last executing test programs:

6m3.563034865s ago: executing program 2 (id=388):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff000000000080003001100000053c699b83699472b5b8eae3e66e387a8b013352d86141e3a972e799e1a5e4a53eca86caa"], 0x54}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

6m3.521397706s ago: executing program 2 (id=391):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x91, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

6m3.473833866s ago: executing program 2 (id=394):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x2010, r2, 0xc2221000)
mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

6m3.378617268s ago: executing program 2 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"])
add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081)
r3 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0xa0}, 0x1, 0xfffff000}, 0x8000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0xc19, 0x0, 0x0, 0x8, "7f12ddc1517600"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0xffff, 0x3, 0x10, 0x0, 0x9, "ee4f72ac02132ca6"})
ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))

6m3.25104191s ago: executing program 2 (id=398):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000003440)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004000)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

6m2.966715244s ago: executing program 2 (id=404):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x8, 0x3, 0x1}}, 0xa) (fail_nth: 1)

6m2.956089704s ago: executing program 32 (id=404):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x8, 0x3, 0x1}}, 0xa) (fail_nth: 1)

5m44.466576404s ago: executing program 4 (id=653):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000002600))
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
sched_rr_get_interval(r3, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c4b643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45005000)
r5 = socket$inet6(0xa, 0x1, 0x40000)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5m44.359134306s ago: executing program 4 (id=655):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd18dc54380539784745369c5e0c80047bd4ebe944bf2cdb103866ec73a264c", 0xf0}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74e1b014", 0x48}, {&(0x7f0000000cc0)="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", 0x192}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000a00)="327c9c22be8088c1fa09d0c9daa9f276299cc47854d20d847cc1e9b8a85adbef57e00b13659f96129608de176bd23acac8c26797a5ceb8576985c9fe6f39111975687eb244af68b4f0f8669b9514d8f575738a761b10c84f533b89156601a692f386f42b2b7976d53365cfa0d5e6e6d680362d7f6b2456ff14d80ff2e859964fbeaa5891e41d241cf6ec13391ea73c56644c82d82729600e1857f923aa9bbe0623cdd37b87c8d18dd3c8f5765c33fb008e51e2f36605f59b04a82d955ecd79465a779ec869843f01ecf2faaeed7243", 0xcf}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f423e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6dfcdbde7", 0x6e}, {&(0x7f0000000980)="3c977216b675039a1d3cb992fe27ba25eb95bb5c4801fb54160ea8c5a2dda4a5874012f67276c6bafea3", 0x2a}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f0000000bc0)="299b", 0x2}, {&(0x7f00000010c0)="e3c4a0df7c3e06f46da0791a6be8b68550d4f836190a46f85c40ff", 0x1b}, {&(0x7f0000000080)="06c57e0e567fe507d1a94376dc1049c4ff5055d0265ead626f29151aa3875c6407339dbc73a5b61a4ba97cdc00478adb10c28b016c13e10feccd6280779936905b2f601e1bbd93ec0619303818f0e1dad170036704", 0x55}, {&(0x7f0000001180)="dc9808c01298354232e71553e37a574029902deda746653d69eccca68b16f5826405fdfd488bdc8c1b7bb0160e545586e980669b21cab409d763e96bd01597e39ed844d5222c3877010014f16f065f639e7d12b7507784c737e01a5b93", 0x5d}, {&(0x7f0000001540)="699048e3aae3d092567fc0dc050daad1eccac8ce6c08b387d00ea6a70db8bf26bc4cee0165873c40a8c550ee2ffc32a5", 0x30}], 0x9}}], 0x3, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)='I', 0x1, 0x12000000, 0x0, 0x0)

5m44.319294076s ago: executing program 4 (id=656):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="9ea1d0081f", 0x5)
recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x10, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffe75, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000000010104000000ce511a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="28d00d0c0a13179fd1ff3c3e86d93549c6", 0x11, 0x8c0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000000101020000000000000000020000003c0001802c0001801400030000000000000000000000ffff6401010014000400fc0200000000000000000000000000000c00028005000100000000002745b8185920ed2441e47dce3e24e3fa7fe812"], 0x50}}, 0x0)
mkdir(0x0, 0x0)
lsm_set_self_attr(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x20, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x1, 0x100900, 0x0, 0x3, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x2000})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000101ff01000000000000000000000000000100000400000000000000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033"], 0xf8}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
setreuid(r5, r5)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000001b40)={0x2020}, 0xa1)
r7 = getpgid(0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ptrace(0x4207, r7)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="ee695d1a5f2399efd1ab12db17e85b4cccdb13e3a67473d778993d2a6a7249990364961fc2d81845c7451feb5c35b9159ac3653234b60a74a91255c4df1a810e1cc94c59265c20aca81ef2ee1defe21b67092d317b9c53bc8a3b6f95faeff898a90dfb9b3e50c7b59ce921f2d1cbd08e30c23bddd4854dc7610be161878af77dd72ac4beb9c838f16e8acaec1fa2d188bdf31c654709d8a746b7b7e869d8bdde8665c48f2ccb4ff577becde97e7ba99a6d40b07ca6ae6df957eb224b10d2b6", 0xbf, 0x20000004, &(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

5m42.949913457s ago: executing program 4 (id=680):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000500)={{0x2, 0x4e20, @multicast2}, {0x1, @random="bb3c2f7dbece"}, 0x4, {0x2, 0x4e20, @multicast1}, 'ip6gretap0\x00'})
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffffffff86f50b80)
recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000600)=""/225, 0xe1}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000104, 0x40002100, 0x0)
r4 = fsmount(r1, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2d}], 0x1, 0x40, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r9 = openat$incfs(r8, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0))
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')

5m42.851938978s ago: executing program 4 (id=683):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r2 = dup3(r0, r0, 0x80000)
sendto$inet6(r2, &(0x7f0000000080)="426458711098d28369dcfc89aba84e636684025827a7f28407fbba5847a6c64c31c0ba4e3d4466166cb5fd62447529370804c84b01bfe76157e60bbe18fed34bd1e42ef5e1efa6d870b779b885e1078c7ac7acab9bc7e8b21a1a146a9ac95332516b40fac19a842c9bc585bdea36158e6450142f079bc1ea1f130d5216e5c1e1", 0x80, 0x41, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x2c}, 0x1c)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "265651cc"}, @local=@item_012={0x1, 0x2, 0x2, "0e"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xb2c}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0xc, 0xb7, "3ea0fea1eca4cdc8a54c825d9bdd7461e76307b3e5fb9777959ad27183cba4029b429f4e55e004e481bf1ecab1c1a81c5fe7f0d1f8d8ac64269ef6291b4a881378da0332705d9d8d2d625e6da39265273ee40f082e449c4f07eb168c78a9638ad43ca6bb8f4b1ad8067c17292c7af1a25812423b29ad7045ee95ab8b3b4eaa6fa1943b2e8659e796b4f4ecf32ff0b714acf172c12e278fca15e0b5f4789e196f4051df056ad56ad570b9a838f7ca6208b9e989ce0e7539"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xa8}, &(0x7f0000000340), 0x0})
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

5m42.74512422s ago: executing program 4 (id=686):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1000, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x10bc40, 0x8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41)
fcntl$setlease(r1, 0x400, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x26}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf1, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x650, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x41015500, &(0x7f0000000500))
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, 0x5, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

5m42.72753879s ago: executing program 33 (id=686):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1000, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x10bc40, 0x8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41)
fcntl$setlease(r1, 0x400, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x26}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf1, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x650, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0x41015500, &(0x7f0000000500))
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, 0x5, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

3m1.802738382s ago: executing program 5 (id=2517):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xfffffff5}], 0x400000000000172, 0x4001c00)

3m1.746695853s ago: executing program 5 (id=2518):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x884c1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r1, 0x45809000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r4=>0x0}, &(0x7f0000000140)=0xc)
r5 = syz_open_procfs(r4, &(0x7f0000000100)='maps\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r7)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r7, &(0x7f0000000240)={0xa, 0x800, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="74722c72306c22b8a101646e6f3d000000000000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])

3m0.921081415s ago: executing program 5 (id=2529):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0)

3m0.866684986s ago: executing program 5 (id=2530):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0})
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x200}], 0x2, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
chmod(&(0x7f0000000000)='./file0\x00', 0x44)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan1\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
keyctl$reject(0x13, 0x0, 0x1, 0x204, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0)
fcntl$setlease(r2, 0x400, 0x1)
getdents64(r2, 0x0, 0x0)

3m0.065140298s ago: executing program 5 (id=2549):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xca00, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000600)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeef0000, 0xb5, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x8, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x3, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x80}, {0x0, 0x85, 0xbe, '\x00', 0x10}, {0x0, 0x6, 0x4, '\x00', 0xe}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xfe, '\x00', 0x3f}, {0x0, 0x22, 0x0, '\x00', 0x4}, {0x0, 0x50}, {0x8b, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x46}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x80}, {0x80, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7}, {0x1, 0x3, 0x5d, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x5}, {0x5, 0x4}, {0x0, 0x43, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x7f, 0xe, '\x00', 0xd}]}})
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000100))
close_range(r1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x12, r0, 0x45809000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000005ec0)={0x24, 0x0, 0x0, &(0x7f0000005e40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "4181c608"}]}}, 0x0}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
ioctl$TUNSETOWNER(r5, 0x400454cc, r7)
r8 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
fstat(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setreuid(0x0, r10)
quotactl_fd$Q_GETFMT(r8, 0xffffffff80000400, r10, &(0x7f0000000040))
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r11, 0xfffffffffffffff4, 0x4)

2m59.995849249s ago: executing program 5 (id=2550):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x4, 0x0, 0x2, [0xff0000, 0xff0000]}]}})
mmap(&(0x7f0000789000/0x1000)=nil, 0x1000, 0x300000a, 0x110, 0xffffffffffffffff, 0x3e73d000)
fadvise64(r0, 0x10000001003, 0x9, 0x5)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7e001000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x6793, &(0x7f0000000740)={0x0, 0xa25c, 0x1, 0x3, 0x7b}, &(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000800))
r3 = syz_io_uring_complete(r2)
syz_io_uring_setup(0x9e4a, &(0x7f0000000340)={0x0, 0x2350, 0x1040bf50206210c4, 0x0, 0x133, 0x0, r3}, &(0x7f00000008c0), &(0x7f0000000900))
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x75b, 0x8, 0xff, 0x0, 0xb, 0xa5, 0xbd, 0xaa, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x77c}, {0x0, 0x20b, 0x0, 0xfd, 0x20, 0x5, 0xb, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @timestamp], 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ftruncate(r6, 0xc)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100))
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7)

2m59.918266341s ago: executing program 34 (id=2550):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x4, 0x0, 0x2, [0xff0000, 0xff0000]}]}})
mmap(&(0x7f0000789000/0x1000)=nil, 0x1000, 0x300000a, 0x110, 0xffffffffffffffff, 0x3e73d000)
fadvise64(r0, 0x10000001003, 0x9, 0x5)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7e001000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x6793, &(0x7f0000000740)={0x0, 0xa25c, 0x1, 0x3, 0x7b}, &(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000800))
r3 = syz_io_uring_complete(r2)
syz_io_uring_setup(0x9e4a, &(0x7f0000000340)={0x0, 0x2350, 0x1040bf50206210c4, 0x0, 0x133, 0x0, r3}, &(0x7f00000008c0), &(0x7f0000000900))
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x75b, 0x8, 0xff, 0x0, 0xb, 0xa5, 0xbd, 0xaa, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x77c}, {0x0, 0x20b, 0x0, 0xfd, 0x20, 0x5, 0xb, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @timestamp], 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ftruncate(r6, 0xc)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100))
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7)

1m44.792273956s ago: executing program 3 (id=3466):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000802000100000000000000080d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)

1m44.788469156s ago: executing program 3 (id=3467):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2882, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1m44.785401326s ago: executing program 3 (id=3468):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x800000000000000)

1m44.770520926s ago: executing program 3 (id=3469):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000240)='./file0/../file0/../file0\x00', r0, &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', 0x102)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20)
r2 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000001b40)='posixacl\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
shutdown(r4, 0x1)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103b02, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0xf, 0x9, 0x9, 0x7, 0xc, "d40cb92ef56f20000000000000000000f900"})
write(r5, &(0x7f0000000080)="c29a210bc720ca488cfad2bb7ba4bcb037336991887da20990e698334e74b7c924859c74787902b6e889c16870d2d523f0451f8c19961d3627b1a206571d3f099095ce2680518d1b143d11cf4abfcdb282f7c795ab30adf3ce26db82d93654be0b76e4bef0b889be7856a4597801e4f12ef4d63eaee4b068803cdf9eb71e43dd3c04a8d5b25ea63318b274aec4ba484828c8d1f6b67c47c0ba77902e00a171d783df3048544570229a741f1492be8ac891713037e02794860afe9a1e3819707031a98d3a89b767da5c17e81a411d4eec4ca627d65f472e5f1510bd604f3b3ffed7fe40b0ee0d", 0xe6)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x20001, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0)

1m44.710784367s ago: executing program 3 (id=3470):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x5, 0x81, 0xfff9}, 0x20)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

1m44.680491468s ago: executing program 3 (id=3471):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
utimes(&(0x7f0000000140)='./file0\x00', 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x2, 0x1000000000000000}, {0xf, 0x100000004}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001a80)="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", 0xb00}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="e8"], 0x1f0}}], 0x1, 0x800c095) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001a80)="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", 0xb00}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="e8"], 0x1f0}}], 0x1, 0x800c095)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x31, 0x4, "8df20e33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x31, 0x4, "8df20e33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x60, 0xd, 0x7, "c21a2a76b42262"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8f}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x89, 0x2}})
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000300)=0x7fff, 0x4)

1m44.635247338s ago: executing program 35 (id=3471):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
utimes(&(0x7f0000000140)='./file0\x00', 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x2, 0x1000000000000000}, {0xf, 0x100000004}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001a80)="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", 0xb00}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="e8"], 0x1f0}}], 0x1, 0x800c095) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001a80)="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", 0xb00}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="e8"], 0x1f0}}], 0x1, 0x800c095)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x31, 0x4, "8df20e33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x31, 0x4, "8df20e33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x60, 0xd, 0x7, "c21a2a76b42262"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8f}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x89, 0x2}})
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000300)=0x7fff, 0x4)

1m42.377765512s ago: executing program 0 (id=3492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) (async)

1m42.376927803s ago: executing program 0 (id=3493):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x110a, 0x3})
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x240b00, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0xa, 0x2, 0x2, 0x90, 0xffff, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88)
write$FUSE_DIRENT(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x200001d0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xffffffffffffff8d, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x2, 0x6}, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x20, 0x4c}}, 0x10}], 0x0, 0x0, 0x0})

1m42.370313443s ago: executing program 0 (id=3494):
r0 = socket(0xa, 0x3, 0xfffff000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x182100, 0x1a)
r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x20082, 0x10a)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x300510, &(0x7f0000000140)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x8}}, {@no_bf_readahead}, {@no_bf_cache}, {@readahead={'readahead', 0x3d, 0x7}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7f}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x2}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x4}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsname={'fsname', 0x3d, 'U(/-]\\],-'}}, {@subj_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '[,-,(.@\\\xd5'}}, {@subj_role={'subj_role', 0x3d, ',{'}}]})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x40000, 0x3, 0x2}, 0x18)
r4 = openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x20000, 0x1a0)
ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000380)=[0x1ff, 0x7])
close(r4)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000003c0))
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000400)={0x8e, 0x81, 0x8000})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x88, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @acquire, @acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/127, 0x7f, 0x1}, @fda={0x66646185, 0x1, 0x6, 0x12}, @fda={0x66646185, 0x0, 0x0, 0x2}}, &(0x7f0000000540)={0x0, 0x28, 0x48}}}], 0x9b, 0x0, &(0x7f0000000640)="8565df232d2415c5fa518aa599f9c180f7ef55506ff87354dcc5c4b68f7a3f46af8b38756c2e8403d8e4d6645d8a4ce523df52a3c13a12f4567b4568f2ff56f39fd493e47adc2825fcde551e1a8abd66706cbffeec48e4ffa2ca4c158d1e8b93e65db4b7e2f5337932e8ff54df7fa8d7e104d35640d5bda943c88597fbbf337af986a5fe94921a42115ec744d92b24e68b19516f80f73dbe19dabf"})
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000740))
getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000800)=0xf9, &(0x7f0000000840)=0x1)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000880)=""/45)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat2(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x30180, 0xdd, 0x20}, 0x18)
setsockopt$inet_buf(r6, 0x0, 0x24, &(0x7f0000000940)="e03575103064f74b1f446d990e7071074bd098b3e98f79c9387d707f887e5e32b49227bdfc9d0120f8d94af9fa6b5c4f98375088874463abfbfb8b6dc4e596dec3062d738ab7a354e0104a63de279c94b34999ac9dc49c766deee1044d442b85b349996030474ac6ba6382363beff5c4ee8fc28f08f52a7b4cca392892ca5e6a8ac7943d8ca8c6aa52a9c1ec946ae9d05decfd3d85824f12fcb6587cccb4bbba795cf68137f42a7c6e6ab42c69f18bf3", 0xb0)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000b40)=0xe8)
sendmsg$nl_generic(r6, &(0x7f0000001040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x460, 0x20, 0x2, 0x70bd29, 0x25dfdbfe, {0x16}, [@nested={0xc, 0x37, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x59, 0x0, 0x0, @uid=r7}, @nested={0x1b9, 0xf9, 0x0, 0x1, [@generic="402ed55e0343d324c5e38eb2d95ecc526eb862be63a1f472592b5e1abb267e8ce94680606a91f109aba3be57b71823b064d4d8009fb44d200fe88f0e5e622c3fdcbd1c7a197aba73b0888b2d6fc48dd297acde42d5dafc2a07b8440b08f7fbf5806feb9fcc0c0da6869086a5ea5ca7328311c21680ea81b2cdcf00b64a5213a1dba6e2140d34aeaaee33ac45f5d51773d254506f8882a9c6489c89cb6ef0192b76481c723cd951d39c05f8080ca42d2dfc832a387d245e22d604ff54", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="2cd9de192801f598818208e86921db67b871593986a0b6a271fb2f72a43319dba57f5fc5664f37b305e1abc18809c0626ef07e0106235ccc9aa88752b5b6fd2f1058b12d474429027e7f9c2dcc6280c1a621913eb98e26d06a59f67e9f4bf71a649ec3108731a2eae119ce871c106fcfa942720e1025546be08142f8eddcf578592d9c0297d8ed2742b0492a0cc5adcb70f6d83c40364cc23e08cd934c5ba6f07bfa5963b1a2eb6a8dbdf92fa100fb13945b26f4a88615651769ac540fef8a", @generic, @nested={0x4, 0x69}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@remote}, @generic="9577408244040637bc5d63993695b56ad880a54416cce80d2f80"]}, @nested={0x14, 0x7e, 0x0, 0x1, [@nested={0x4, 0xbf}, @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x93}]}, @nested={0x265, 0x130, 0x0, 0x1, [@generic="e01476e0eb9a2c31b28c4fda8a641ea55dfc8a1a4e4189ccc2ee7d0f6ba670376370df1ce023aaadc77e473166020733b049e8397650f9e13197116c336169c1d62317fda5022a055a3a86344404e0b243a91c234db730df", @generic="d1b6f58aa7f75f33662d2e5a7930b38f772059c3f311d845ec71dc65ea55bb4e8f29e47512535164d0ec94fbda41c995fdf526c70f804fcb472b44a1611dc510bcea663cd0020fb88a0c77ac61a7a18025f9e36710cf5a9b0562df4f5011adbe4ce40984923de8eee943bbc5004d9adbff807a4c8feee5b804b9d30dec0699c98f4e1cd5ed04b57c9146986a88f1d1fc92c466dacc407f22381bc58b2568", @generic="9555c300b2a27853e23150599c13d69a1d82ca4ea3ba1c1e1b77d44cd2db0738713fb19e65e4bcb7f42c5ab2ceb787ff91748fda583fd7978d395d314d7e20b92d9574ac66c9248eb9d6165f30684a164ddf22f1cb968686ee24043028b60721ddcc56956940d92c", @generic="7823ffbf1c505222560a7820da87bf6d13085784fad116d8623f09f3aa8b34eded1cf7a52fa9f76c9122c2210e125ea20bff9634767e381eb5eb76c72474c74739390bed536d33904996afda2881e4b4ec97f364bf2dc676b46c764b17ffbb4301f3fd184b0add39259239fb824569af6e876300f3682dce5b7f78f4828ca0365f4c3af8015c5a91120ee2e3b268cd43e2015e86d4f1dc3a3fe7d6f663ba60c9925c24aa0702cbeb796a8a221d98f9fe3867cc949a9c5a5d0f2a0190db1fd3cec3262d7edf17892cf348a2dbe599f9736566c3f3226b6d9be387483e29e7d950d738b01b6d", @generic="e92836811d60ed14075fc686781e0e370206417672201a55b7bd", @nested={0x4, 0x9e}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x8005}, 0x40054)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000001080)=""/199)
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000001180)={0x6eed, 0x8, [{0xb}, {0xf}, {0xa}, {0xe, 0x1}, {0x1}, {0xf}, {0xb, 0x1}, {0x4}]})
write$uinput_user_dev(r2, &(0x7f00000011c0)={'syz0\x00', {0x0, 0xf000, 0x6, 0x7ae}, 0x4a, [0x3, 0x7, 0x7, 0x7, 0x0, 0xc70, 0x2, 0xc0, 0x9, 0x8900, 0xab9, 0x1, 0x64d, 0x101, 0xfffff800, 0xb11c, 0x0, 0x7, 0xf90, 0x1, 0x9, 0x5e, 0xffffffff, 0xc7, 0x6, 0x4, 0x800, 0x9, 0x800, 0xffff052a, 0x5ffd, 0x3, 0x7, 0x212, 0x81, 0x7, 0x3, 0x400, 0x8, 0x6, 0x8, 0x1, 0x2, 0x2, 0x684, 0x7, 0x401, 0xde, 0x3, 0x1d, 0xfffffffe, 0x50, 0xb, 0x2, 0xc, 0x8, 0x37, 0xd9e3, 0x7, 0x9, 0x4, 0xffffffff, 0x5, 0xffffffff], [0x8, 0x6, 0x1, 0x8, 0x81, 0xffffffff, 0x8001, 0x5, 0x5, 0x9, 0x2, 0x28, 0x2, 0x80, 0x800, 0x5, 0xfffffffd, 0xfa7c, 0x0, 0x6, 0x1, 0x8, 0x0, 0x7, 0xa04, 0x800, 0x2, 0x7, 0x8, 0x7, 0x0, 0x0, 0x40, 0xffffffff, 0x1, 0x0, 0xa76, 0x1ff, 0x101, 0xd9f, 0x7fffffff, 0x6bc3, 0x40, 0x7, 0x1ff, 0x7, 0x6, 0x2, 0x3, 0x7, 0xd, 0x9, 0x3, 0x1, 0x0, 0x7, 0x6b, 0xc, 0x2, 0x0, 0xc7f, 0x3, 0x9, 0x9], [0x0, 0x3, 0x8, 0xd, 0x2, 0x27c, 0x7fffffff, 0xc7, 0x1, 0x80000001, 0x23c, 0x9, 0x8000, 0x4c39, 0x7, 0x7, 0x7fff, 0x5, 0x7, 0x84e, 0x3, 0x7, 0x0, 0x9, 0x20, 0xe, 0x6, 0x8000, 0x6, 0x7, 0x9, 0x6, 0x1ff, 0x9, 0x80000001, 0x2, 0x2, 0x8, 0x4, 0x1, 0x4, 0x8, 0x10001, 0xe2, 0x3, 0x8, 0x8000, 0x6, 0x8ac, 0x1, 0x3, 0x1, 0x200, 0x1, 0x7, 0xff, 0x7, 0xa, 0x0, 0x0, 0x8000, 0x7, 0x5, 0xd], [0x6, 0x5, 0x3, 0x2, 0x9, 0xfff, 0x9, 0x3, 0x6, 0x3, 0x979, 0x8, 0xfffff8d8, 0xfffffff7, 0x7f, 0x81, 0xfffffff9, 0x1, 0x2, 0x6, 0x7, 0x2, 0x0, 0x9, 0xa2b1, 0x8, 0xcd, 0x0, 0x6, 0x0, 0x3, 0x2, 0x8, 0x6, 0x6, 0x8, 0x0, 0x3, 0x4, 0x4, 0x2b, 0x3, 0x7, 0x8, 0x10000, 0x9, 0x81, 0x6, 0x9, 0xf, 0xe89f, 0x80000001, 0xc04, 0xaf, 0x2, 0x7, 0x6, 0x8, 0x5, 0x2, 0x7, 0xff, 0x1, 0xd]}, 0x45c)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001640), 0x420c82, 0x0)
statx(r2, &(0x7f0000001680)='./file0/file0\x00', 0x2000, 0x1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(r8, r7)
recvmmsg(r5, &(0x7f0000003000)=[{{&(0x7f00000017c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/212, 0xd4}], 0x1, &(0x7f0000001980)=""/105, 0x69}, 0x1}, {{&(0x7f0000001a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/169, 0xa9}, {&(0x7f0000001b40)=""/51, 0x33}], 0x2, &(0x7f0000001bc0)=""/249, 0xf9}, 0x1}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/80, 0x50}], 0x2, &(0x7f0000001e80)=""/167, 0xa7}, 0x9}, {{&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x5}], 0x4, 0x10000, &(0x7f0000003100))
socket$key(0xf, 0x3, 0x2)
recvfrom$inet(r0, &(0x7f0000003140)=""/4096, 0x1000, 0x40, &(0x7f0000004140)={0x2, 0x4e24, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000004200)='net/ip_tables_names\x00')

1m42.306555804s ago: executing program 0 (id=3496):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4)

1m42.305203834s ago: executing program 0 (id=3498):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0c240201060201400a000c0509040100000102000009040101010102000009050109758b06200107250100060d000904020000010200000904020101010200001124020106040803000000000033bbf81307240116050110090582090002"], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001)
read$FUSE(r5, &(0x7f0000003000)={0x2020}, 0x2020)
sendmmsg$inet(r5, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
lchown(&(0x7f0000000540)='./file0\x00', r6, r7)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

1m40.994036923s ago: executing program 0 (id=3523):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010213df6220f30c7a8119eb010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="050f020010030000000610400a14070000000000"]})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fcntl$dupfd(r2, 0x0, r2)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}})
pipe2$9p(&(0x7f0000000280)={<r5=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x120488b, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}], [{@obj_role}, {@obj_type={'obj_type', 0x3d, 'uname'}}]}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=""/100, &(0x7f00000003c0)=""/196, &(0x7f00000004c0)=""/190, 0x3000})
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r6, r0, 0x0, 0x80000000)

1m25.32556776s ago: executing program 36 (id=3523):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010213df6220f30c7a8119eb010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="050f020010030000000610400a14070000000000"]})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fcntl$dupfd(r2, 0x0, r2)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}})
pipe2$9p(&(0x7f0000000280)={<r5=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x120488b, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}], [{@obj_role}, {@obj_type={'obj_type', 0x3d, 'uname'}}]}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=""/100, &(0x7f00000003c0)=""/196, &(0x7f00000004c0)=""/190, 0x3000})
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r6, r0, 0x0, 0x80000000)

29.79054565s ago: executing program 7 (id=4582):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
tkill(r0, 0x12)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1})
eventfd2(0xbefb, 0x80800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20040008}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7817}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8ddb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x14000}, 0x10)
syz_io_uring_setup(0x59, &(0x7f0000000340)={0x0, 0xff56, 0x4000, 0x1, 0xd9, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) (async)
syz_io_uring_setup(0x59, &(0x7f0000000340)={0x0, 0xff56, 0x4000, 0x1, 0xd9, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400))
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x0, 0x1}) (async)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x0, 0x1})

29.467375125s ago: executing program 7 (id=4588):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_clone(0x440c5000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
modify_ldt$write(0x1, &(0x7f0000000000)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) (async)
syz_clone(0x440c5000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) (async)

29.221532338s ago: executing program 7 (id=4593):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
fadvise64(r0, 0x10000001003, 0x9, 0x5)
r1 = syz_pidfd_open(0x0, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000200), 0x1004)
pipe2$9p(0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
dup2(r2, r2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clock_adjtime(0x6, &(0x7f0000000380)={0x30a0, 0x3, 0x8000000000000000, 0x5be, 0x1, 0x38, 0x1, 0x9, 0x7fff, 0x8001, 0xdaeb, 0x8000000000000000, 0x7f, 0x12, 0xe03a, 0x5, 0xe, 0x80000000004, 0x2, 0xd, 0x8000009, 0x5, 0x7, 0xb, 0x0, 0x10000})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000)
mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000240)={0x0, 0xa9b, 0x2}})

28.901766573s ago: executing program 7 (id=4597):
r0 = syz_io_uring_complete(0x0)
ioctl$USBDEVFS_RESET(r0, 0x5514)
sendto$unix(r0, &(0x7f0000000000)="f1da25648c517be203b2685011eaaf90c92316f9243b20bcd5c29b34b1bc5d1ae6ef73d4b699cdbd32a079229d0a6799d27692dc75fb445c8ecd4d830323110167a4f10b82e589a1291e55b1e6917ae02c8201bfa932d3b050b59b548a53733b49b830fbbb19d6f0768a475a595cd353884a63d99299830da313234c570dcaca7ac10545fbc3db7af5948da2c5ca358bf8f2793fe70a7a9098191bdfafac9ed53453a943a12647f9abf1c3b764ccc4602050e8213ec2bf7167581cb9431ca68e54399d76a8e0f33b8b0a85d81b132936ea9a", 0xd2, 0x5c723dce77b9adda, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\xab\x00', 0xfffffffffffffffe)
sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="adb967fa346730c19cb0fa8642293d30f2", 0x11}], 0x1}, 0x80)
keyctl$set_reqkey_keyring(0xe, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x8000})
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000380)=0x1, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x3)
recvfrom(r0, &(0x7f00000003c0)=""/234, 0xea, 0x10000, &(0x7f00000004c0)=@l2={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0x80)
keyctl$join(0x1, &(0x7f0000000540)={'syz', 0x0})
clock_gettime(0x0, &(0x7f0000002300)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/136, 0x88}], 0x3, &(0x7f0000000880)=""/92, 0x5c}, 0x4}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/2, 0x2}], 0x1, &(0x7f0000000980)=""/133, 0x85}, 0x8}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/121, 0x79}], 0x1, &(0x7f0000000b80)=""/206, 0xce}, 0xfc6}, {{&(0x7f0000000c80)=@tipc=@name, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x3, &(0x7f0000000e40)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001e40)=""/16, 0x10}, {&(0x7f0000001e80)=""/143, 0x8f}, {&(0x7f0000001f40)=""/239, 0xef}, {&(0x7f0000002040)=""/82, 0x52}], 0x4, &(0x7f0000002100)=""/188, 0xbc}, 0x81}], 0x5, 0x100, &(0x7f0000002340)={r2, r3+10000000})
ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000002440)={&(0x7f0000002380)="71b43333d9520434e7d05d552d3da3ea4d1c207943bd55611d5a0223be7d214741a741", 0x23, &(0x7f00000023c0)=""/73, 0x49})
keyctl$set_reqkey_keyring(0xe, 0x0)
r5 = getpgrp(0xffffffffffffffff)
sched_setscheduler(r5, 0x3, &(0x7f0000002480)=0x9)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002)
keyctl$set_reqkey_keyring(0xe, 0x2)
sendmmsg$sock(r4, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000024c0)="f352584c005874638a2b59bf6c509687628332a45049b66ae5ccf04f343126b27aade43500aeb8e53d02cd3340e01b5c0bdd976c34f7db4fdf1a7fef536fddf8dcf55896c762c16504ffb2059079b60f8c5528c7cb5e27ea1e6feab30e1fe2619d744866a5bfbde729c49a6c32a9439952b97680d42b4cfcdb300526aa405d6c417417a97d337219d70fb4d425c612166f99f146c203c491a510c2b283c8ada83c11bec77bb82c5d4e6681865fe349e37c01fdaf00b6ce659e4d460065f1990f914c5a2f8b913a904ff9b285a56d07c8f0ca3372d155ebb242500529b36dc9e4dfbd1f4a9aee2882e5f8a1d9", 0xec}, {&(0x7f00000025c0)="99dad161a8a4fdc5bc42b20ad209186f33b14101d9e7635f383492b0a965d95e6e53a873ace593ac4b8125247771ece0ac41736cb8803b9e45bcfb3ee704daeb6384b51e1553430dae54d3d8a15e76c64783b15ca07c878e894d82fd261dfb06a184dc73ade718ea861ad26080b78e3a1022dbf48becbb62c7586ce472", 0x7d}, {&(0x7f0000002640)="3f9036206ccc17c176fb2c09bf6eb8c5a9a6779314ff50b7de3167aae369200fb0b1b4ee225c176df70ad85b32c759d872abaac28ba377953b89dfdefa8a6ad489d887d7ced7c40cbca512558aa3b13b5668391dc42e3831dd1adcd6489a12c1a6ce1d104a85fedaf50b86a8cfb7c8a114b0b2b41b2339c411dab305385c8dc0ce18c68d7ca0c82ccc6c3315c2523bd3d3fbf82c63cc627ae60484594cf26c33373aa7de6937511bf48ca88a64483395c27004dd179d1193d3127ae7832175e752c6aceda64f47d5829e3028ab03f6a06276188cc4f82de3868ab1dd822b23796aa64ad1fd479640be", 0xe9}, {&(0x7f0000002740)="bb4347e7f9f3dd2973055c7b75b17392cdd14e169d94548045d4a226479348bb19a4ce9f64ed746b211b85fdfe78c960499f8914d0873de3c80cdaa096f9b056fd524719eca50a4bb5851e7d71f7bcdeecac7d6864c7d3718de9cb62b3ab7393ed1a6ccc72fe20ee7d8e95ab3580407e8834e64b8d10deb9f1f07a340d0e20028188f87f031ae6c68d7df818b205c05ace96c9df11aea2f9771ee7cb69219c6588010935fce0d78e0935cc267b32eeba74a59c1f50d5f8a7", 0xb8}], 0x4}}, {{&(0x7f0000002840)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x1, 0x3, "f0eb59c60fe5f7889478c9bb7a400921c1818f7b34d7c131c1bde925389484e79a9b562baba724b860a7ce7551b96a1e95a2b53aa267890e07b1a7fd9bd6eb", 0x36}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000028c0)="43d230c0f38f32231a0b8abe64283351d2516abebf65d19882e3de604f9a63ed19f6d773f959e99dc819b732cd70a49743583d957be78e8b3fbc5e5d484c92ba1f90e63bd904ac5ca81e8dba954f0ba7628affed40f990f205a3f2b842a7596674b8036ca198a831b7090923a4eaf0238a60f222286e3c8abb702d9deeb42354490096eff3d6930d84b8a666cd4188cb8d88785d26e1f38789f3bdd5654b78e2f50a921fd2ff3349e294de5c68d667edf0960ee4f87464ac3841c09ae8319a9e8928510128b0b9728d9d629750c14536ef90025c5c95558a73613b8d943ca4edaa91e0", 0xe3}, {&(0x7f00000029c0)="d390d289105b0a7c9b5b1ddb1eb3522a64263f807e271f9b84ba7882590d78a104c003fea75c4857f586146b7e34b693f2a83ba7cf82ec47aebd02b0d396e139cf77e253e126f690596cafd2b21bbbe052dd7af18cbd8f49e5560bd6260fe4918422dfbf0233006f942603dba98a0a786999d11440a83f924e8470c2d39f7755c91830e86bfe92e23d5217cab556b3bb844e3b03be8e42225ce7e0684d9f9f90d2035d2dfd16695068cfc8ddedb15cbf48912e723534fb7876090b0c11ac44726f036642e4ad509a598603f78c", 0xcd}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)="a9215c5481886dad4b65a4aed786134e32b8de82b39abb3aefb1520b5ead994a1ca69764773c7824a904a7f97ce52a83", 0x30}, {&(0x7f0000002b40)="285c55d8382e511e03ce925725a9f30bceece689994a0bf1034eb0f1cbb62febb0e370a8d21c1e49f8d26813a6fb863bd5111270c71d8d3fb5460e2680fcd89140d56de65286976d3138647b1f070b41cdc505ab26", 0x55}], 0x5, &(0x7f0000002c40)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x465e}}, @txtime={{0x18, 0x1, 0x3d, 0xddb6}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xa8}}, {{&(0x7f0000002d00)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="afaf9d584d67f3358cffe7baa03f1dfec8862e1b12c0bc8b4663fc0b875fae19c6b5081bf1b0bb2ccb84071fd9930bf951a5d56574a658fa2754a901cd3f", 0x3e}, {&(0x7f0000002dc0)="b3bf82ba5739cdc64744a512cea06d8d12ea6241847cd0a793a508e4bbd1dfa4289e6b3151f08373d8ed42c9009d", 0x2e}, {&(0x7f0000002e00)="ec036e1d40f0f4a1a03f4be2cb4e231d371875eb04055ce135d9d720a72f046568fbe9338b50171c4a81fad1231d46fab244f6b10892d7fd1a470200c97ae9d50bd18288bb8a6ccde4c3177833fdea3b04c937042f6315be6920238745ce437222975975c32b202ff3f0be0385045282c59feb93ca4909da9c6e6643776851300de5d72b75dfc0ec", 0x88}, {&(0x7f0000002ec0)="d1a87162cdd4c0d09fdd343f4bf3627f29fa09f98f027ad33ef3b0c4d5e43ec676652ce2590a50fbd2c2f08bb6f7220e630839233f1ea2ed06f0646b5dd28b909b67aa71a76fed955c12578d0992fb1897f55d17e9370ebebd16c810e8a32b857b1b3f0d1ee5eec06f819339f8fb74d0c2a8823c6370309aa387257eeb4ff64ed512494b9ef7ef69b102ed418ffa2742436fe666752085481f0d605add6aa38723864cdddbeb7c4a1cec6ad3cbb705bbe9827528a4a74c8f13579ff64e39936cab05717365ba35549d1611b2c923bcfb46c95201b9ce5ceee1f83b3101a4f2b96e9336d19223", 0xe6}], 0x4, &(0x7f0000003000)=[@txtime={{0x18, 0x1, 0x3d, 0x4b04c0ca}}, @txtime={{0x18, 0x1, 0x3d, 0x15}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x78}}], 0x3, 0x14040010)
keyctl$set_reqkey_keyring(0xe, 0x0)
tee(r0, r1, 0x8, 0x2)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x29, 0xa, 0x4, &(0x7f0000003140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000003240)={&(0x7f0000003180)=""/177, 0xb1})
setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000003280), 0x10)
keyctl$set_reqkey_keyring(0xe, 0x4)

28.009505466s ago: executing program 7 (id=4605):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1e5e00, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1})
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x0, 0x1})

27.825239379s ago: executing program 7 (id=4612):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
syz_usb_connect$uac1(0x1, 0xd5, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x9}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x2, 0x1, "2f3b40e55446"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0xe5, "57d9060115f6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3e, 0x2, 0xf7, 0x7, "a28720", "a106"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xfffd, 0xf5, 'A'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0xfb, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x13, 0x9, {0x7, 0x25, 0x1, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x25, 0x36}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x2, 0x4, "f75b1a73c86750e1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb38c, 0xfffa, 0x9, "57d10a52c0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0x3, 0x9, {0x7, 0x25, 0x1, 0x3, 0x2, 0x5}}}}}}}]}}, &(0x7f0000002680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x210, 0x9, 0x7, 0x3, 0x8, 0xff}, 0x11d, &(0x7f0000000300)={0x5, 0xf, 0x11d, 0x6, [@ptm_cap={0x3}, @generic={0xd6, 0x10, 0x1, "5e77cdd3cb88fed43995c79919f44710c08d383503b6b1f93546cf376cb69535c2ba25a613e5206c7b09bff26c64887fbcfa2bea3371aa6e9876173668bec1663c8b87d6321f3f75c46f047cb37d1f0693c2d2498c1f786a75bd2405589af16f2c2130a108bfd43367c4c67840b625f2c2d8036651170cd860b87a80958cd6bd5241f3e6069b9fc123d0e1149b713d50926700817e81f349b29d6f1595fdae1482c1320eb0db5d299ceb642c2fb090fb39e0284b11d7b4938326002aec4578039a1ccf7e0ea4fbfd4537aef9e34513e13cf4b9"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2dc8bacf98f3f71a61059ff5cb23695a"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6f9f691f19cb7eab2c8ce9792817f870"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f980961dee17661d89922b5bbf44ac9e"}]}, 0x5, [{0xf1, &(0x7f0000000440)=@string={0xf1, 0x3, "2e3ee562ff934139494a124e67aabeeb5f27adbf9b8381a34b83b121dc25678a41fa24c64a503aafb01f4e865e9e20cb365162d5fa97c7a23ed9e87841d3c0e7855b11ad6c9808cc1cacce68054b051222b4411067536d39c57b92d1ac0115d4b207be954756e69fc4450170db826aaeda60c6741b126d3ea55519e765c65f19bf94cd024c048bbee043f87c2f47246ccd44679c4f124163819c20353a78ff591840d9baf1d08dc0872ad253d43157c6bbc76373eb89e04516e2fd60f01c563450d43a01b67b18a49b21f65dd7aee37f666b7792ef5af015e7ea58a5e435145fa5b441192ae1d805732c7a973dcc26"}}, {0xea, &(0x7f0000000540)=@string={0xea, 0x3, "726c0c44ae41c1fdb9ebf239c7281dbc80032807b820115d6827046f1ab47818a1fa6aabef915511cdfaeb5484c831d08fde13dc78da73bdfba190453e9343ce623dd0cae9829026a7bc15ee9e01d960aa342d8f3b58ce2f880160f91d8811c2a7a1dfd8048963639ec8062bb9359a627de25c2c2b32df1b5069fc40bfe6796804dfccfdd52d04c2d6180ef2840c8005eadf8272ba58d239edf98931634bb3466cc2c1afc438deeaec5b68540dd6033cd0b7d708dcc1524527fd5002c06958e693518807411db7a91127734aacc16202340e59c259b2543ab0838457b6ce552e4b691887b9301ea4"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYRES8=r1, @ANYRES16=r9, @ANYBLOB="01841344fb000000000014000000180001801400020073797a5f74756e00000000000000000008000300"], 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYRES8=r1, @ANYRES16=r9, @ANYBLOB="01841344fb000000000014000000180001801400020073797a5f74756e00000000000000000008000300"], 0x34}}, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x10000000000) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x10000000000)
read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) (async)
read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x5bef8000)

25.13436163s ago: executing program 1 (id=4635):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
syz_io_uring_setup(0x500, &(0x7f0000000340)={0x0, 0x0, 0xb2, 0x0, 0x4}, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r9, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])

25.08983192s ago: executing program 1 (id=4636):
prctl$PR_SET_SECUREBITS(0x1c, 0x30)
prctl$PR_SET_SECUREBITS(0x8, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0x200000000000})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2])
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r5 = socket(0x10, 0x6, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x0, 0x1}})
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x9}})
ptrace(0x4208, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x7fffffffffffffff)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r9 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa2c00, 0x10)
ioctl$int_out(r5, 0x5460, &(0x7f0000000300))
openat(r9, &(0x7f0000000140)='./file0\x00', 0xc800, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0xfffffffe, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

25.060404061s ago: executing program 1 (id=4637):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

24.542173828s ago: executing program 1 (id=4642):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = socket(0x18, 0x5, 0x40)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$sock(r4, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0)
recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210002, 0x1, 0x10000a}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r8, 0xc4d28000)
setsockopt$inet_buf(r7, 0x0, 0x2e, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010820000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES8=r6], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

23.999140437s ago: executing program 1 (id=4646):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r3, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c)
splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd)

23.862745679s ago: executing program 6 (id=4648):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (rerun: 32)
madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async)
timer_create(0x3, 0x0, &(0x7f00000001c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60302, 0x0)
close_range(r1, r0, 0x0)

23.862152319s ago: executing program 6 (id=4649):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28)
shutdown(r0, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x2000}], 0x1, 0x80000001)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0)

23.732875041s ago: executing program 6 (id=4650):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

23.640275292s ago: executing program 8 (id=4651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1381, 0x4})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000040)={0x8, r0, 'id1\x00'})
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

23.578609563s ago: executing program 8 (id=4652):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000701000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f79bc0c0066b9800000c00f326635000800000f3066b9800000c00f326635000100000f302e0f225e0f22def267662e0f18c87f0b0fc7ad92a00fc79e0800660f38813c", 0x44}], 0x1, 0x0, &(0x7f0000000100)=[@efer={0x2, 0x800}], 0x1)
r3 = dup2(r0, r0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^')
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1, 0x2}, 0x10)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

23.578144353s ago: executing program 8 (id=4653):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async)
read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r4, 0x4188aea7, &(0x7f0000000280)=ANY=[@ANYRES32=r4]) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x10002, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x2) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000000)="7645f2e2b9a5", 0x6) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x3f9, 0x0, 0x70bd28, 0x25dfdbff, {0x800001, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008004}, 0x5) (async)
close_range(r5, 0xffffffffffffffff, 0x0)

23.577272983s ago: executing program 8 (id=4654):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x8f0fac20b6e312b1, 0x1000, 0x1, 0x1}, 0x20)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/93, 0x5d) (async)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0xa8d58000) (async)
syz_io_uring_setup(0x40000f00, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendfile(r0, r3, 0x0, 0x800a121)

23.572013423s ago: executing program 8 (id=4655):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
writev(r1, &(0x7f0000000680)=[{}, {&(0x7f0000000180)="6e39d2c83aed567ea1ae228597f786a93d2af1f165acc93d22c7883b65eceae76846a29508a4d1ae4efd511736802f0f658d620395849f9e5c80dfe54a560a1cbf52249d3577b613eafc5d0c35a4bb1b4723f2a849cfbefbb1971ddf910d1ed297c13c484b110770bf12f594b1ce4e9164285b677391b41d39ae024fd094637d0ab2ebcf7d95df70ead4b1195f0d577be5e70048589d374da0cd60808da2dbab9c6afc8c9d46385fb88521ae0536a84a4af52b98690d3e1380fb8bacf683a597ea9dd907b0ea5677a006970c7208b7effcd74b221fe52ea6befd59f3f7c75cdc207938c042205fc9fe6aeac39dd3a2c7d36714b3", 0xf4}, {&(0x7f0000000280)="efbe37a8979f7d0dded859e477e0e25b5a6be8cade74e42f9c74b080960338b7d2e5fac0df9d2d0f22a6dc841239d02da52cb5ccd83c2fa7bd428e10ee4f3abd45e7268dc68fa2e20d94964ef4cb807405107c8569dc168efea5fbd64f891ed6e247990b3205ef2168d719146a4bf77607157cb7b8acafa18e08eff4106a1896dcaf7f83c62ce6cd1afdb24d35e39342fe1d465d739bc2eaf7f06c85d2f3cd8c3705aa130d62d795b81123faa9e1da69c94bc78844bd09", 0xb7}, {&(0x7f0000000340)="820138f001995284d198c0ee5f023a5e8992c006629f4d546170e4cd3b377d3c1d9cadef0c133602156673874bb623db312f79a7a64a7d5eabe662ec30f61274e781b2eedd2bdd8864610471f993847910a7c0c3597660ab3cd3c558458e0e4e0a947f4e1791a826cd181e2fb030e2d1a70c29630c5c3d170656b6ff953e86321812f896ccdad7dea37fcbcc409d15044d4fb40ebaab7a74e451402ae23df45b87deaeeb38e0fad941fba29c0b0afc3778c3103ce09c7890691fa3298b985f93c80b7916143498ce9eb81ca596960ad5ab85fcb53bc7e4d90097b947", 0xdc}, {&(0x7f0000000080)="a85fb6e2b982319f7ffc2ca7c9a6dfaa49140aba49a9e1773362b748b11ef2dcdb04cc43799fd61a6069a71952dcdbc98e19", 0x32}, {&(0x7f0000000440)="f87258657a664a8e3cf06663baf10552ba80d9fc57b0417830b9422f27ec1943ce7cfd0ab32fc681dfc69b0adc7a8817dff4ea4bbf2c7404c7db937c70741ff8263de363aa13663b19", 0x49}, {&(0x7f00000004c0)="a5a910ce016df75b36e9ca48fedd78ab28114469a58f32afbdd98a26e6a02cb91cca2b0e92b31a3b70fa4e7d5c715e006ad85418f696d942c9671c9f6e08707d1901dbd3c6a96ab21c7cf1be38c1154d40ffbf9046934ce3a4207087cca87fadb80ec649f4b282725149bcd039ae3e3b18da444944ba614e9b", 0x79}, {&(0x7f0000000540)="4d54d998e59ad5367281af0b66c6265c2a6a8ac9f75481632e88411c046608be58a485a5206493d91f8b28113f95bc37d387caf6ef6e173aefa7eb97182254c8f36ae3b982293465e0d422d8", 0x4c}, {&(0x7f00000005c0)="315c57ed19b0efd49895b89e1f59cb4b036327a9aeb4f9dfe7d00582a81ec1929e1697d8bf05855b6280a93fb2d304e97d3694b8157ea964219179c2b4fc6a01c63d54a2670c66af736e4fc158cc1ab605807b199648d500517ddb9248153161d5dc0a7b5ee99571d1580f12c621d3e67e746fe646811dc63143d41f3ea3ced81633f2828124dac4344a2655a685e2d5364d", 0x92}, {&(0x7f0000000100)="e2bf4ed622efb919fbc24f20b7af7926b9e172d3a531c989c90749520fbfe056", 0x20}], 0xa)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_clone(0x2028411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
wait4(r4, 0x0, 0x80000000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x76a2f000)
munmap(&(0x7f00003d2000/0x3000)=nil, 0x3000)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000002c0)={0x0, 0xa, [@remote, @remote, @local, @dev, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r8 = fcntl$dupfd(r7, 0x0, r7)
sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x2d, 'hugetlb'}]}, 0x9)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)

23.421547606s ago: executing program 8 (id=4656):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000380)='./bus\x00') (async)
chdir(&(0x7f0000000380)='./bus\x00')
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r1, &(0x7f00000009c0)=']', 0x1, 0x8800000, 0x0, 0x0, r1}]) (async)
io_submit(r0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r1, &(0x7f00000009c0)=']', 0x1, 0x8800000, 0x0, 0x0, r1}])
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})

23.10233088s ago: executing program 1 (id=4657):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002680)="4fa87b71708b5ee5a631d62005122ee3913e1a503331444f5e12f88f9b3abb5990e37ffe534b90fa8da03132f52293815231c3d6373b207d5181cb2a4af39121f9c070fc9e6890c2f6f538a6162648c356a108a4beef35577f54e59ce4aa4d94b8e7a53fecbd80a962910352f8fb8ed8100469b124cce91e41f6447a138dce9540b26fbf32b97312eedaae7b28f51173e8a865c872dca29ad917a9f3618fade1827c197fb0468726e7cff167ed8bc0c4bbcc5bd96c35d4cb9ea2c7debe3ae6ed5d0cdcb80317b7c701043aeead7673a73ef704b58bde50735f64d79d7129c9f703431441d6a17acbde00c15283ffaa02b1a96a746c6d838c045b31f8f1da8d219aadac3bb92369046f1f244eb147dd5c890b039ecdda0eba1a1d44a03cf84e725c7da4f2a7039d883917f305f64857206805c08794709c3cc3b5753add31646efc67bba8479bc139cf08fd13641fa4b2dfe7924ff9ec831f045b55454cc98f342eb02d8aca4b483b1810958ff2e81cc59b38d0d1295f17a792ef438cacc6fddedff5f034b162065bd9f5eca7fe459d7e062288c9160dcef5543d20899a12c4879fe0ff72fdeabdcfde8ebcd6b6a757f7b1266f777d8ef506212cc16d572d9a9b9f73eccb336981e144cf779970a00362394e9a77cbdcbd7a9fb4758e585d0f7479baf649cd3093ebe248a7965db2085387b7baa1b26f36ea3012002e8f697437fe62e8bce58f40ff0de29227f821a51369c0ffe6584a17f8ce79024ade88383005eed9f4438d42c94dcb372600172f45aa99efef9b4fcc65e18b40ad6515d7b96ff13455f2c47bf95657cafd9bde6c9c75267102188e1266e08cdf811e33b3f35a5b5903db57d12a51da7c5b577aac2072490161bb0e9ba74e11a031caae42ada81a37231dba59a547c42139af3f48500fa2cb276fd2e058dda520369b8f67963e771f2732a6cfc4ea8ce336b0e3d61b29a785be6233423c24c42ba080043c10de56655c34fe375898257fb968e605aa9f092411971d88c2d788498b263e354314a80dcc303feeac554e2f9e8469d0f71cde8269256fca6d028b3c08260a948bcfa0366be73a961eba2179eeba4f2e2f04593c54f1ba5adea1d5c05061de0e031f457803fd101118fd0967b0c0512f76270aa364d29400a12e2468a850c90e3389bfdbc590161aaa66a2ddc3ac10178962da66a1c275507f54874fbbd72800064921612b268193828605da90c8fc903cff5df926dee912eb47967bb954a6ec099e163ba9655896d4bf4117967921ceaab268a2cc93b9f71c5bbcfeff6a13ae44b7cb4b12c3310baf60dab884564042467ed0c61813b5c6d42040d130003f1704cb57314f09aa6e5b4dba531d889dc9d749ae288fbb4ca5ca47dcb12b8066c5e49f8f3ed6749e7861b8c33047d0c4bc3c669d7224daff3542ea75d7cab148f170d71c517f53e23fa9fbbe61f2b07d0245b13f17b3f9dd41b74b7b8fd11b54eacea3f02470be729b9fad196f31f165414852b9bd44dfbb8bb1cc7297c00dd0c6a8311e537095667fe2e9d5bbc55b581d95ea43608e35c7014abd66d16d2d214815eb4a964c3002755e62e7af47dc7d3c6ac64908ba753e7961fb894fb918012c962bd8523db320b25fb67fbd7bd083ec97a28d06d6f831bd785fffef7cac51da3e9ce7bd94900eb34d7325ba9addd6b0246a28ce63a1d598ec3b3f5cd6b80a339da2d7d4a26fe4df17ae9d9c29abac5f8a4dcdb8ed5ea552bd6cedeb1dcbca4a72f280d2454915f2ec8e6915616bc8b6d4876bb6ada954f65606d8faccd7385bfbb385c5a4caaac320cfceac87ad87631a175ddab3b3961e646d275fe2f6ec8ee09b179b4cb13135d9dcca35f8b821fe8ad7c801bc8d46357228f6a4956f26a855f16086ed84cd68e000fc111c2adec7e287b38778e05fd3826e25dee1d0efe3ec3620af48c8cbe6bb6c37558cbc5b514c6f289f87068be1173323381126eb805bb03f4c06cb8757776b6339100b487854a0cf3d25d1b4c2e0841f270d45deb675567d5397ed12dc231a3dc39b8dc4da3d180288800ae08e08d5c3e091c2deddf945cc54f4e534581ef216cf25d3484633fa9bfdb38b82d027ae2a56f0d098b6fea089761d45f57911ff8484653f9a75fcdb944c66ff40314da98d697f741a0d6da0d37e79dfb5045631bf5d500c197ed9cc7a9dd95a907ee461a1feacc7c58c2f7149ade45e21f16c1ec044e77fc0c4d78fc4a6579957fb7db58ef6b65e7d069e19159f765a06a8ed36583e755a2c630ef3638461ecba105256d7c7c2641b4e9fffd933db5a2009cf41d0188f5fd234952c4ed4a9250a833137fb0870e0a729f43c94985ef9a22a8e30a35429766733d3156d842bc1563824e9032346e0d1f0a972f33fd28b5196abb63fe582666274a1b9b70b885eee5d998aecaaf1bdd5dac688ae4eb9837f3ef0f0850abc0eff48a4434e87c9335f9653a742cfe826ffde720c4dd9b0d43ee286a66ba62674bc30588ba6606f4f036dd911ee0030b61ad811e39929dd74b38ea57364274756243e78966e37204f77a23f968d96165a40b720b0a01c0dbe3aa72d81fdcaaa59274fdafd2a360b89b0df5e5909de10b2c933b7576209ef6c8b4389e7cbef627f14528d09d0c348ca515cafc6302516adb5271794b8084e0bb0dadf21025f7549c83666fcd98ce671788477f6a0b20e7bedb3d0acc89a86da5be35ffb6cf3c192df3101bd3e5126a42e145385d438c4501ebd24339c5a09f92a373820fb1f4d24a8b4785df96b20325fd305d19521b5714a4faac168ffd45444a9c9d0df78674c0e2149ef2735554564967214289631a78f5bf8e48f5452508ad601b6e053da309f547e414a72ab64961f66a6ce78eb052b3187d6de3d4d812b278816d48a8ef49057f0136c1a34be03bb646853f5ea25341e8445ea621c55a795945665b2695ea173b2bcad53a8908e625657d7ee9b420f25f06374487c0003c1dee2de6f1daa27c60e4ca4c808309ed9ed17504a637c8c82f2618849a2fecea78d6e248031302c8ff391329263de89943b811fae273ad6f8a8afa9bdea0863e5a2383b8831cf40c44394521f34ddd5d899edf223523e987d4b175cb5ab2c4d1c4aabc34a93f1b32db188b7fd47c3097d8d10e8bd84687347b35190d5c5413c2e14d5e9248188a6df7bf9951124dfd776e1c5d950590e76025edd87862ff770f3c71568520c99db62706669ba16a989aec004d92734ac2149c671811cfefcfb42d5a68b50de4e79ccea3ee2679c3cdfc5b174c1c54763ce56df9f62259db3fcf4abe9731004e96ed961d2ccb4967bebfa3dd7264ed9693c1380ff965e27e6721508c1fefe62577267b096c3e3987f6ddcd3cde30f25378238aaa775813cbcbf434c513e97a188bb05196098a89919a00e3d1a043adb72e74d3f94ae40509e86b616394cca074e89b0f5d2e6b4479be7c13fac164c3afb02f71ca59e428bbf215fc065dd54a2669026871bdaa57ffc88fce37bd1daf74919cac26a910608f89ee99e8f705d074c9ed9438cde76473ec5b325b487f8a06e3c778b43931bec80c337724db99ae2384078c09d2fae2b5e0cc3789c4e2da22b57ff950dc172b340e0c1cfbb23264cdc609aa6c0dca14f5dd001136bc741c2289d248d523db6bce1e6a89591ed28125585184507d5b76a024a6f08d47fa5b8944467bdf0261f042052edb11e2a007f78bdbb54ca7241c3be05d8bbd63aea048e88f93e8fd41165c3a6f5f3a8577104b68e734c16c2a93f3f7723ac9f4729bdd6a63f4a04c3b5fd40af3564a3cd6e987de5990aede856d0de00dc0eee27e70c16737914691b62b54b5dc6a41d1b33f661c21043c06da77329980e7610af41d12fe982870f657da34ea4156a07fb020a23d80d5cf4fcf5e5928dda6abe3d9797dd454688ec4ac97eaa2368eb613cb9c7e0337f0bdd63c7f9c1585c2464700bd87ab58b8f1c52dada787b576f3ce6e21f565908884d0b0836bdbd6dd2b778a88fbf2313eb3695a2e38c8ce4d6fd8f48c96908191d236462969357c76d6fe146378958e4f6cd8d04afdaf5128571268c3e93f6b5cd26ab3cc88dce12f18a455eada1c1832cd5e7703ebf00db7f462719387d5a723820f7704d4488586ab46e9ed5d30d6e12ae3b5f5d3c33230d20b04c122baf071217b85930e93bec0d8af2a6d7d5906698a04c103d43f3089e0cec8a3e7f7e2410d84db3e123283094872c416a799a6cb8b842a963326de560b5a751c98c3402e220b8fe97445ce2306f42d774f17018a10b354c936c49a313b68845e5218e3a196ea19264666c621401ad77b5c9d74f24aa20ef871a2119c102b8137169a13ca76ac1d2d762745ed24016dd2b38211b721a531401d4a75cfd42147ff52d9867a0caacdce0a93fb2995ef62fb705e0935db13f50e259caca14270ac37f77021882257bb862bb9d6daed49ec9b796938cc28e985e7da94f9dcd15b1923b0d3b6844097737ce0fc014464787ea42d5a1e8c575d7b35233ed1ee958dd81f45beb5375e766a661a8ac3cf78cc568e057926cf83936bc7983d6ed0b378b711f9491e5300ae20fce421caedfd8f7f118c679bcb4e5e9b27688191bd8ebf930f8f9ece6827a6282e9db561a84a7de65276fcc7e06a6d5b63f477ac185fddddb545a8a7a058a61052b934958913b9d955c599ba2a434d056ddc12d10803035a4d977da1a10915193192029972971438a425beb284c0ce865217c78df66ce42200103457d0f6e0f39a68eaf121a3bdaac5c3a742154eb932b8703112b13d618bd0feb84ec70c07938123bb6ef2e8532e33e34039234d5005631de120caa94b6be20109e1bd9cd96cf1c3b16215546bd41515e21279ed9ab5bc35af39712d59051534aefbf0b2ad86d47aafa5b8eca9f140a4c40e12103ec158057ba31ad1e1904fbd60c5f93a376ff4a4895c77850963812e118bdbb187b21cfce1d9bf506f12f6e7339b1dcab5636f7ffe083d0478acf030567ff95bedac0bf1dfe633a34f4f090d777de95beff069f7b34874b77a3b4b1e5c0231b519a9e491f9be7657ec6dc15da7dac7af1e7b27905f2c198ac729f1d73e492d3523bb4c58705894dd1c30c16775dce48040b7fa97d5ea94ea8a5b712711be78844bba2a5f031c3c9a380bfceeb748d90f57ef791f366262dc04dce87e73aa99691af0053335478f2e799a44cdf71aafdf6a8d8b9a53ce44dc071e1f6412b11362de197a3c49714646ac5b26eeac6c2f14bb68b04030c8df60805475634dd4c704b7abbc612740f82988e1e8c0d64c3079dbc4fd01ec568064ce8d09b8e62cfed2c02f3a899e663dd2ae2d1464e495cc7334f493090e264e27cf03305105bff27b35fa86ae41ec9dcaec87e2bef59dde7fb643c696b5af6f0009dd44823436f17cc7b798976683fbfd7e9c24942cbf12efe6168e165ce7bbf5c6fdfa28f96319164a35e3b9221cbac92dd6a980a5a670d36d525901ca18a312b36eb7ce2f664741eba4bc6243fe3a62c84fa129dec2171ea4ae735ee48c3fe6739dc196a8d18c2614c5bb9bf04e6576264264561014b3be724c9207ccb7ee93571dcff3808bdb7e55bc9543185a3b290e172e43cbf3b804566882653d6b24f3e1622ece30c1aae84763d8f152e1f630ec61532db204e0ce9838cf77c02a295b47bcd538f9f999907f3ed2de32b6ffdbc0a09e139aa3c9d84fb1f2ebfbb3ba99a6b34306875e736728e12a42427f53a72cd447df4cf66290021a752643fad947cc2d3ca6bd17ae0", 0x1000, r0}, 0x68)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}])
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d533af28", 0x4}], 0x1}}], 0x2, 0x400c404)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x10000000000)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

20.383570382s ago: executing program 6 (id=4658):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f00000003c0)=""/18, 0x12)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/229, 0x20000, 0x1800, 0xfffffff8, 0x2}, 0x20)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x60, 0x9, 0xff}, {0x1, 0x0, 0x6, 0x873}, {0x80, 0x4, 0xff, 0x2}]})

19.062471812s ago: executing program 6 (id=4659):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x20)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x200000000002}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x200000000002})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.571909804s ago: executing program 6 (id=4660):
io_setup(0x8, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x6)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r1, 0x0, 0x0, 0x2a}])
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'})

12.610109119s ago: executing program 37 (id=4612):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
syz_usb_connect$uac1(0x1, 0xd5, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x9}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x2, 0x1, "2f3b40e55446"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0xe5, "57d9060115f6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3e, 0x2, 0xf7, 0x7, "a28720", "a106"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xfffd, 0xf5, 'A'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0xfb, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x13, 0x9, {0x7, 0x25, 0x1, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x25, 0x36}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x2, 0x4, "f75b1a73c86750e1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb38c, 0xfffa, 0x9, "57d10a52c0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0x3, 0x9, {0x7, 0x25, 0x1, 0x3, 0x2, 0x5}}}}}}}]}}, &(0x7f0000002680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x210, 0x9, 0x7, 0x3, 0x8, 0xff}, 0x11d, &(0x7f0000000300)={0x5, 0xf, 0x11d, 0x6, [@ptm_cap={0x3}, @generic={0xd6, 0x10, 0x1, "5e77cdd3cb88fed43995c79919f44710c08d383503b6b1f93546cf376cb69535c2ba25a613e5206c7b09bff26c64887fbcfa2bea3371aa6e9876173668bec1663c8b87d6321f3f75c46f047cb37d1f0693c2d2498c1f786a75bd2405589af16f2c2130a108bfd43367c4c67840b625f2c2d8036651170cd860b87a80958cd6bd5241f3e6069b9fc123d0e1149b713d50926700817e81f349b29d6f1595fdae1482c1320eb0db5d299ceb642c2fb090fb39e0284b11d7b4938326002aec4578039a1ccf7e0ea4fbfd4537aef9e34513e13cf4b9"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2dc8bacf98f3f71a61059ff5cb23695a"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6f9f691f19cb7eab2c8ce9792817f870"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f980961dee17661d89922b5bbf44ac9e"}]}, 0x5, [{0xf1, &(0x7f0000000440)=@string={0xf1, 0x3, "2e3ee562ff934139494a124e67aabeeb5f27adbf9b8381a34b83b121dc25678a41fa24c64a503aafb01f4e865e9e20cb365162d5fa97c7a23ed9e87841d3c0e7855b11ad6c9808cc1cacce68054b051222b4411067536d39c57b92d1ac0115d4b207be954756e69fc4450170db826aaeda60c6741b126d3ea55519e765c65f19bf94cd024c048bbee043f87c2f47246ccd44679c4f124163819c20353a78ff591840d9baf1d08dc0872ad253d43157c6bbc76373eb89e04516e2fd60f01c563450d43a01b67b18a49b21f65dd7aee37f666b7792ef5af015e7ea58a5e435145fa5b441192ae1d805732c7a973dcc26"}}, {0xea, &(0x7f0000000540)=@string={0xea, 0x3, "726c0c44ae41c1fdb9ebf239c7281dbc80032807b820115d6827046f1ab47818a1fa6aabef915511cdfaeb5484c831d08fde13dc78da73bdfba190453e9343ce623dd0cae9829026a7bc15ee9e01d960aa342d8f3b58ce2f880160f91d8811c2a7a1dfd8048963639ec8062bb9359a627de25c2c2b32df1b5069fc40bfe6796804dfccfdd52d04c2d6180ef2840c8005eadf8272ba58d239edf98931634bb3466cc2c1afc438deeaec5b68540dd6033cd0b7d708dcc1524527fd5002c06958e693518807411db7a91127734aacc16202340e59c259b2543ab0838457b6ce552e4b691887b9301ea4"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYRES8=r1, @ANYRES16=r9, @ANYBLOB="01841344fb000000000014000000180001801400020073797a5f74756e00000000000000000008000300"], 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYRES8=r1, @ANYRES16=r9, @ANYBLOB="01841344fb000000000014000000180001801400020073797a5f74756e00000000000000000008000300"], 0x34}}, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x10000000000) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x10000000000)
read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) (async)
read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x5bef8000)

8.130656517s ago: executing program 38 (id=4656):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000380)='./bus\x00') (async)
chdir(&(0x7f0000000380)='./bus\x00')
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r1, &(0x7f00000009c0)=']', 0x1, 0x8800000, 0x0, 0x0, r1}]) (async)
io_submit(r0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r1, &(0x7f00000009c0)=']', 0x1, 0x8800000, 0x0, 0x0, r1}])
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})

6.639953199s ago: executing program 39 (id=4657):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002680)="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", 0x1000, r0}, 0x68)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}])
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d533af28", 0x4}], 0x1}}], 0x2, 0x400c404)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x10000000000)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

0s ago: executing program 40 (id=4660):
io_setup(0x8, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x6)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r1, 0x0, 0x0, 0x2a}])
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'})

kernel console output (not intermixed with test programs):

high-speed USB device number 7 using dummy_hcd
[  355.242292][T10643] overlayfs: failed to clone upperpath
[  355.250006][  T305] usb 9-1: device descriptor read/8, error -71
[  355.379897][  T305] usb 9-1: device descriptor read/8, error -71
[  355.488956][  T305] usb usb9-port1: unable to enumerate USB device
[  355.868427][T10669] binder: Bad value for 'max'
[  356.033190][   T36] audit: type=1400 audit(1751885443.648:623): avc:  denied  { read } for  pid=10679 comm="syz.8.3931" dev="sockfs" ino=70113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  356.033556][T10680] 9pnet_fd: Insufficient options for proto=fd
[  356.113152][T10690] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  356.224656][T10703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  356.232802][T10703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:632
[  356.242800][T10704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.448864][  T349] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  356.498870][  T305] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  356.610269][  T349] usb 9-1: unable to get BOS descriptor or descriptor too short
[  356.618426][  T349] usb 9-1: not running at top speed; connect to a high speed hub
[  356.626944][  T349] usb 9-1: config 0 has no interfaces?
[  356.634531][  T349] usb 9-1: language id specifier not provided by device, defaulting to English
[  356.644735][  T349] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  356.650096][  T305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  356.653869][  T349] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  356.665175][  T305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  356.673309][  T349] usb 9-1: Product: syz
[  356.686114][  T305] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  356.688785][  T349] usb 9-1: Manufacturer: syz
[  356.700064][  T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  356.706315][  T349] usb 9-1: SerialNumber: syz
[  356.712105][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.724443][  T305] usb 2-1: Product: syz
[  356.725191][  T349] usb 9-1: config 0 descriptor??
[  356.730790][  T305] usb 2-1: Manufacturer: syz
[  356.738343][  T305] usb 2-1: SerialNumber: syz
[  356.743955][T10708] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  356.855636][T10712] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  356.945122][T10699] rust_binder: 10699: no such ref 1
[  356.950475][T10699] rust_binder: Write failure EINVAL in pid:48
[  356.950640][T10699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48
[  357.358776][  T305] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  357.374005][  T305] cdc_ncm 2-1:1.0: bind() failure
[  357.381380][  T305] usb 2-1: USB disconnect, device number 11
[  357.466634][  T349] usb 9-1: USB disconnect, device number 8
[  357.559189][  T368] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0
[  357.567811][  T368] hid-generic 0000:0000:0000.0075: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  357.889327][T10750] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  357.898884][  T349] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  358.038850][  T349] usb 8-1: device descriptor read/64, error -71
[  358.247717][T10764] rust_binder: Failed to allocate buffer. len:96, is_oneway:true
[  358.261582][T10766] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock
[  358.279134][  T349] usb 8-1: device descriptor read/64, error -71
[  358.518880][  T349] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  358.538860][  T368] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  358.649423][  T349] usb 8-1: device descriptor read/64, error -71
[  358.668871][  T368] usb 9-1: device descriptor read/64, error -71
[  358.888980][  T349] usb 8-1: device descriptor read/64, error -71
[  358.908926][  T368] usb 9-1: device descriptor read/64, error -71
[  358.978871][  T305] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  358.998964][  T349] usb usb8-port1: attempt power cycle
[  359.128914][  T305] usb 2-1: Using ep0 maxpacket: 32
[  359.135298][  T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.145461][  T305] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  359.154483][  T305] usb 2-1: config 1 has no interface number 1
[  359.160621][  T368] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  359.168267][  T305] usb 2-1: config 1 interface 2 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  359.181681][  T305] usb 2-1: config 1 interface 2 has no altsetting 0
[  359.189869][  T305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  359.198959][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.206972][  T305] usb 2-1: Product: �
[  359.211173][  T305] usb 2-1: Manufacturer: 릶㇃뱌嗗㱦و麕泵ꎷ혤룠�㊋员�䊢뀘✅盩ᚈ橓鸲䔨婞។턓蜓ɶ馑닼쭶嚩臎漊㹋鄼㒔岠铛皾蚑焎뵨�躒䋃艋떚Жᲇ圂儗듈￢墌貾�簣�ᓯ衾⚋㶃䊬㓿�僧�᪒⮹ȉ艵䆫犷愸��ﯩ于ﮕ젛��뻗⩤듃훒뉪녭�븙鲂�縎⑂銗߼䋮꧎
[  359.244505][  T305] usb 2-1: SerialNumber: 苛䚯틘䙼蓒 㕔মᶰ哉�羟䱡䧸뱙￢㨤唙⠼﭂ꄵ࠹ꈙᜑ⎺Ÿ퓥쬌�≾�む栌ﻃ㼖춹괎畛玶婲㖢䞲ꅚ��滋쌔攖귊ᒑ�ힻ��ᣄ时牢邀讼䣵퇳诊蛘�紟�䗨ꭃ樰纂䠷௅嵨鼉붷瀙↭䠛༜徘탼冣罨�㶟þ�薹䫻窀㱨귫㞺쇧蹲ꕼ⌟�댥习�놅ᾭ⒘笼
[  359.338865][  T368] usb 9-1: device descriptor read/64, error -71
[  359.349005][  T349] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  359.369920][  T349] usb 8-1: device descriptor read/8, error -71
[  359.486210][  T305] usb 2-1: USB disconnect, device number 12
[  359.496442][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  359.513161][  T349] usb 8-1: device descriptor read/8, error -71
[  359.588852][  T368] usb 9-1: device descriptor read/64, error -71
[  359.698938][  T368] usb usb9-port1: attempt power cycle
[  359.758857][  T349] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  359.779862][  T349] usb 8-1: device descriptor read/8, error -71
[  359.911187][  T349] usb 8-1: device descriptor read/8, error -71
[  360.018960][  T349] usb usb8-port1: unable to enumerate USB device
[  360.050707][  T368] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  360.071970][   T36] audit: type=1326 audit(1751885447.688:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.6.3975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f546e98e929 code=0x0
[  360.080012][  T368] usb 9-1: device descriptor read/8, error -71
[  360.229889][  T368] usb 9-1: device descriptor read/8, error -71
[  360.368919][  T305] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  360.468915][  T368] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  360.489901][  T368] usb 9-1: device descriptor read/8, error -71
[  360.519936][  T305] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213
[  360.532556][  T305] usb 2-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config
[  360.542865][  T305] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  360.557661][  T305] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  360.566844][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.574917][  T305] usb 2-1: Product: syz
[  360.579133][  T305] usb 2-1: Manufacturer: syz
[  360.583747][  T305] usb 2-1: SerialNumber: syz
[  360.589054][  T305] usb 2-1: config 0 descriptor??
[  360.594823][  T305] usb-storage 2-1:0.0: USB Mass Storage device detected
[  360.602715][  T305] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  360.619910][  T368] usb 9-1: device descriptor read/8, error -71
[  360.660729][T10813] /dev/rnullb0: Can't lookup blockdev
[  360.728956][  T368] usb usb9-port1: unable to enumerate USB device
[  360.866018][T10805] rust_binder: Error while translating object.
[  360.866074][T10805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  360.878878][T10805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653
[  361.218323][ T1217] usb 2-1: USB disconnect, device number 13
[  361.333252][T10832] rust_binder: Got transaction with invalid offset.
[  361.333297][T10832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  361.340253][T10832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[  361.735175][T10856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370
[  361.744544][T10856] rust_binder: Read failure Err(EFAULT) in pid:370
[  361.773069][  T368] usb 9-1: new low-speed USB device number 13 using dummy_hcd
[  361.838852][  T305] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  361.939918][  T368] usb 9-1: config 126 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  361.958868][  T368] usb 9-1: config 126 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  361.969939][  T305] usb 2-1: device descriptor read/64, error -71
[  361.975356][T10870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10870 comm=syz.6.3997
[  361.976245][  T368] usb 9-1: config 126 interface 0 has no altsetting 0
[  362.008849][  T368] usb 9-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  362.018064][  T368] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.027493][T10839] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  362.208879][  T305] usb 2-1: device descriptor read/64, error -71
[  362.237491][  T368] usb 9-1: string descriptor 0 read error: -71
[  362.248620][  T368] usbhid 9-1:126.0: can't add hid device: -71
[  362.254990][  T368] usbhid 9-1:126.0: probe with driver usbhid failed with error -71
[  362.272582][  T368] usb 9-1: USB disconnect, device number 13
[  362.458917][  T305] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  362.548839][   T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  362.588890][  T305] usb 2-1: device descriptor read/64, error -71
[  362.698958][   T10] usb 8-1: Using ep0 maxpacket: 32
[  362.705488][   T10] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  362.715691][   T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  362.724756][   T10] usb 8-1: config 1 has no interface number 1
[  362.735342][   T10] usb 8-1: too many endpoints for config 1 interface 2 altsetting 237: 103, using maximum allowed: 30
[  362.746658][   T10] usb 8-1: config 1 interface 2 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 103
[  362.778537][   T10] usb 8-1: config 1 interface 2 has no altsetting 0
[  362.796712][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  362.811537][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.827280][   T10] usb 8-1: Product: �
[  362.831619][  T305] usb 2-1: device descriptor read/64, error -71
[  362.837926][   T10] usb 8-1: Manufacturer: 릶㇃뱌嗗㱦و麕泵ꎷ혤룠�㊋员�䊢뀘✅盩ᚈ橓鸲䔨婞។턓蜓ɶ馑닼쭶嚩臎漊㹋鄼㒔岠铛皾蚑焎뵨�躒䋃艋떚Жᲇ圂儗듈￢墌貾�簣�ᓯ衾⚋㶃䊬㓿�僧�᪒⮹ȉ艵䆫犷愸��ﯩ于ﮕ젛��뻗⩤듃훒뉪녭�븙鲂�縎⑂銗߼䋮꧎
[  362.872258][   T10] usb 8-1: SerialNumber: 苛䚯틘䙼蓒 㕔মᶰ哉�羟䱡䧸뱙￢㨤唙⠼﭂ꄵ࠹ꈙᜑ⎺Ÿ퓥쬌�≾�む栌ﻃ㼖춹괎畛玶婲㖢䞲ꅚ��滋쌔攖귊ᒑ�ힻ��ᣄ时牢邀讼䣵퇳诊蛘�紟�䗨ꭃ樰纂䠷௅嵨鼉붷瀙↭䠛༜徘탼冣罨�㶟þ�薹䫻窀㱨귫㞺쇧蹲ꕼ⌟�댥习�놅ᾭ⒘笼
[  362.916143][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.916170][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.924352][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.929907][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.936501][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.938981][  T305] usb usb2-port1: attempt power cycle
[  362.943374][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.954976][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.968118][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.968173][T10906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.974765][T10908] rust_binder: Error in use_page_slow: ESRCH
[  362.981743][T10908] rust_binder: use_range failure ESRCH
[  362.987784][T10908] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  362.996757][T10908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  363.004900][T10908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:101
[  363.018827][   T36] audit: type=1400 audit(1751885450.638:625): avc:  denied  { create } for  pid=10910 comm="syz.6.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  363.047956][   T36] audit: type=1400 audit(1751885450.638:626): avc:  denied  { sys_admin } for  pid=10910 comm="syz.6.4010" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  363.123569][   T10] usb 8-1: USB disconnect, device number 17
[  363.135384][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  363.278885][  T368] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  363.288877][  T305] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  363.309864][  T305] usb 2-1: device descriptor read/8, error -71
[  363.429961][  T368] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.440214][  T368] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  363.449190][  T368] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  363.462946][  T305] usb 2-1: device descriptor read/8, error -71
[  363.469703][  T368] usb 9-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40
[  363.478751][  T368] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.486779][  T368] usb 9-1: Product: syz
[  363.490981][  T368] usb 9-1: Manufacturer: syz
[  363.495597][  T368] usb 9-1: SerialNumber: syz
[  363.640733][T10926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  363.640769][T10926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:376
[  363.665783][T10928] rust_binder: 10928: no such ref 7
[  363.728834][  T305] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  363.740554][  T368] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  363.747444][  T368] cdc_ncm 9-1:1.0: bind() failure
[  363.756221][  T368] usb 9-1: USB disconnect, device number 14
[  363.770075][  T305] usb 2-1: device descriptor read/8, error -71
[  363.899943][  T305] usb 2-1: device descriptor read/8, error -71
[  364.009104][  T305] usb usb2-port1: unable to enumerate USB device
[  364.038844][   T36] audit: type=1400 audit(1751885451.648:627): avc:  denied  { create } for  pid=10942 comm="syz.6.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  364.508855][  T368] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  364.668849][  T368] usb 9-1: Using ep0 maxpacket: 32
[  364.675400][  T368] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  364.685884][  T368] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  364.695396][  T368] usb 9-1: config 1 has no interface number 1
[  364.701851][  T368] usb 9-1: too many endpoints for config 1 interface 2 altsetting 237: 103, using maximum allowed: 30
[  364.713219][  T368] usb 9-1: config 1 interface 2 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 103
[  364.726913][  T368] usb 9-1: config 1 interface 2 has no altsetting 0
[  364.735652][  T368] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  364.745098][  T368] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.753905][  T368] usb 9-1: Product: �
[  364.758206][  T368] usb 9-1: Manufacturer: 릶㇃뱌嗗㱦و麕泵ꎷ혤룠�㊋员�䊢뀘✅盩ᚈ橓鸲䔨婞។턓蜓ɶ馑닼쭶嚩臎漊㹋鄼㒔岠铛皾蚑焎뵨�躒䋃艋떚Жᲇ圂儗듈￢墌貾�簣�ᓯ衾⚋㶃䊬㓿�僧�᪒⮹ȉ艵䆫犷愸��ﯩ于ﮕ젛��뻗⩤듃훒뉪녭�븙鲂�縎⑂銗߼䋮꧎
[  364.791508][  T368] usb 9-1: SerialNumber: 苛䚯틘䙼蓒 㕔মᶰ哉�羟䱡䧸뱙￢㨤唙⠼﭂ꄵ࠹ꈙᜑ⎺Ÿ퓥쬌�≾�む栌ﻃ㼖춹괎畛玶婲㖢䞲ꅚ��滋쌔攖귊ᒑ�ힻ��ᣄ时牢邀讼䣵퇳诊蛘�紟�䗨ꭃ樰纂䠷௅嵨鼉붷瀙↭䠛༜徘탼冣罨�㶟þ�薹䫻窀㱨귫㞺쇧蹲ꕼ⌟�댥习�놅ᾭ⒘笼
[  365.048937][  T368] usb 9-1: USB disconnect, device number 15
[  365.468866][T10962] sit0: entered promiscuous mode
[  365.475546][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667
[  365.476383][T10962] netlink: 'syz.1.4027': attribute type 1 has an invalid length.
[  365.493838][T10962] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4027'.
[  365.869019][  T349] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  365.888853][  T368] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  365.998859][  T349] usb 2-1: device descriptor read/64, error -71
[  366.038833][  T368] usb 9-1: Using ep0 maxpacket: 16
[  366.045194][  T368] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  366.054081][  T368] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  366.063885][  T368] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  366.074883][  T368] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  366.086962][  T368] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.096892][  T368] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.105126][  T368] usb 9-1: Product: syz
[  366.109512][  T368] usb 9-1: Manufacturer: syz
[  366.114149][  T368] usb 9-1: SerialNumber: syz
[  366.248858][  T349] usb 2-1: device descriptor read/64, error -71
[  366.488869][  T349] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  366.618882][  T349] usb 2-1: device descriptor read/64, error -71
[  366.878696][  T349] usb 2-1: device descriptor read/64, error -71
[  366.894227][T10992] rust_binder: 10992: no such ref 0
[  366.900255][T10992] rust_binder: Write failure EINVAL in pid:391
[  366.915788][T10994] 9pnet_fd: Insufficient options for proto=fd
[  366.989298][  T349] usb usb2-port1: attempt power cycle
[  367.268845][  T346] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  367.330272][  T349] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  367.361043][  T349] usb 2-1: device descriptor read/8, error -71
[  367.428857][  T346] usb 8-1: Using ep0 maxpacket: 32
[  367.435331][  T346] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  367.444134][  T346] usb 8-1: config 1 has an invalid interface descriptor of length 7, skipping
[  367.453232][  T346] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  367.462031][  T346] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  367.472293][  T346] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  367.481373][  T346] usb 8-1: config 1 has no interface number 1
[  367.487657][  T346] usb 8-1: too many endpoints for config 1 interface 2 altsetting 237: 103, using maximum allowed: 30
[  367.498872][  T346] usb 8-1: config 1 interface 2 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 103
[  367.512516][  T346] usb 8-1: config 1 interface 2 has no altsetting 0
[  367.519697][  T349] usb 2-1: device descriptor read/8, error -71
[  367.526969][  T346] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.536191][  T346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.544286][  T346] usb 8-1: Product: �
[  367.548537][  T346] usb 8-1: Manufacturer: 릶㇃뱌嗗㱦و麕泵ꎷ혤룠�㊋员�䊢뀘✅盩ᚈ橓鸲䔨婞។턓蜓ɶ馑닼쭶嚩臎漊㹋鄼㒔岠铛皾蚑焎뵨�躒䋃艋떚Жᲇ圂儗듈￢墌貾�簣�ᓯ衾⚋㶃䊬㓿�僧�᪒⮹ȉ艵䆫犷愸��ﯩ于ﮕ젛��뻗⩤듃훒뉪녭�븙鲂�縎⑂銗߼䋮꧎
[  367.581684][  T346] usb 8-1: SerialNumber: 苛䚯틘䙼蓒 㕔মᶰ哉�羟䱡䧸뱙￢㨤唙⠼﭂ꄵ࠹ꈙᜑ⎺Ÿ퓥쬌�≾�む栌ﻃ㼖춹괎畛玶婲㖢䞲ꅚ��滋쌔攖귊ᒑ�ힻ��ᣄ时牢邀讼䣵퇳诊蛘�紟�䗨ꭃ樰纂䠷௅嵨鼉붷瀙↭䠛༜徘탼冣罨�㶟þ�薹䫻窀㱨귫㞺쇧蹲ꕼ⌟�댥习�놅ᾭ⒘笼
[  367.758842][  T349] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  367.779859][  T349] usb 2-1: device descriptor read/8, error -71
[  367.909922][  T349] usb 2-1: device descriptor read/8, error -71
[  368.018939][  T349] usb usb2-port1: unable to enumerate USB device
[  368.610868][  T368] usb 9-1: USB disconnect, device number 16
[  368.616938][  T346] usb 8-1: USB disconnect, device number 18
[  368.630189][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  368.636331][  T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  368.761483][T11053] __vm_enough_memory: pid: 11053, comm: syz.8.4056, bytes: 70373039144960 not enough memory for the allocation
[  368.944854][T11062] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  368.944881][T11062] rust_binder: Read failure Err(EFAULT) in pid:694
[  368.949138][  T346] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  368.992711][T11069] netlink: 'syz.1.4063': attribute type 16 has an invalid length.
[  369.001075][T11069] /dev/rnullb0: Can't open blockdev
[  369.044963][T11075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  369.044992][T11075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:706
[  369.078898][  T349] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  369.109867][  T346] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  369.120901][  T346] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  369.131942][  T346] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  369.143066][  T346] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  369.152175][  T346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.160203][  T346] usb 8-1: Product: syz
[  369.164385][  T346] usb 8-1: Manufacturer: syz
[  369.169173][  T346] usb 8-1: SerialNumber: syz
[  369.174829][T11027] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  369.228894][  T349] usb 9-1: device descriptor read/64, error -71
[  369.288867][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  369.438845][   T10] usb 2-1: Using ep0 maxpacket: 32
[  369.445157][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.456174][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.465992][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  369.475337][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.478898][  T349] usb 9-1: device descriptor read/64, error -71
[  369.484517][   T10] usb 2-1: config 0 descriptor??
[  369.496233][   T10] hub 2-1:0.0: USB hub found
[  369.586697][  T346] cdc_ncm 8-1:1.0: bind() failure
[  369.592999][  T346] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71
[  369.601328][  T346] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71
[  369.610967][  T346] usb 8-1: USB disconnect, device number 19
[  369.695592][   T10] hub 2-1:0.0: 1 port detected
[  369.738928][  T349] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  369.868887][  T349] usb 9-1: device descriptor read/64, error -71
[  370.102624][   T10] usb 2-1: USB disconnect, device number 22
[  370.109142][  T349] usb 9-1: device descriptor read/64, error -71
[  370.137926][T11091] rust_binder: Error while translating object.
[  370.137954][T11091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  370.144242][T11091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414
[  370.218949][  T349] usb usb9-port1: attempt power cycle
[  370.568885][  T349] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  370.589938][  T349] usb 9-1: device descriptor read/8, error -71
[  370.677878][   T36] audit: type=1400 audit(1751885458.288:628): avc:  denied  { setattr } for  pid=11098 comm="syz.7.4073" name="/" dev="configfs" ino=1657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  370.729976][  T349] usb 9-1: device descriptor read/8, error -71
[  370.808687][T11112] rust_binder: Write failure EFAULT in pid:724
[  370.832848][   T36] audit: type=1400 audit(1751885458.448:629): avc:  denied  { setopt } for  pid=11115 comm="syz.1.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  370.968848][  T349] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  370.990107][  T349] usb 9-1: device descriptor read/8, error -71
[  371.118853][  T346] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  371.127557][  T349] usb 9-1: device descriptor read/8, error -71
[  371.242555][  T349] usb usb9-port1: unable to enumerate USB device
[  371.268858][  T346] usb 2-1: Using ep0 maxpacket: 8
[  371.275374][  T346] usb 2-1: unable to get BOS descriptor or descriptor too short
[  371.284113][  T346] usb 2-1: config 4 has an invalid interface number: 232 but max is 0
[  371.292384][  T346] usb 2-1: config 4 has no interface number 0
[  371.298563][  T346] usb 2-1: config 4 interface 232 has no altsetting 0
[  371.306767][  T346] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8a.91
[  371.315899][  T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.323919][  T346] usb 2-1: Product: syz
[  371.328120][  T346] usb 2-1: Manufacturer: syz
[  371.332757][  T346] usb 2-1: SerialNumber: syz
[  371.488856][  T349] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  371.544771][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.553491][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.638851][  T349] usb 8-1: Using ep0 maxpacket: 32
[  371.645289][  T346] ums-freecom 2-1:4.232: USB Mass Storage device detected
[  371.652853][  T349] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  371.661377][  T349] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  371.670597][  T349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  371.679615][  T349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  371.689344][  T349] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  371.699487][  T349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  371.700545][  T346] usb 2-1: USB disconnect, device number 23
[  371.716856][  T349] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  371.727225][  T349] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  371.740259][  T349] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  371.749345][  T349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.758015][  T349] usb 8-1: config 0 descriptor??
[  371.851236][T11131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[  371.851465][T11131] rust_binder: 11131: no such ref 0
[  371.884594][   T36] audit: type=1400 audit(1751885459.498:630): avc:  denied  { remount } for  pid=11132 comm="syz.8.4085" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  371.917382][T11135] fuse: Bad value for 'user_id'
[  371.922366][T11135] fuse: Bad value for 'user_id'
[  371.927540][T11135] 9pnet_fd: Insufficient options for proto=fd
[  371.966825][  T349] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  372.167340][   T36] audit: type=1400 audit(1751885459.778:631): avc:  denied  { read write } for  pid=11126 comm="syz.7.4083" name="lp0" dev="devtmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  372.180327][T11161] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  372.191331][   T36] audit: type=1400 audit(1751885459.778:632): avc:  denied  { open } for  pid=11126 comm="syz.7.4083" path="/dev/usb/lp0" dev="devtmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  372.191457][  T349] usb 8-1: USB disconnect, device number 20
[  372.197908][T11162] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  372.229317][  T349] usblp0: removed
[  372.398961][  T346] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  372.538862][  T346] usb 9-1: device descriptor read/64, error -71
[  372.657822][T11206] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  372.691677][   T36] audit: type=1326 audit(1751885460.308:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.1.4109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfa7f8e929 code=0x0
[  372.748424][   T36] audit: type=1400 audit(1751885460.358:634): avc:  denied  { create } for  pid=11216 comm="syz.1.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  372.769321][T11220] xt_NFQUEUE: number of total queues is 0
[  372.779246][  T346] usb 9-1: device descriptor read/64, error -71
[  372.793041][ T8242] Bluetooth: hci0: Frame reassembly failed (-84)
[  372.806330][T11220] Bluetooth: hci0: Frame reassembly failed (-84)
[  372.808004][T11228] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  372.862027][T11241] overlayfs: failed to resolve './bus': -2
[  373.018858][  T346] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  373.148886][  T346] usb 9-1: device descriptor read/64, error -71
[  373.388675][   T36] audit: type=1400 audit(1751885460.998:635): avc:  denied  { setopt } for  pid=11245 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  373.388880][  T346] usb 9-1: device descriptor read/64, error -71
[  373.409320][T11248] overlayfs: failed to clone upperpath
[  373.519053][  T346] usb usb9-port1: attempt power cycle
[  373.521629][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4124'.
[  373.670527][   T36] audit: type=1400 audit(1751885461.288:636): avc:  denied  { mounton } for  pid=11280 comm="syz.7.4132" path="/159/file0" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  373.670542][T11281] fuseblk: Unknown parameter 'fd Hx4ÿ°Ùöý6ðK¶î$Ï'
[  373.788856][   T36] audit: type=1400 audit(1751885461.398:637): avc:  denied  { mount } for  pid=11282 comm="syz.7.4133" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  373.868874][  T346] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  373.889853][  T346] usb 9-1: device descriptor read/8, error -71
[  374.020689][  T346] usb 9-1: device descriptor read/8, error -71
[  374.058855][   T10] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  374.138064][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4135'.
[  374.220383][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  374.228557][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[  374.237279][   T10] usb 8-1: config 1 has an invalid interface number: 59 but max is 0
[  374.245770][   T10] usb 8-1: config 1 has no interface number 0
[  374.252320][   T10] usb 8-1: config 1 interface 59 altsetting 10 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  374.263777][   T10] usb 8-1: config 1 interface 59 altsetting 10 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  374.266918][  T346] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  374.274993][   T10] usb 8-1: config 1 interface 59 altsetting 10 endpoint 0xF has invalid maxpacket 512, setting to 64
[  374.300464][   T10] usb 8-1: config 1 interface 59 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  374.311850][   T10] usb 8-1: config 1 interface 59 altsetting 10 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  374.320471][  T346] usb 9-1: device descriptor read/8, error -71
[  374.323173][   T10] usb 8-1: config 1 interface 59 altsetting 10 has a duplicate endpoint with address 0x6, skipping
[  374.339766][   T10] usb 8-1: config 1 interface 59 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  374.350847][   T10] usb 8-1: config 1 interface 59 altsetting 10 endpoint 0xC has invalid maxpacket 1487, setting to 64
[  374.361904][   T10] usb 8-1: config 1 interface 59 altsetting 10 has a duplicate endpoint with address 0x2, skipping
[  374.372793][   T10] usb 8-1: config 1 interface 59 has no altsetting 0
[  374.381014][   T10] usb 8-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice=1b.9b
[  374.390427][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.398504][   T10] usb 8-1: Product: syz
[  374.403076][   T10] usb 8-1: Manufacturer: <�婧쟽䮑�鳴숩ꔲ킄ᢩ辬졘ꚯ	
[  374.412438][   T10] usb 8-1: SerialNumber: syz
[  374.418868][T11288] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  374.460252][  T346] usb 9-1: device descriptor read/8, error -71
[  374.568988][  T346] usb usb9-port1: unable to enumerate USB device
[  374.626851][T11288] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  374.626878][T11288] rust_binder: Read failure Err(EFAULT) in pid:443
[  374.635186][T11289] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  374.641801][T11289] rust_binder: Read failure Err(EFAULT) in pid:443
[  374.650951][   T10] ftdi_sio 8-1:1.59: FTDI USB Serial Device converter detected
[  374.671674][   T10] ftdi_sio ttyUSB0: unknown device type: 0x1b9b
[  374.683523][   T10] usb 8-1: USB disconnect, device number 21
[  374.700698][   T10] ftdi_sio 8-1:1.59: device disconnected
[  374.743781][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4150'.
[  374.828891][  T498] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  375.148883][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  375.183004][T11345] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  375.183327][T11345] rust_binder: Error while translating object.
[  375.189935][T11345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  375.196141][T11345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[  375.251286][T11353] netlink: 'syz.8.4159': attribute type 32 has an invalid length.
[  375.299879][   T10] usb 2-1: config index 0 descriptor too short (expected 4114, got 18)
[  375.308249][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30
[  375.319106][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  375.333745][   T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  375.337994][T11356] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 197)
[  375.342924][T11356] rust_binder: Error while translating object.
[  375.343039][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.353808][T11356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  375.359956][   T10] usb 2-1: Product: syz
[  375.367993][T11356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446
[  375.377394][   T10] usb 2-1: Manufacturer: syz
[  375.395672][   T10] usb 2-1: SerialNumber: syz
[  375.401292][   T10] usb 2-1: config 0 descriptor??
[  375.483609][T11363] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  375.617906][   T10] usb 2-1: USB disconnect, device number 24
[  376.099669][T11373] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.099760][T11373] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:true
[  376.106233][T11373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  376.115859][T11373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:166
[  376.188323][T11380] rust_binder: validate_parent_fixup: fixup_min_offset=70, parent_offset=63
[  376.198064][T11380] rust_binder: Error while translating object.
[  376.207134][T11380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  376.213457][T11380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453
[  376.236264][T11383] binder: Unknown parameter 'dont_hash'
[  376.291205][T11391] fuseblk: Bad value for 'fd'
[  376.364635][T11394] __vm_enough_memory: pid: 11394, comm: syz.7.4174, bytes: 70373039144960 not enough memory for the allocation
[  376.398843][  T346] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  376.421416][T11396] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  376.436347][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4177'.
[  376.568827][  T346] usb 9-1: Using ep0 maxpacket: 32
[  376.580872][  T346] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  376.594689][  T346] usb 9-1: config 1 has an invalid interface descriptor of length 7, skipping
[  376.611878][  T346] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  376.629682][  T346] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  376.650059][  T346] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  376.668083][  T346] usb 9-1: config 1 has no interface number 1
[  376.681059][  T346] usb 9-1: too many endpoints for config 1 interface 2 altsetting 237: 103, using maximum allowed: 30
[  376.704606][  T346] usb 9-1: config 1 interface 2 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 103
[  376.731208][  T346] usb 9-1: config 1 interface 2 has no altsetting 0
[  376.746186][  T346] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  376.755671][  T346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.763996][  T346] usb 9-1: Product: �
[  376.768191][  T346] usb 9-1: Manufacturer: 릶㇃뱌嗗㱦و麕泵ꎷ혤룠�㊋员�䊢뀘✅盩ᚈ橓鸲䔨婞។턓蜓ɶ馑닼쭶嚩臎漊㹋鄼㒔岠铛皾蚑焎뵨�躒䋃艋떚Жᲇ圂儗듈￢墌貾�簣�ᓯ衾⚋㶃䊬㓿�僧�᪒⮹ȉ艵䆫犷愸��ﯩ于ﮕ젛��뻗⩤듃훒뉪녭�븙鲂�縎⑂銗߼䋮꧎
[  376.801325][  T346] usb 9-1: SerialNumber: 苛䚯틘䙼蓒 㕔মᶰ哉�羟䱡䧸뱙￢㨤唙⠼﭂ꄵ࠹ꈙᜑ⎺Ÿ퓥쬌�≾�む栌ﻃ㼖춹괎畛玶婲㖢䞲ꅚ��滋쌔攖귊ᒑ�ힻ��ᣄ时牢邀讼䣵퇳诊蛘�紟�䗨ꭃ樰纂䠷௅嵨鼉붷瀙↭䠛༜徘탼冣罨�㶟þ�薹䫻窀㱨귫㞺쇧蹲ꕼ⌟�댥习�놅ᾭ⒘笼
[  377.053713][  T346] usb 9-1: USB disconnect, device number 25
[  377.084240][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  377.184692][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11413 comm=syz.6.4181
[  377.308089][T11421] overlayfs: failed to clone upperpath
[  377.566338][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4192'.
[  377.588961][  T346] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  377.636144][T11450] binder: Unknown parameter '~efcontext“…5îå-Aa\…4Oÿ‰X%3·\–C�!NU›ÜS”GÁÖ)x×Ö3‹š¹ð	¾¢›íO:xéùºç¯«fCZ¸_Rü– /Åöî´uR¸)ón�‰5Â3©€zµ”3ÿnÖä0ËÔHþyÄg#ÒFþz'
[  377.688932][T11454] SELinux: security_context_str_to_sid () failed with errno=-22
[  377.733833][T11462] rust_binder: Fixups oob 199 202 280 207
[  377.733880][T11462] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  377.740047][T11462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  377.748355][T11462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469
[  377.750127][  T346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.778353][  T346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  377.787553][  T346] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  377.802908][  T346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  377.816332][  T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.824495][  T346] usb 2-1: Product: syz
[  377.828684][  T346] usb 2-1: Manufacturer: syz
[  377.833545][  T346] usb 2-1: SerialNumber: syz
[  377.840145][  T346] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  377.846953][  T346] cdc_ncm 2-1:1.0: bind() failure
[  378.068845][  T368] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  378.128937][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  378.128954][T11475] SELinux:  Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped).
[  378.128958][   T36] audit: type=1400 audit(1751885465.748:639): avc:  denied  { relabelfrom } for  pid=11474 comm="syz.6.4204" name="NETLINK" dev="sockfs" ino=73565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  378.168707][   T36] audit: type=1400 audit(1751885465.788:640): avc:  denied  { relabelto } for  pid=11474 comm="syz.6.4204" name="NETLINK" dev="sockfs" ino=73565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:cron_spool_t:s0"
[  378.238885][  T368] usb 9-1: Using ep0 maxpacket: 16
[  378.245403][  T368] usb 9-1: config 0 has an invalid interface number: 255 but max is 0
[  378.253622][  T368] usb 9-1: config 0 has no interface number 0
[  378.259746][  T368] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  378.270943][  T368] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  378.284429][  T368] usb 9-1: config 0 interface 255 has no altsetting 0
[  378.292861][  T368] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  378.301977][  T368] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.310117][  T368] usb 9-1: Product: syz
[  378.314293][  T368] usb 9-1: Manufacturer: syz
[  378.318917][  T368] usb 9-1: SerialNumber: syz
[  378.324191][  T368] usb 9-1: config 0 descriptor??
[  378.588256][  T368] hub 9-1:0.255: bad descriptor, ignoring hub
[  378.594519][  T368] hub 9-1:0.255: probe with driver hub failed with error -5
[  378.620630][  T368] usb 9-1: USB disconnect, device number 26
[  378.632579][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.255/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  378.898880][  T305] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  379.050029][  T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  379.061066][  T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.070864][  T305] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  379.079944][  T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.088679][  T305] usb 8-1: config 0 descriptor??
[  379.160607][   T36] audit: type=1400 audit(1751885466.778:641): avc:  denied  { mounton } for  pid=11499 comm="syz.8.4213" path="/68/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  379.468836][   T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  379.620208][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  379.628673][   T10] usb 9-1: config 6 has an invalid interface number: 144 but max is 0
[  379.636965][   T10] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  379.647254][   T10] usb 9-1: config 6 has no interface number 0
[  379.653404][   T10] usb 9-1: config 6 interface 144 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  379.666541][   T10] usb 9-1: config 6 interface 144 has no altsetting 0
[  379.674747][   T10] usb 9-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2
[  379.683879][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.691907][   T10] usb 9-1: Product: syz
[  379.696077][   T10] usb 9-1: Manufacturer: syz
[  379.700750][   T10] usb 9-1: SerialNumber: syz
[  379.705794][  T305] usbhid 8-1:0.0: can't add hid device: -71
[  379.712057][  T305] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  379.722665][  T305] usb 8-1: USB disconnect, device number 22
[  380.142468][   T10] usb 9-1: MIDIStreaming interface descriptor not found
[  380.153331][   T10] usb 9-1: USB disconnect, device number 27
[  380.163083][  T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:6.144/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  380.257500][   T36] audit: type=1400 audit(1751885467.868:642): avc:  denied  { write } for  pid=11513 comm="syz.7.4218" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  380.257586][T11514] random: crng reseeded on system resumption
[  380.281768][   T36] audit: type=1400 audit(1751885467.868:643): avc:  denied  { ioctl } for  pid=11513 comm="syz.7.4218" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  380.312140][   T36] audit: type=1326 audit(1751885467.928:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.4218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x0
[  380.353735][  T305] usb 2-1: USB disconnect, device number 25
[  380.368405][T11518] rust_binder: Write failure EINVAL in pid:791
[  380.406533][T11525] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  380.412908][T11525] rust_binder: Read failure Err(EFAULT) in pid:796
[  380.482000][T11536] rust_binder: Error while translating object.
[  380.488732][T11536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  380.495189][T11536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802
[  380.748430][T11550] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  380.808850][  T305] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  380.828856][  T346] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  380.970054][  T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.978881][  T346] usb 8-1: Using ep0 maxpacket: 32
[  380.980306][  T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  380.987274][  T346] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  380.995264][  T305] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  381.004967][  T346] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.019276][  T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  381.026275][  T346] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  381.035747][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.049712][  T346] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  381.056544][  T305] usb 2-1: Product: syz
[  381.065251][  T349] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  381.069803][  T305] usb 2-1: Manufacturer: syz
[  381.077140][  T346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.081971][  T305] usb 2-1: SerialNumber: syz
[  381.089706][  T346] usb 8-1: Product: �
[  381.096932][  T305] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  381.098614][  T346] usb 8-1: Manufacturer: 뇹涃඗븮톟⣃���휖良澂㛑輦߲��Ჷ뚞窓��ᙗ踓ꨈ尣諑㞿�⚭ꦾ�间⨽䱸쬔ﵲ�麘༆⪡㋣玟눤都髳�ﰓ↜㴜蓘㰉庸ๅᛣ�숎᛼�ᕿ㛖៺⣱茷쵞ٿ㜌ड◥Ꭸ助뺽何�᱊䡆൞彅䯗䲔ﭹ�㟋耰횪뙊酶�ᇜ俀姞�䌪㰽ꆢ왚晕Ժ
[  381.107317][  T305] cdc_ncm 2-1:1.0: bind() failure
[  381.143932][T11538] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  381.238816][  T349] usb 9-1: Using ep0 maxpacket: 8
[  381.245739][  T349] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  381.257098][  T349] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  381.266216][  T349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.274266][  T349] usb 9-1: Product: з
[  381.278368][  T349] usb 9-1: Manufacturer: �⤣澕뺰硢螸掅��耕鸕葋��鯦뀼帮ꨢﶮ㛚莂埲㋻௲뿘┥讗༷�셮慳癎즥�篚鸟꽵⋔�ᇺ髲⛽嵃�挬�䬉�踖訿焦권轚數㛉셛仟㮚จ䓉�ޭ磻꒖ꊠ�ￃ�ﱅ�퉈�锊兦颤±�ꂮ䭚盔�鸢瓃醈뒶�鲉䅎닋픗민嘢
[  381.308835][  T349] usb 9-1: SerialNumber: 쉾㤰��ੀ㲅䭞힩蟦䒨≥����㊞髷�팣阾桟ኟ鑜⓽얜餔㳈嗺霚러ჿ㰌੠
[  381.400161][  T346] usb 8-1: 0:2 : does not exist
[  381.408666][  T346] usb 8-1: USB disconnect, device number 23
[  381.416651][  T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  381.725608][  T349] cdc_ncm 9-1:1.0: bind() failure
[  381.731611][  T349] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  381.738444][  T349] cdc_ncm 9-1:1.1: bind() failure
[  381.744973][  T349] usb 9-1: USB disconnect, device number 28
[  381.995870][T11596] rust_binder: Write failure EFAULT in pid:508
[  382.057565][T11605] netlink: 'syz.6.4249': attribute type 10 has an invalid length.
[  382.072416][T11605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11605 comm=syz.6.4249
[  382.140899][T11616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:516
[  382.140942][T11616] rust_binder: Read failure Err(EFAULT) in pid:516
[  382.189273][   T36] audit: type=1326 audit(1751885469.808:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.7.4259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc33558e929 code=0x0
[  382.218860][   T36] audit: type=1400 audit(1751885469.808:646): avc:  denied  { lock } for  pid=11636 comm="syz.6.4260" path="socket:[74710]" dev="sockfs" ino=74710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  382.250472][T11641] rust_binder: Write failure EFAULT in pid:523
[  382.262393][   T36] audit: type=1400 audit(1751885469.878:647): avc:  denied  { read write } for  pid=11642 comm="syz.8.4262" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  382.295689][   T36] audit: type=1400 audit(1751885469.878:648): avc:  denied  { open } for  pid=11642 comm="syz.8.4262" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  382.392444][T11668] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4271'.
[  383.049724][T11704] rust_binder: Write failure EFAULT in pid:528
[  383.050191][T11704] rust_binder: Write failure EFAULT in pid:528
[  383.149328][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  383.149351][   T36] audit: type=1400 audit(1751885470.768:654): avc:  denied  { execmod } for  pid=11711 comm="syz.7.4285" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  383.185034][   T36] audit: type=1400 audit(1751885470.768:655): avc:  denied  { execute } for  pid=11711 comm="syz.7.4285" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  383.521982][   T10] usb 2-1: USB disconnect, device number 26
[  383.858851][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  383.978902][T11741] netlink: 'syz.7.4295': attribute type 4 has an invalid length.
[  383.988971][T11741] netlink: 'syz.7.4295': attribute type 4 has an invalid length.
[  384.029947][   T10] usb 2-1: config 0 has no interfaces?
[  384.036784][   T10] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  384.045934][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  384.054073][   T10] usb 2-1: SerialNumber: syz
[  384.059392][   T10] usb 2-1: config 0 descriptor??
[  384.238908][  T350] usb 8-1: new full-speed USB device number 24 using dummy_hcd
[  384.266529][T11737] tmpfs: Unknown parameter '�'
[  384.272378][  T349] usb 2-1: USB disconnect, device number 27
[  384.389984][  T350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  384.399983][  T350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 173, changing to 4
[  384.411074][  T350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 13312, setting to 1023
[  384.423536][  T350] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  384.432635][  T350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.440655][  T350] usb 8-1: Product: syz
[  384.444810][  T350] usb 8-1: Manufacturer: syz
[  384.449684][  T350] usb 8-1: SerialNumber: syz
[  384.454955][  T350] usb 8-1: config 0 descriptor??
[  384.461204][  T350] usb 8-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 52
[  384.661142][   T36] audit: type=1400 audit(1751885472.278:656): avc:  denied  { ioctl } for  pid=11740 comm="syz.7.4295" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  384.690240][  T350] usb 8-1: USB disconnect, device number 24
[  384.709870][  T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  384.785452][T11780] rust_binder: Fixups oob 199 202 280 207
[  384.785474][T11780] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  384.791370][T11780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  384.799709][T11780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:818
[  385.260625][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4313'.
[  385.837743][   T36] audit: type=1400 audit(1751885473.448:657): avc:  denied  { create } for  pid=11804 comm="syz.1.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  386.098864][  T346] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  386.122208][T11820] team_slave_1: entered promiscuous mode
[  386.127893][T11820] team_slave_1: entered allmulticast mode
[  386.159628][T11822] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  386.258874][  T346] usb 2-1: Using ep0 maxpacket: 32
[  386.265394][  T346] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[  386.273657][  T346] usb 2-1: config 4 has no interface number 0
[  386.279888][  T346] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.290967][  T346] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.300924][  T346] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  386.309981][  T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.327013][  T346] hub 2-1:4.128: USB hub found
[  386.519800][  T346] hub 2-1:4.128: 2 ports detected
[  386.524957][  T346] hub 2-1:4.128: Using single TT (err -22)
[  386.678830][  T349] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  386.721182][  T346] hub 2-1:4.128: hub_hub_status failed (err = -71)
[  386.727836][  T346] hub 2-1:4.128: config failed, can't get hub status (err -71)
[  386.749767][  T346] usb 2-1: USB disconnect, device number 28
[  386.828834][  T349] usb 8-1: Using ep0 maxpacket: 32
[  386.835201][  T349] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023
[  386.845221][  T349] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  386.855091][  T349] usb 8-1: config 1 interface 0 has no altsetting 0
[  386.863139][  T349] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  386.872415][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.880457][  T349] usb 8-1: Product: syz
[  386.884645][  T349] usb 8-1: Manufacturer: �
[  386.889211][  T349] usb 8-1: SerialNumber: syz
[  386.896127][T11834] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  386.903590][T11834] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  387.290512][T11850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  387.290554][T11850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:844
[  387.312936][T11834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.331037][T11834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.346471][T11857] SELinux: ebitmap: start bit 0 comes after start bit 768
[  387.354749][T11857] SELinux: failed to load policy
[  387.543887][  T349] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8
[  387.556046][  T349] usb 8-1: USB disconnect, device number 25
[  387.563557][  T349] usblp0: removed
[  387.628925][  T346] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  387.674397][T11867] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4342'.
[  387.747462][   T36] audit: type=1400 audit(1751885475.358:658): avc:  denied  { map } for  pid=11868 comm="syz.6.4343" path="socket:[75384]" dev="sockfs" ino=75384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  387.779944][  T346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.790162][  T346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  387.799577][  T346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  387.810829][  T346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  387.823282][  T346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.832490][  T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.840614][  T346] usb 2-1: Product: syz
[  387.844895][  T346] usb 2-1: Manufacturer: syz
[  387.849594][  T346] usb 2-1: SerialNumber: syz
[  387.855427][T11861] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  387.863434][  T346] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  387.870783][  T346] cdc_ncm 2-1:1.0: bind() failure
[  388.060984][T11874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.061260][T11873] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[  388.067757][T11873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  388.075823][T11873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:562
[  389.018705][   T36] audit: type=1400 audit(1751885476.628:659): avc:  denied  { module_load } for  pid=11900 comm="syz.8.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  389.028151][T11901] Invalid ELF header type: 2 != 1
[  389.148637][   T36] audit: type=1326 audit(1751885476.758:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.7.4358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc33558e929 code=0x0
[  389.193616][T11925] netlink: 'syz.8.4360': attribute type 12 has an invalid length.
[  389.199015][T11919] netlink: 'syz.7.4358': attribute type 4 has an invalid length.
[  389.209331][T11919] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4358'.
[  389.245336][T11932] overlay: ./file0 is not a directory
[  389.251527][T11932] overlay: ./file0 is not a directory
[  389.468883][  T346] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[  389.619922][  T346] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  389.631040][  T346] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.640912][  T346] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  389.650018][  T346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.658700][  T346] usb 8-1: config 0 descriptor??
[  389.829264][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4366'.
[  389.865035][T11919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=11919 comm=syz.7.4358
[  389.877867][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=11928 comm=syz.7.4358
[  390.092593][  T346] hid-generic 0003:04F3:0754.0076: unknown main item tag 0x0
[  390.100084][  T346] hid-generic 0003:04F3:0754.0076: unknown main item tag 0x0
[  390.107503][   T36] audit: type=1326 audit(1751885477.718:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.131036][  T346] hid-generic 0003:04F3:0754.0076: unknown main item tag 0x0
[  390.138469][  T346] hid-generic 0003:04F3:0754.0076: unknown main item tag 0x0
[  390.147055][  T346] hid-generic 0003:04F3:0754.0076: failed to start in urb: -90
[  390.155482][   T36] audit: type=1326 audit(1751885477.718:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.162120][T11960] 9pnet_virtio: no channels available for device ./file0
[  390.179142][  T346] hid-generic 0003:04F3:0754.0076: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.7-1/input0
[  390.216689][   T36] audit: type=1326 audit(1751885477.718:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.240340][   T36] audit: type=1326 audit(1751885477.718:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.263931][   T36] audit: type=1326 audit(1751885477.718:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.288089][   T36] audit: type=1326 audit(1751885477.718:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.313816][   T36] audit: type=1326 audit(1751885477.718:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.337494][   T36] audit: type=1326 audit(1751885477.718:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.8.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddad8e929 code=0x7fc00000
[  390.362579][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4379'.
[  390.371609][T11985] bridge_slave_1: left allmulticast mode
[  390.377271][T11985] bridge_slave_1: left promiscuous mode
[  390.383059][T11985] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.390871][T11985] bridge_slave_0: left allmulticast mode
[  390.397881][T11985] bridge_slave_0: left promiscuous mode
[  390.405763][T11985] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.414670][   T10] usb 2-1: USB disconnect, device number 29
[  390.749623][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  390.908817][   T10] usb 2-1: Using ep0 maxpacket: 16
[  390.915237][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.925208][   T10] usb 2-1: New USB device found, idVendor=73d8, idProduct=fdd1, bcdDevice= 0.26
[  390.934300][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.942969][   T10] usb 2-1: config 0 descriptor??
[  391.047388][T12005] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4385'.
[  391.352620][   T10] hid-generic 0003:73D8:FDD1.0077: hidraw1: USB HID v0.eb Device [HID 73d8:fdd1] on usb-dummy_hcd.1-1/input0
[  391.552059][T11990] rust_binder: 11990: no such ref 7
[  391.604939][T11990] rust_binder: Read failure Err(EFAULT) in pid:860
[  391.606927][   T10] usb 2-1: USB disconnect, device number 30
[  392.123499][T12035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  392.123525][T12035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:863
[  392.132976][T12035] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  392.142142][T12035] rust_binder: Read failure Err(EFAULT) in pid:863
[  392.150203][  T350] usb 8-1: USB disconnect, device number 26
[  392.186329][T12043] syz.1.4396(12043): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  392.280559][T12049] rust_binder: Write failure EFAULT in pid:869
[  392.440614][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.446902][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.453764][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.460423][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.466922][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.473810][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.480661][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.487167][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.494099][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.501113][T12066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.629996][T12095] rust_binder: Error in use_page_slow: ESRCH
[  392.630016][T12095] rust_binder: use_range failure ESRCH
[  392.636053][T12095] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  392.641563][T12095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  392.649596][T12095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:893
[  392.686986][T12102] netlink: 'syz.1.4415': attribute type 2 has an invalid length.
[  392.773892][T12109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4418'.
[  392.814138][T12115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:908
[  392.814319][T12115] rust_binder: Error while translating object.
[  392.823649][T12115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  392.829900][T12115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:908
[  392.926032][T12128] kvm: kvm [12127]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[  393.022586][T12139] 9pnet_fd: Insufficient options for proto=fd
[  393.030061][T12141] 9pnet_fd: Insufficient options for proto=fd
[  393.046665][T12146] rust_binder: validate_parent_fixup: fixup_min_offset=70, parent_offset=63
[  393.046692][T12146] rust_binder: Error while translating object.
[  393.055543][T12146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  393.061862][T12146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:929
[  393.229092][T12177] overlayfs: failed to resolve './file1': -2
[  393.326976][T12176] @: renamed from vlan0 (while UP)
[  393.340078][T12176] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4440'.
[  393.391614][T12193] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  393.391844][T12193] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  393.400706][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4440'.
[  393.439348][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4440'.
[  393.685771][T12225] fuse: Unknown parameter '00000000000000000003ÿÿÿÿ0x0000000000000000ÿÿÿÿ0xffffffffffffffffü¦!cÑË9?Ž¬
[  393.685771][T12225] ¹¢4*ƒA¿Ô@1"¸\Í­±fáÏA(©â›¬öÿÿÿÿ'
[  393.702249][T12225] fuse: Unknown parameter '00000000000000000003ÿÿÿÿ0x0000000000000000ÿÿÿÿ0xffffffffffffffffü¦!cÑË9?Ž¬
[  393.702249][T12225] ¹¢4*ƒA¿Ô@1"¸\Í­±fáÏA(©â›¬öÿÿÿÿ'
[  393.719380][T12225] fuse: Unknown parameter '00000000000000000003ÿÿÿÿ0x0000000000000000ÿÿÿÿ0xffffffffffffffffü¦!cÑË9?Ž¬
[  393.719380][T12225] ¹¢4*ƒA¿Ô@1"¸\Í­±fáÏA(©â›¬öÿÿÿÿ'
[  393.798829][   T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  393.954051][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  393.975937][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  393.990243][T12251] fuse: Unknown parameter '4d'
[  393.997334][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  394.017312][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  394.044526][   T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  394.063466][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.072438][   T10] usb 8-1: config 0 descriptor??
[  394.685554][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  394.697818][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  394.709306][   T10] usb 8-1: USB disconnect, device number 27
[  394.950700][   T36] kauditd_printk_skb: 61 callbacks suppressed
[  394.950721][   T36] audit: type=1400 audit(1751885482.568:730): avc:  denied  { create } for  pid=12301 comm="syz.6.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  395.206274][T12320] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.213649][T12320] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.221230][T12320] bridge_slave_0: entered allmulticast mode
[  395.234844][T12320] bridge_slave_0: entered promiscuous mode
[  395.242633][T12340] netlink: 'syz.7.4490': attribute type 4 has an invalid length.
[  395.250934][T12340] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4490'.
[  395.262885][T12320] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.270834][T12320] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.278743][T12320] bridge_slave_1: entered allmulticast mode
[  395.285407][T12320] bridge_slave_1: entered promiscuous mode
[  395.337523][T12320] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.344635][T12320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.351994][T12320] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.359068][T12320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.381607][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.389109][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.399868][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.406973][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.416175][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.423281][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.457903][T12320] veth0_vlan: entered promiscuous mode
[  395.471930][T12320] veth1_macvtap: entered promiscuous mode
[  395.511519][T12354] bridge0: port 3(veth0_to_bridge) entered blocking state
[  395.511820][T12353] rust_binder: got new transaction with bad transaction stack
[  395.518843][T12354] bridge0: port 3(veth0_to_bridge) entered disabled state
[  395.518964][T12353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  395.526533][T12354] veth0_to_bridge: entered allmulticast mode
[  395.536873][T12353] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  395.543873][T12354] veth0_to_bridge: entered promiscuous mode
[  395.562102][T12354] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  395.576516][T12355] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4493'.
[  395.585796][T12354] bridge0: port 3(veth0_to_bridge) entered blocking state
[  395.592972][T12354] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  395.602563][T12355] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  395.729508][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4499'.
[  395.791618][   T36] audit: type=1400 audit(1751885483.408:731): avc:  denied  { listen } for  pid=12381 comm="syz.8.4503" path=2F3134322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  395.847593][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4509'.
[  395.944684][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.956814][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.968984][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.981073][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.993211][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.005342][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.017544][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.029720][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.041884][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.054006][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.139976][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4510'.
[  396.841698][T12424] Invalid ELF header magic: != ELF
[  397.918831][  T349] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  398.044341][   T36] audit: type=1400 audit(1751885485.648:732): avc:  denied  { create } for  pid=12450 comm="syz.8.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  398.088815][  T349] usb 8-1: Using ep0 maxpacket: 32
[  398.098557][  T349] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  398.118835][  T349] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  398.137047][  T349] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  398.146519][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.155286][  T349] usb 8-1: Product: syz
[  398.160047][  T349] usb 8-1: Manufacturer: syz
[  398.165047][  T349] usb 8-1: SerialNumber: syz
[  398.331749][  T305] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  398.385077][  T349] usb 8-1: skipping empty audio interface (v1)
[  398.393671][  T349] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  398.405231][  T349] usb 8-1: USB disconnect, device number 28
[  398.416885][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  398.986991][   T36] audit: type=1400 audit(1751885486.598:733): avc:  denied  { setattr } for  pid=12490 comm="syz.7.4540" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  399.050462][  T305] usb 7-1: unable to get BOS descriptor or descriptor too short
[  399.075723][  T305] usb 7-1: unable to read config index 0 descriptor/start: -71
[  399.086860][  T305] usb 7-1: can't read configurations, error -71
[  399.096021][T12496] overlayfs: failed to clone upperpath
[  399.129289][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4542'.
[  399.236402][T12507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  399.316664][T12512] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  399.316798][T12512] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  399.323673][T12512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  399.332077][T12512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:18
[  399.405458][T12526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[  400.500903][T12604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  400.521426][T12604] rust_binder: Error while translating object.
[  400.548860][T12604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  400.570410][T12604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31
[  400.948821][    C0] net_ratelimit: 79608 callbacks suppressed
[  400.948850][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.963850][    C0] sched: DL replenish lagged too much
[  400.981401][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.993602][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.005765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.017979][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.030057][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.042202][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.054282][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.066406][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.078509][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.299064][T12657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4591'.
[  401.406800][   T36] audit: type=1326 audit(1751885490.021:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.436962][   T36] audit: type=1326 audit(1751885490.021:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.461534][   T36] audit: type=1326 audit(1751885490.021:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.485845][   T36] audit: type=1326 audit(1751885490.021:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.515011][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4593'.
[  401.549181][   T36] audit: type=1326 audit(1751885490.021:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.576341][   T36] audit: type=1326 audit(1751885490.051:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.620688][   T36] audit: type=1326 audit(1751885490.051:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.646391][   T36] audit: type=1326 audit(1751885490.051:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.683424][   T36] audit: type=1326 audit(1751885490.051:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.709219][   T36] audit: type=1326 audit(1751885490.051:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.7.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33558e929 code=0x7ff00000
[  401.863676][T12678] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  401.864146][T12678] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  401.870970][T12678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  401.879254][T12678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:45
[  402.599588][T12698] raw_sendmsg: syz.1.4603 forgot to set AF_INET. Fix it!
[  402.709359][T12712] binder: Unknown parameter '00000000000000000000000'
[  403.108840][  T349] usb 8-1: new low-speed USB device number 29 using dummy_hcd
[  403.238844][  T349] usb 8-1: device descriptor read/64, error -71
[  403.478823][  T349] usb 8-1: device descriptor read/64, error -71
[  403.649319][T12751] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  403.649353][T12751] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  403.718848][  T349] usb 8-1: new low-speed USB device number 30 using dummy_hcd
[  403.868846][  T349] usb 8-1: device descriptor read/64, error -71
[  404.109248][  T349] usb 8-1: device descriptor read/64, error -71
[  404.219325][  T349] usb usb8-port1: attempt power cycle
[  404.558848][  T349] usb 8-1: new low-speed USB device number 31 using dummy_hcd
[  404.579950][  T349] usb 8-1: device descriptor read/8, error -71
[  404.634908][T12777] overlayfs: conflicting options: verity=require,redirect_dir=nofollow
[  404.710023][  T349] usb 8-1: device descriptor read/8, error -71
[  404.958861][  T349] usb 8-1: new low-speed USB device number 32 using dummy_hcd
[  404.979965][  T349] usb 8-1: device descriptor read/8, error -71
[  405.110345][  T349] usb 8-1: device descriptor read/8, error -71
[  405.219400][  T349] usb usb8-port1: unable to enumerate USB device
[  405.528448][T12794] 9pnet_fd: Insufficient options for proto=fd
[  405.672868][  T305] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  405.673866][T12800] overlayfs: failed to clone upperpath
[  405.879088][  T305] usb 7-1: Using ep0 maxpacket: 8
[  405.920279][  T305] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  405.932617][  T305] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  405.939700][T12810] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4641'.
[  405.958815][    C0] net_ratelimit: 82229 callbacks suppressed
[  405.958839][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.976925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.989038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.001227][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.013365][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.025533][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.037670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.049836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.061990][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.074140][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.696191][   T36] kauditd_printk_skb: 61 callbacks suppressed
[  406.696212][   T36] audit: type=1400 audit(1751885495.311:805): avc:  denied  { write } for  pid=12825 comm="syz.6.4647" path="socket:[80508]" dev="sockfs" ino=80508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  406.747884][   T36] audit: type=1400 audit(1751885495.361:806): avc:  denied  { read write } for  pid=12828 comm="syz.6.4648" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  406.789923][T12833] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  406.796789][   T36] audit: type=1400 audit(1751885495.361:807): avc:  denied  { open } for  pid=12828 comm="syz.6.4648" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  407.230190][T12853] overlayfs: failed to clone upperpath
[  407.240041][T12854] 9pnet_fd: Insufficient options for proto=fd
[  407.246453][T12855] 9pnet_fd: Insufficient options for proto=fd
[  408.140099][  T305] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  410.968798][    C1] net_ratelimit: 113630 callbacks suppressed
[  410.968823][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  410.968825][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.968891][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.974924][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  410.987039][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.998958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  411.010897][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.023388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  411.035508][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.048833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  412.079682][T12864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  412.079782][T12865] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  412.110021][  T305] usb 7-1: string descriptor 0 read error: -71
[  415.165443][  T305] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.978800][    C1] net_ratelimit: 154603 callbacks suppressed
[  415.978826][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.978868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.984938][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.996854][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.008838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  416.020878][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.032711][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  416.044600][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.056562][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.068640][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.050785][  T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.590635][  T305] usb 7-1: can't set config #1, error -71
[  419.731035][  T305] usb 7-1: USB disconnect, device number 56
[  420.988815][    C0] net_ratelimit: 148996 callbacks suppressed
[  420.988840][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.988871][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.995005][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.006898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.018798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.030736][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.042814][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.054733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  421.066641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.078569][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.130994][T12870] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.138095][T12870] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.170096][T12870] bridge_slave_0: entered allmulticast mode
[  422.199156][T12870] bridge_slave_0: entered promiscuous mode
[  422.299530][T12870] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.319989][T12870] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.334451][T12870] bridge_slave_1: entered allmulticast mode
[  422.359292][T12870] bridge_slave_1: entered promiscuous mode
[  425.998795][    C1] net_ratelimit: 144264 callbacks suppressed
[  425.998820][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.998839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.004919][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.016990][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.028865][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  426.040728][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.052690][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.064761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.076649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.088523][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.008778][    C0] net_ratelimit: 139107 callbacks suppressed
[  431.008801][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.008831][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.014910][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.026883][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.038980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.051090][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  431.062761][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.074694][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.086752][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.098597][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.018776][    C1] net_ratelimit: 116034 callbacks suppressed
[  436.018808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.018838][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.024955][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.036900][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.048700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.060708][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.072917][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  436.084670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.096469][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.108492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.028784][    C0] net_ratelimit: 117807 callbacks suppressed
[  441.028808][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.028847][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.034913][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.046873][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.058954][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.070977][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  441.082723][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.094647][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.106725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.118563][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.038861][    C0] net_ratelimit: 119595 callbacks suppressed
[  446.038885][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.038955][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  446.044982][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.056965][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.069039][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.080880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.092792][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.104730][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  446.116765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.128805][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  451.048796][    C0] net_ratelimit: 119492 callbacks suppressed
[  451.048820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.048844][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  451.054972][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.067092][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  451.078763][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.090679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.102755][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.114596][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.126500][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.138457][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.058790][    C0] net_ratelimit: 119525 callbacks suppressed
[  456.058814][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.058925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  456.064963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.076803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.088820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.100797][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.112728][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.124563][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.136556][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.148772][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  461.068846][    C0] net_ratelimit: 119695 callbacks suppressed
[  461.068870][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.068887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  461.068939][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.074975][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.086992][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.099101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.110958][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.122831][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.135006][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  461.146844][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.078762][    C1] net_ratelimit: 119175 callbacks suppressed
[  466.078787][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.078804][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.085098][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  466.096885][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.108768][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.120829][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.132816][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.145689][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.157512][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.169621][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.088797][    C1] net_ratelimit: 117610 callbacks suppressed
[  471.088821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  471.088834][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.088899][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.094996][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.107176][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.119217][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.131132][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.142996][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  471.155104][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.167226][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  476.098775][    C0] net_ratelimit: 117390 callbacks suppressed
[  476.098799][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.098885][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  476.104894][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.116886][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.128964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.140850][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.152741][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.164771][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.176833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.188883][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  481.108826][    C1] net_ratelimit: 118715 callbacks suppressed
[  481.108851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.108855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.108921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.114936][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  481.127036][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.139145][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  481.150858][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.162734][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.174796][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.186894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.118756][    C0] net_ratelimit: 118518 callbacks suppressed
[  486.118780][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.119012][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  486.124927][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.136789][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.148797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.160788][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.172732][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.184547][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  486.196550][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.208798][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  491.128769][    C0] net_ratelimit: 117726 callbacks suppressed
[  491.128794][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.128853][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  491.134968][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.146818][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.158834][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.170820][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.182773][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.194562][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  491.206649][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  491.218843][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  496.138779][    C0] net_ratelimit: 117674 callbacks suppressed
[  496.138805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.138862][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  496.144969][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.156932][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.168962][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.180970][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.192898][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.204705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  496.216752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  496.228958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  501.148779][    C1] net_ratelimit: 118683 callbacks suppressed
[  501.148804][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  501.148832][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.154884][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.166924][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.178925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.190894][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.202674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  501.214739][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  501.226956][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  501.238742][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.158769][    C0] net_ratelimit: 119108 callbacks suppressed
[  506.158793][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.158865][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  506.164944][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.176869][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.188879][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.200894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.212809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.224614][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  506.236624][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  506.248798][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  511.168814][    C0] net_ratelimit: 119419 callbacks suppressed
[  511.168838][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.168887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  511.174935][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.186911][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.199003][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.210847][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.222749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.234687][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  511.246753][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  511.258832][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  516.178732][    C1] net_ratelimit: 117884 callbacks suppressed
[  516.178756][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.178809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.184868][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.196759][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.208746][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  516.220791][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.232834][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  516.244511][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.256522][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  516.268562][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.188775][    C0] net_ratelimit: 116246 callbacks suppressed
[  521.188799][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.188840][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  521.194995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.206845][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.218842][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.230848][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.242779][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.254711][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  521.266739][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  521.278910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  526.198795][    C1] net_ratelimit: 119116 callbacks suppressed
[  526.198819][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.198844][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.204900][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  526.217035][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.228990][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  526.240705][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.252660][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.264739][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.276668][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  526.288550][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.208771][    C0] net_ratelimit: 118929 callbacks suppressed
[  531.208796][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.208803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.208884][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.214957][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.226784][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  531.238752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.250805][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  531.262833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  531.274745][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  531.286549][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.218775][    C0] net_ratelimit: 121187 callbacks suppressed
[  536.218800][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.218806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  536.218966][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  536.224920][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.237022][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  536.248887][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.260760][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.272695][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.284704][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.296753][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  536.529714][   T37] INFO: task syz.8.4656:12855 blocked for more than 123 seconds.
[  536.537509][   T37]       Not tainted 6.12.30-syzkaller-ge87018c5f9d0 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  537.070838][   T36] audit: type=1400 audit(1751885625.441:808): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1927]" dev="pipefs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  537.730762][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  538.501646][ T8242] bridge_slave_1: left allmulticast mode
[  538.629247][   T37] task:syz.8.4656      state:D stack:0     pid:12855 tgid:12852 ppid:10143  flags:0x00004000
[  538.759555][ T8242] bridge_slave_1: left promiscuous mode
[  538.959079][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.029875][   T37] Call Trace:
[  539.033221][   T37]  <TASK>
[  539.036179][   T37]  __schedule+0x145b/0x1f10
[  540.641243][   T37]  ? __sched_text_start+0x10/0x10
[  540.646352][   T37]  ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10
[  540.881056][   T37]  ? __call_rcu_common+0x40b/0x6f0
[  540.886273][   T37]  schedule+0xc6/0x240
[  541.228765][    C0] net_ratelimit: 119949 callbacks suppressed
[  541.228790][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.228815][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  541.234937][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.246866][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  541.258963][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.270914][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.283015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.294844][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.306719][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  541.318678][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  541.571013][   T37]  schedule_timeout+0xb2/0x3a0
[  541.575874][   T37]  ? __cfi_schedule_timeout+0x10/0x10
[  542.221126][   T37]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  542.226850][   T37]  ? __percpu_ref_switch_mode+0x345/0x5f0
[  542.292590][   T37]  wait_for_common+0x359/0x630
[  542.297534][   T37]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  542.799109][   T37]  ? __kasan_check_write+0x18/0x20
[  542.804392][   T37]  ? shrink_dentry_list+0x4c7/0x4f0
[  542.878972][   T37]  ? __kasan_check_write+0x18/0x20
[  542.884179][   T37]  ? namespace_unlock+0x1ec/0x3d0
[  542.940613][   T37]  ? umount_tree+0xf08/0xf70
[  542.945376][   T37]  ? umount_tree+0xf70/0xf70
[  546.238744][    C0] net_ratelimit: 125986 callbacks suppressed
[  546.238769][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.238779][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:eb:e0:db:15:79, vlan:0)
[  546.238831][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.244879][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.256884][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.268917][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.280738][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  546.292686][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.304738][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  546.316692][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)