invalid length.
[  285.621144][ T9871] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.3031'.
[  285.633081][ T9872] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  285.644194][   T46] usb 5-1: device descriptor read/64, error -32
[  285.652008][   T36] audit: type=1400 audit(1762853398.369:2507): avc:  denied  { bind } for  pid=9870 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  285.775423][   T46] raw-gadget.1 gadget.4: failed to queue suspend event
[  285.782527][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  285.815194][ T9887] 9pnet_fd: Insufficient options for proto=fd
[  285.865560][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  285.894147][ T9895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3039'.
[  285.922024][ T9900] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28187 sclass=netlink_xfrm_socket pid=9900 comm=syz.1.3041
[  285.925463][   T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  285.942468][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.949737][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.957450][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  285.964590][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  286.035505][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  286.095447][   T46] usb 5-1: device descriptor read/64, error -32
[  286.124063][ T9907] rust_binder: Write failure EINVAL in pid:164
[  286.127084][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3044'.
[  286.148739][ T9914] fuse: Bad value for 'fd'
[  286.205549][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.212846][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.220372][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.227629][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  286.242062][ T9920] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3048'.
[  286.275521][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.284178][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.295444][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  286.355816][   T46] usb 5-1: device descriptor read/64, error -32
[  286.465468][   T46] raw-gadget.1 gadget.4: failed to queue suspend event
[  286.472516][   T46] usb usb5-port1: attempt power cycle
[  286.478176][   T46] raw-gadget.1 gadget.4: failed to queue disconnect event
[  286.485421][   T31] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  286.493246][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  286.565613][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  286.572580][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  286.645396][   T31] usb 2-1: Using ep0 maxpacket: 16
[  286.651680][   T31] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.662611][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[  286.669325][   T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  286.678432][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.687239][   T31] usb 2-1: config 0 descriptor??
[  286.785545][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  286.831585][   T36] audit: type=1400 audit(1762853399.549:2508): avc:  denied  { listen } for  pid=9950 comm="syz.4.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.861358][   T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  286.895552][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.902871][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.910166][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  286.917498][   T46] usb 5-1: device descriptor read/8, error -32
[  286.926642][   T36] audit: type=1400 audit(1762853399.649:2509): avc:  denied  { mounton } for  pid=9958 comm="syz.4.3059" path="/syzcgroup/unified/syz4" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[  286.980538][ T9966] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  286.991100][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.000005][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.056067][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.063366][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.070657][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.077786][   T46] usb 5-1: device descriptor read/8, error -32
[  287.185426][   T46] raw-gadget.1 gadget.4: failed to queue suspend event
[  287.192637][   T46] raw-gadget.1 gadget.4: failed to queue reset event
[  287.265603][   T46] raw-gadget.1 gadget.4: failed to queue resume event
[  287.296301][   T31] usbhid 2-1:0.0: can't add hid device: -71
[  287.302353][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  287.311282][   T31] usb 2-1: USB disconnect, device number 90
[  287.325449][   T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  287.345583][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.352881][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.360336][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.367503][   T46] usb 5-1: device descriptor read/8, error -32
[  287.495593][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.502881][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.510202][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  287.517361][   T46] usb 5-1: device descriptor read/8, error -32
[  287.550759][   T36] audit: type=1326 audit(1762853400.269:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e738f6c9 code=0x7ffc0000
[  287.575078][   T36] audit: type=1326 audit(1762853400.289:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e738f6c9 code=0x7ffc0000
[  287.586929][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.605084][   T36] audit: type=1326 audit(1762853400.289:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f43e738f6c9 code=0x7ffc0000
[  287.608857][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.637270][   T46] raw-gadget.1 gadget.4: failed to queue suspend event
[  287.646225][   T46] usb usb5-port1: unable to enumerate USB device
[  287.655442][   T36] audit: type=1326 audit(1762853400.289:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e738f6c9 code=0x7ffc0000
[  287.679177][   T36] audit: type=1326 audit(1762853400.289:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43e738f6c9 code=0x7ffc0000
[  287.922377][T10003] 9pnet_fd: p9_fd_create_unix (10003): problem connecting socket: ./bus: -2
[  288.141095][T10012] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  288.220038][T10027] fuse: Bad value for 'user_id'
[  288.224984][T10027] fuse: Bad value for 'user_id'
[  288.425447][   T46] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  288.578044][   T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  288.587371][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.595611][   T46] usb 2-1: Product: syz
[  288.599987][   T46] usb 2-1: Manufacturer: syz
[  288.605352][   T46] usb 2-1: SerialNumber: syz
[  289.015199][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3102'.
[  289.124882][T10098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10098 comm=syz.3.3107
[  289.166239][T10102] binder: Unknown parameter 'subj_role'
[  289.179343][T10102] __vm_enough_memory: pid: 10102, comm: syz.4.3109, bytes: 18014402804453376 not enough memory for the allocation
[  289.306517][T10121] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  289.313840][T10121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215
[  289.897446][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3125'.
[  289.916583][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3125'.
[  289.974848][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.983502][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.941014][T10197] netlink: 'syz.2.3140': attribute type 1 has an invalid length.
[  291.187255][   T31] usb 2-1: USB disconnect, device number 91
[  291.285752][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'.
[  291.810010][   T36] kauditd_printk_skb: 27 callbacks suppressed
[  291.810029][   T36] audit: type=1326 audit(1762853404.529:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.3151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f130f18f6c9 code=0x0
[  292.093264][T10260] binder: Bad value for 'stats'
[  292.134218][T10265] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  292.141651][T10265] rust_binder: 1454: no such ref 1
[  292.147037][T10265] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true
[  292.174376][T10271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3164'.
[  292.174512][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'.
[  292.182502][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3164'.
[  292.246881][T10279] rust_binder: Write failure EFAULT in pid:1468
[  292.681168][T10301] netlink: 'syz.3.3173': attribute type 58 has an invalid length.
[  292.777954][T10309] fuse: Bad value for 'fd'
[  292.934907][T10328] overlayfs: failed to clone upperpath
[  292.979937][T10332] binder: Bad value for 'stats'
[  293.180873][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'.
[  293.909891][T10364] netlink: 'syz.4.3192': attribute type 32 has an invalid length.
[  293.923631][T10364] rust_binder: Got transaction with invalid offset.
[  293.923663][T10364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  293.930400][T10364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254
[  294.074866][   T36] audit: type=1400 audit(1762853406.789:2543): avc:  denied  { read } for  pid=10378 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  294.186391][   T36] audit: type=1400 audit(1762853406.909:2544): avc:  denied  { read write } for  pid=8684 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.234917][   T36] audit: type=1400 audit(1762853406.919:2545): avc:  denied  { open } for  pid=8684 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.269794][   T36] audit: type=1400 audit(1762853406.919:2546): avc:  denied  { ioctl } for  pid=8684 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.296285][   T36] audit: type=1400 audit(1762853406.939:2547): avc:  denied  { set_context_mgr } for  pid=10382 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
Stopping sshd: stopped /usr/sbin/sshd (pid 202)
OK
[  294.349965][   T36] audit: type=1400 audit(1762853407.069:2548): avc:  denied  { bind } for  pid=10396 comm="syz.4.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  294.394237][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.420335][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.428276][   T36] audit: type=1400 audit(1762853407.139:2549): avc:  denied  { read } for  pid=10403 comm="syz.1.3204" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  294.473380][   T36] audit: type=1400 audit(1762853407.139:2550): avc:  denied  { open } for  pid=10403 comm="syz.1.3204" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
Stopping crond: [  294.529970][   T36] audit: type=1400 audit(1762853407.139:2551): avc:  denied  { ioctl } for  pid=10403 comm="syz.1.3204" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
stopped /usr/sbin/crond (pid 195)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 149)
Stopping network: [  294.894893][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.904872][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
OK
Stopping iptables: OK
Stopping system message bus: [  294.938152][T10453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1504
[  294.974653][T10462] syzkaller0: entered allmulticast mode
done
killall: can't kill pid 6728: No such process
Stopping klogd: OK
Stopping acpid: [  295.442907][T10488] input: syz0 as /devices/virtual/input/input30
[  295.578348][T10495] rust_binder: 289: no such ref 0
[  295.583679][T10495] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  295.591032][T10495] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  295.639218][T10506] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3223'.
[  295.648629][T10506] rust_binder: Write failure EFAULT in pid:300
[  295.681829][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.696508][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.960547][T10530] overlay: Bad value for 'redirect_dir'
[  296.220784][T10544] rust_binder: Error while translating object.
[  296.220858][T10544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  296.227113][T10544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1541
[  296.248191][T10546] binder: Bad value for 'defcontext'
OK
Stopping syslogd: stopped /sbin/syslogd (pid 93)
OK
umount: can't remount debugfs read-only
[  296.389576][T10559] overlayfs: failed to clone upperpath
umount: can't remount sysfs read-only
umount: can't remount devtmpfs read-only
umount: can't remount /dev/rootSent SIGTERM to all processes
Connection to 10.128.0.128 closed by remote host.
[  296.643761][ T9276] raw-gadget.1 gadget.4: failed to queue disconnect event
[  296.915589][ T3251] bridge_slave_1: left allmulticast mode
[  296.921329][ T3251] bridge_slave_1: left promiscuous mode
[  296.935586][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.946060][ T3251] bridge_slave_0: left allmulticast mode
[  296.951734][ T3251] bridge_slave_0: left promiscuous mode
[  296.957444][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.068247][ T3251] veth1_macvtap: left promiscuous mode
[  297.073767][ T3251] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[  298.548439][T10568] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  298.555670][T10568] ACPI: PM: Preparing to enter system sleep state S5
[  298.562600][T10568] kvm: exiting hardware virtualization
[  298.568116][T10568] reboot: Power down
serialport: VM disconnected.